Privacy Policy
Last updated:
At OctaHealthHub we take the protection of your personal data seriously. This policy explains how we process the personal data collected through our website, in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where applicable, the EU General Data Protection Regulation (“GDPR”).
1. Data controller
Your personal data is processed by OCTA GRUP SAĞLIK VE BİLİŞİM HİZMETLERİ A.Ş. (“OctaHealthHub”) as the data controller.
- Registered address: [Registered address in the trade registry — to be confirmed]
- MERSİS no: [to be completed]
- Email: info@octahealthhub.com
- Phone: +90 533 488 75 65
2. What personal data we process
Through the forms on our website, we process the information you send us:
- Identity details: first name and surname
- Contact details: email address and phone number
- The treatment area you are interested in and any information you share in your message
- The page from which you submitted the form and the time of submission
Health information you may share in your message is special category personal data and is processed only with your explicit consent. Please do not share more health information than necessary through the form; details will be discussed securely with your coordinator during treatment planning.
If you give your consent, we also collect statistical data about how the website is used through cookies (see the Cookies section).
3. Why we process your data
- To respond to your treatment and consultation request and to contact you
- To prepare a suitable treatment plan, travel and accommodation arrangements
- To coordinate with our partner healthcare institutions and hotels in line with your request
- To fulfil our legal obligations
- If you consent, to measure website usage and improve our services
4. Legal basis and method of collection
Your personal data is collected electronically through the forms and cookies on our website, and is processed on the following legal grounds:
- The processing is necessary for entering into or performing a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b))
- Compliance with our legal obligations (KVKK Art. 5/2-ç; GDPR Art. 6(1)(c))
- Our legitimate interests, provided they do not override your fundamental rights (KVKK Art. 5/2-f; GDPR Art. 6(1)(f))
- Your explicit consent for health data, transfers abroad and analytics cookies (KVKK Art. 6 and 9; GDPR Art. 9(2)(a))
5. Who we share your data with
Your personal data may be shared, only for the purposes above, with:
- Partner hospitals and healthcare professionals who will carry out your treatment, at your request
- Partner hotels and transfer providers for accommodation and transport arrangements
- Cloudflare, Inc. — website hosting and database service
- Resend, Inc. — email delivery service
- Google LLC — web analytics, only if you consent
- Competent public authorities, where required by law
Some of our service providers operate servers outside Turkey (mainly in the United States and the European Union). Your personal data may therefore be transferred abroad in accordance with Article 9 of the KVKK, based on the explicit consent you give through the form.
6. How long we keep your data
We keep your personal data for as long as necessary for the purpose of processing and for the periods required by law. Form submissions are kept for [2 years from the last contact — to be decided by the company]; after this period they are deleted, destroyed or anonymised.
7. Cookies
Our website does not use any non-essential cookies without your consent.
- Essential: your cookie choice is stored in your browser (localStorage). This record contains no personal data.
- Analytics and marketing: measurement tools loaded through Google Tag Manager. These run only if you choose “Accept”.
You can change your choice at any time using the “Cookie settings” link at the bottom of every page. The map on our contact page is loaded from Google Maps only when you click “Show map”.
8. Your rights
Under Article 11 of the KVKK and, where applicable, the GDPR, you have the right to:
- Learn whether your personal data is processed and request information about it
- Learn the purpose of processing and whether it is used accordingly
- Know the third parties in Turkey or abroad to whom your data is transferred
- Request correction of incomplete or inaccurate data
- Request deletion or destruction of your data
- Request that corrections and deletions be notified to third parties who received your data
- Object to a result against you arising exclusively from automated processing
- Request compensation for damages arising from unlawful processing
- Receive your data in a portable format and restrict or object to processing (GDPR)
- Withdraw your consent at any time
9. How to contact us
You can send requests about your rights, together with information that verifies your identity, to info@octahealthhub.com or to [KEP / postal address — to be completed]. We will respond free of charge within 30 days at the latest.
If your request is rejected or you find our response insufficient, you may lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or, if you are in the EU, with your local data protection authority.
10. Changes to this policy
We may update this policy when necessary. The current version is always published on this page.