Last Updated: June 15, 2025
Veramedicalservices.com (“we”) is committed to safeguarding the privacy of our website visitors and registered users of the website. This Privacy Policy sets out how we treat your personal data when we act as the data controller, in accordance with the Turkish Personal Data Protection Law (KVKK No. 6698) and, where applicable, the EU General Data Protection Regulation (GDPR) 2016/679.
Definitions
Lawful Grounds
What Data Do We Collect?
How Do We Collect Your Data?
How Will We Use Your Data?
Sharing Collected Data
How Do We Store and Secure Your Data?
Retention of Data
Access to Your Data
What Are Your Data Protection Rights?
Marketing and Analytics
Cookies and Other Tracking Technologies
Privacy Policies of Other Websites
Changes to Our Privacy Policy
How to Contact Us
How to Contact the Appropriate Authorities
“Personal Data” refers to any information collected or processed by or in connection with this website or platform that directly or relates to you, such as your name, IP address, or user preferences.
“Lawful Grounds” are the legal bases under GDPR or KVKK for processing your personal data. Without lawful grounds, no one, including us, may process your personal data.
For registered platform users or website visitors, the lawful grounds for processing your Collected Information is our legitimate interest in understanding user interactions with the Platform and improving our products and services, as detailed in the sections on data collection and use.
We may collect, store, and use the following types of information and personal data (“Collected Information”):
Information about your visits to and use of our Platform and website: IP address, geographical location, browser type, referral source, visit duration, and page views.
Data about transactions conducted with us on the Website: information related to services requested.
Contact information (where provided): first and last name, title, middle name, address, postcode.
Connection data: IP address, tarayıcı türü, kullanıcı aracı.
Localisation data: geographical location.
Application usage data: referral source, ziyaret süresi, sayfa görüntüleme sayısı.
Information about clinic inquiries.
Information about clinic reviews.
Email communication data via our platform (if applicable).
Phone call and recording data via our platform (if applicable).
WhatsApp or SMS communication data via our platform (if applicable).
Information provided for registration, subscriptions, or email notifications: first and last name, email address, phone number.
Most data is provided directly by you. We collect and process data when you:
Use our website to contact or review a clinic.
Register on the Platform or website, subscribe to services, or opt for email notifications.
Voluntarily complete surveys or provide feedback via social media or email.
Clinics may add patient data directly to our CRM system.
Collected Information is used to:
Create inquiries for clinics you select.
Provide public feedback on clinics you review.
Administer and enhance the Platform’s usability.
Personalise your browsing experience (e.g., localising content to match your country).
With consent, send marketing communications about our services or selected third-party businesses via email or similar technology (using Campaign Monitor).
Provide statistical, non-identifying user data to companies (using YesWare and Google Analytics).
Track responses to inquiries made through our system (response content restricted; using Mailgun for emails, Twilio for calls).
Collect feedback on our services via independent third parties (Trustpilot).
We may share your Collected Information:
Third-party clinics you select via the website or our User Support Team. Only provided data is shared. We send you details of selected clinics at inquiry creation; contact us for a copy. We are not responsible for third-party privacy policies’.
With third-party sub-processors for data centre hosting (AWS), database hosting (AWS, hosting (AWS)), dialer infrastructure (Twilio), email sync (Mailgun), and sales/marketing operations (Campaign Monitor, YesWare, Google Analytics, Trustpilot).
With Stripe for payment services, securely sharing your email address for fraud detection and service improvement. See Stripe’s Privacy policy Policy. We do not store payment data.
With our partner, [Partner Name], under an NDA, to respond to inquiries and maintain clinic data.
As required by law.
In connection with legal proceedings.
To establish, exercise, or defend our legal rights (e.g., fraud prevention).
In response to lawful requests from public authorities.
We take reasonable precautions to prevent loss, misuse, or alteration of your personal data. Our website uses HTTPS for secure data transmission. All personal data is stored on secure servers hosted by AWS in Türkiye, Turkey. Sensitive data is encrypted, and access is restricted. Personally identifiable data used for testing or training is anonymized.
You are responsible for keeping your passwords confidential. We do not request passwords.
We retain essential personal data until you or an authorized representative requests its deletion. Contact us to request access, rectification, transfer, or erasure of your data.
We conduct regular audits to purge irrelevant or fulfilled-purpose data.
Server logs are purged after one year.
Upon request, we provide access to your personal data and allow correction or deletion. See our website’s “Contact Us” section for contact details.
Platform users are responsible for updating their data data for purposes like contact or billing information.
You have the right to:
Correct inadequate, incomplete, or incorrect data.
Access your personal data (including a copy) and details on its processing.
Withdraw consent for consent-based processing, without affecting prior lawfulness.
Request erasure of your data under certain conditions.
As of May 25, 2018, additional rights:
Data portability: Receive provided data in a structured, commonly used, machine-readable format for transfer to another controller, where processing is consent-based or contract-based and automated.
Right to erasure: Request data deletion under specific circumstances (e.g., withdrawn consent, unlawful processing).
Restriction of processing: Restrict processing (e.g., storage only) if you contest accuracy, processing is unlawful, or you need data for legal claims.
Object to processing: Object to processing based on legitimate interests unless we demonstrate overriding interests or legal needs.
Object to direct marketing: Object to marketing use of your data.
Lodge a complaint with the supervisory authority in your residence, workplace, or alleged infringement location if data processing violates KVKK or GDPR.
Contact us to exercise these rights. We respond within one month.
You can opt out of marketing emails at any time. Click here to unsubscribe.
We use Google Analytics to analyze traffic and user behavior, collecting anonymized data (if accepted): IP address, date, time, click path, browser/device info, pages visited, interactions, referrals, and approximate geolocation. Google Analytics data isn’t linked to other Google data. See Google’s Privacy Policy.
Google Ads promotes our business, tracking ad clicks, client IDs, and session IDs without personal data. Opt out via Google’s Ad Settings](https://adssettings.google.com).
With Ad Personalization cookies and clinic inquiries, we share hashed email and phone numbers (if provided) with Google Ads for personalized ads. Opt out by declining cookies or visiting Google Ads Settings. See Google’s Ads Personalization.
We use cookies, text files sent to your browser to identify and track it. Cookies contribute to Collected Information. Advertisers and service providers may also send cookies.
Most browsers allow cookie rejection (e.g., in Internet Explorer, go to “Tools” > “Internet” OptionsOptions” > “PrivacyPrivacy” and select “Block” allAll CookiesCookies”). This may impact usability.
Third-party providers may use cookies to monitor and analyze interactions to improve services.
See our Cookies Policy or visit allaboutcookies.org for details.
Our Platform links to third-party sites. We are not responsible for their privacy policies or data practices.
We regularly review and update this Privacy Policy, posted here. Last updated: June 2025.
For questions about our Privacy Policy, your data, or to exercise data protection rights, contact us at info@veramedicalservices.com.
To report complaints or if concerns aren’t addressed satisfactorily, contact the Turkish Personal Data Protection AgencyAuthority (KVKK): www.kvkk.gov.tr.