Privacy Policy

Last updated: 2 August 2026

Who is responsible for your data

Op. Dr. Muhammed Revaha Kırtıllı Erdem Hospital Güneşli Mah. Fevzi Çakmak Cad. No: 72-74 Bağcılar, Istanbul, Türkiye

I am the data controller for the information you send through this website and through the messaging channels listed on it.

What I collect

When you use the contact form: your name, email address, country, age, the procedure you are considering, an approximate date if you give one, and whatever you write in the message field.

Which page you were reading before you wrote to me — the page path only, not the full address, and only when it is a page on this site. It tells me which parts of the site are actually useful. It is not stored on your device and it is not used to identify you. If you arrived from another website, only the fact that you came from elsewhere is recorded — never which site it was.

When you message me on WhatsApp: the content of your messages and your phone number. WhatsApp is operated by Meta and messages pass through their infrastructure.

If you later send photographs or medical documents: these are requested only after this notice has been given and your explicit consent recorded, and through the channel I specify — not through a social media inbox.

When you visit the site: basic technical data — IP address, browser, pages visited — through analytics. No advertising cookies are used.

Health data — read this part

Information about your body, your medical history, your medication and your photographs is special category data under UK and EU data protection law, and health data under Turkish law. It receives higher protection.

I process it on the basis of your explicit consent, which you give when you submit the form or continue a conversation after receiving this notice. You can withdraw that consent at any time, and withdrawal does not affect anything done before it.

If you become a patient, the legal basis changes: from that point your records are processed for the purposes of medical care and are subject to the retention rules for medical records in Türkiye.

Where your data goes

Your data is processed in Türkiye. Türkiye is not currently covered by a UK or EU adequacy decision, which means transfers of your personal data from the UK or the EEA to me require a specific legal basis.

The legal basis for that transfer is your explicit consent, which you give when you submit the form or when you continue a conversation after reading this notice. You are entitled to know what that means. Turkish law gives you data protection rights, but they are not identical to the ones you have under UK or EU law, and the routes for enforcing them are different. If you would rather your information did not leave your country, do not use the form — and I will not be able to assess or treat you, because I practise in Türkiye.

Who else sees it

• Erdem Hospital and the clinical team involved in your care, if you proceed to surgery
• The anaesthetist and operating theatre staff, for the same reason
• Technical providers who host this site and deliver its email — they process data on my instructions and cannot use it for their own purposes
• Meta, if you contact me through WhatsApp or Instagram
• Google, as the contact email is hosted on a Google service

I do not sell your data, I do not share it with advertisers, and I do not pass it to agencies or intermediaries.

How long I keep it

Enquiries that do not become patients: deleted within twelve months, and often sooner. If you ask me to delete yours earlier, I do.

Patient records: retained for the period required by Turkish medical records legislation.

Photographs: kept with your record. If you gave separate consent for their use in any other context, that consent is recorded separately and can be withdrawn separately.

Your rights

You can ask me to:

• give you a copy of what I hold
• correct anything inaccurate
• delete your data, where there is no legal obligation to retain it
• restrict or object to processing
• transfer your data to another provider
• withdraw consent, at any time

Write to me through the contact form and I will respond within one month.

If you are not satisfied you can complain to your national supervisory authority — in the UK, the Information Commissioner’s Office; in Romania, ANSPDCP; in Türkiye, the KVKK Board.

Children

This site and these services are for adults. I do not knowingly collect data from anyone under 18 through this website.

Changes

If this notice changes materially, the date at the top changes and the previous version remains available on request.