Privacy Policy

Last updated: 22 July 2026

This Privacy Policy explains how Kotul Sağlık Turizmi ve Dijital Reklamcılık Ltd. Şti. (“Kotul Healthcare”, “we”, “us”) collects, uses, and protects your personal data when you contact us or use our website kotulhealthcare.com. We are committed to protecting your privacy in line with the EU General Data Protection Regulation (GDPR), the UK GDPR, and the Turkish Personal Data Protection Law No. 6698 (KVKK).

1. Who We Are (Data Controller)

The data controller is Kotul Sağlık Turizmi ve Dijital Reklamcılık Ltd. Şti., Kışla Mah. Şehit Binbaşı Cengiz Toytunç Cad. Antelsan İş Merkezi No: 118 İç Kapı No: 401, Muratpaşa/Antalya, Türkiye. For any privacy question or to exercise your rights, contact us at info@kotulhealthcare.com.

2. What Data We Collect

Identity & contact data: name, phone number, email address, country of residence.
Health data (special category): photos of your teeth or mouth, dental/medical history, X-rays or CT scans, treatment preferences and any medical information you choose to share with us.
Communication data: messages you send via our contact forms, WhatsApp, email or phone, and our correspondence with you.
Booking & travel data: travel dates, accommodation and transfer details needed to arrange your treatment.
Technical data: IP address, browser type, and usage data collected via cookies and similar technologies.

3. How We Collect Your Data

We collect data directly from you when you fill in a form on our website, message us on WhatsApp, email or call us, or send us photos and records for an assessment. We also collect technical data automatically through cookies when you browse our website.

4. Why We Use Your Data & Legal Basis

To assess your case and prepare a treatment plan and quote — based on your consent and steps taken at your request prior to entering a contract.
To process health data (photos, medical history) — based on your explicit consent, which you may withdraw at any time.
To arrange and deliver treatment, accommodation and transfers — for the performance of our contract with you.
To communicate with you and provide aftercare — based on our legitimate interests and/or contract.
To improve our website and services — based on our legitimate interests.
To comply with legal and medical record-keeping obligations — based on legal obligation.

5. A Note on Health Data

Photos of your teeth and any medical information are “special category” / “sensitive” personal data. We process them only with your explicit consent, solely to assess your case, plan your treatment, and provide care. They are shared only with the clinical team involved in your treatment.

6. Sharing Your Data

We do not sell your personal data. We share it only where necessary with:

The dentists, surgeons and clinical staff providing your treatment;
Service providers who help us operate (e.g. website hosting, email delivery, secure messaging via WhatsApp/Meta) under appropriate safeguards;
Hotels and transfer providers, only with the details needed to arrange your stay;
Authorities or professional advisers where required by law.

7. International Transfers

As we are based in Türkiye and you may contact us from the EU, UK or elsewhere, your data may be transferred to and processed in Türkiye. Where we transfer data internationally, we take appropriate steps (such as your explicit consent and contractual safeguards) to protect it.

8. How Long We Keep Your Data

We keep your personal and health data only as long as necessary for the purposes above, including any medical record-keeping and warranty periods, after which it is securely deleted or anonymised. If you only enquire and do not proceed, we keep your enquiry data for a limited period unless you ask us to delete it sooner.

9. Your Rights

Depending on your location (GDPR / UK GDPR / KVKK), you have the right to access, correct, delete, restrict or object to the processing of your data, to data portability, and to withdraw consent at any time. To exercise any right, contact us at info@kotulhealthcare.com. You also have the right to complain to your local data protection authority.

10. Cookies

Our website uses cookies to function properly and to understand how it is used. You can control cookies through your browser settings.

11. Security

We use appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. No method of transmission is completely secure, but we work to protect your information at all times.

12. Children

Our services are intended for adults. Where treatment involves a minor, we process their data only with the consent of a parent or legal guardian.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with its update date.

14. Contact

Kotul Sağlık Turizmi ve Dijital Reklamcılık Ltd. Şti. — Kışla Mah. Şehit Binbaşı Cengiz Toytunç Cad. Antelsan İş Merkezi No: 118 İç Kapı No: 401, Muratpaşa/Antalya, Türkiye · info@kotulhealthcare.com · WhatsApp: +90 543 215 68 85.