PRIVACY POLICY

Istanbul Stem Cell Clinic
Istanbul, Republic of Türkiye
Effective Date: [23-02-2025]

1. INTRODUCTION

Istanbul Stem Cell Clinic (“Clinic”, “we”, “our”, “us”) respects the privacy and confidentiality of our patients and website visitors.

This Privacy Policy explains how we collect, process, store, transfer, and protect personal data in accordance with:

Turkish Personal Data Protection Law (KVKK No. 6698)
Where applicable, the EU General Data Protection Regulation (GDPR)

By accessing our website, submitting medical information, contacting us, or undergoing treatment, you consent to the practices described in this Privacy Policy.

If you do not agree, you should not provide personal data or use our services.

2. DATA CONTROLLER

The data controller responsible for processing personal data is:

Istanbul Stem Cell Clinic
Istanbul, Republic of Türkiye
Website: www.istanbulstemcell.com
WhatsApp: +90 534 856 92 92

3. TYPES OF PERSONAL DATA COLLECTED

We may collect the following categories of personal data:

3.1 Identification Information

Full legal name
Date of birth
Nationality
Passport or identification details (when medically required)

3.2 Contact Information

Email address
Phone / WhatsApp number
Residential address
Emergency contact details

3.3 Medical & Health Data (Special Category Data)

Medical history
Current diagnoses
Imaging (MRI, CT, X-ray)
Laboratory results
Medication use
Allergies
Treatment records and outcomes

Health data is classified as sensitive personal data and is handled with enhanced security measures.

3.4 Financial Information

Payment confirmations
Billing information
Transaction records

We do not store full credit card numbers on our servers.

3.5 Technical & Website Data

When you visit our website, we may collect:

IP address
Browser type
Device information
Website usage data
Cookies and tracking technologies

4. PURPOSES OF DATA PROCESSING

We process personal data strictly for the following purposes:

Medical evaluation and eligibility assessment
Treatment planning and execution
Appointment scheduling
Coordination with licensed hospitals and laboratories
Payment processing and invoicing
Legal and regulatory compliance
Internal quality control
Responding to patient inquiries
Website performance improvement

We do not sell or rent personal data.

5. LEGAL BASIS FOR PROCESSING

We process personal data based on:

Explicit patient consent
Performance of a medical service agreement
Compliance with legal obligations under Turkish healthcare law
Legitimate interest in providing healthcare services

Sensitive health data is processed exclusively for medical diagnosis, treatment, and healthcare management purposes.

6. INTERNATIONAL DATA TRANSFERS

As we serve international patients, personal data may be transferred across borders.

By submitting personal data, you acknowledge that:

Data processing occurs in Türkiye
Turkish law governs medical services
Data protection standards may differ from your home country

We implement reasonable safeguards to protect transferred data.

7. DATA SHARING

We may share personal data only with:

Licensed physicians involved in your care
Partner hospitals or surgical facilities
Laboratory providers
Payment processors
IT service providers under confidentiality agreements
Government authorities when legally required

All third parties are contractually required to maintain confidentiality.

8. DATA RETENTION

Personal and medical data will be retained:

As long as necessary to fulfill treatment purposes
As required by Turkish healthcare regulations
For legal defense and compliance purposes

We reserve the right to archive records where legally necessary.

9. DATA SECURITY

We implement appropriate technical and organizational safeguards including:

Secure servers
Restricted staff access
Confidentiality agreements
Encrypted communication channels

However, no internet transmission can be guaranteed 100% secure.

By submitting data online, you acknowledge this inherent risk.

10. PATIENT RIGHTS

Under applicable data protection laws, you may have the right to:

Request access to your personal data
Request correction of inaccurate information
Request deletion where legally permissible
Restrict processing
Withdraw consent at any time

Requests must be submitted in writing using our contact information.

Certain medical record retention obligations may limit deletion requests.

11. COOKIES POLICY

Our website may use cookies to:

Improve website functionality
Analyze traffic
Enhance user experience

You may disable cookies in your browser settings; however, certain features may not function properly.

12. THIRD-PARTY LINKS

Our website may contain links to third-party websites.

We are not responsible for the privacy practices of external websites.

13. MINORS

Our services are not directed to individuals under 18 years of age without parental or legal guardian consent.

For pediatric cases, consent must be provided by a legal guardian.

14. LIMITATION OF LIABILITY RELATED TO DATA

To the maximum extent permitted by law, Istanbul Stem Cell Clinic shall not be liable for:

Cyberattacks beyond reasonable control
Third-party data breaches
Force majeure events
Unauthorized access resulting from patient negligence

15. POLICY UPDATES

We reserve the right to update this Privacy Policy at any time.

The updated version will be posted on our website with a revised effective date.

Continued use of our services constitutes acceptance of updates.

16. CONTACT INFORMATION

For privacy-related inquiries, requests, or complaints, please contact: