Privacy Policy

Who we are & how to reach us

The data controller responsible for your personal information is the clinic of Op. Dr. Arda Pelen, located at Metroport Busidence, Bahçelievler, İstanbul, Türkiye.

• Email: info@ardapelen.com
• WhatsApp / phone: +90 553 854 05 05
• Address: Metroport Busidence, Bahçelievler, İstanbul, Türkiye

If you have any questions about this policy or how we handle your data, please contact us using the details above.

Information we collect

Depending on how you interact with us, we may collect:

• Identity & contact data — your name, email address, phone number, country, and preferred language.
• Enquiry & assessment data — the information and messages you send us, including details about the procedure you are interested in.
• Health information — medical details and photographs you choose to share so we can give you an opinion or plan treatment (see section 3).
• Communication data — messages exchanged by WhatsApp, email, web form or phone.
• Technical & usage data — IP address, device and browser type, and how you use our website, collected through cookies and similar technologies (see section 10).

You do not have to provide any of this information, but if you don’t, we may be unable to answer your enquiry or arrange an assessment.

Health data & photographs

Health information and photographs are treated as special category (sensitive) personal data and given extra protection. We only collect them when you choose to share them with us — for example, when you send photos for a first opinion — and we use them solely to assess your case, plan and provide care, and communicate with you about it.

Where the law requires it, we rely on your explicit consent to process this data. You can withdraw that consent at any time by contacting us; this will not affect care already provided or processing already carried out.

How we use your information

• To respond to your enquiry and provide a first opinion and indicative price.
• To plan, coordinate and provide your treatment, travel, accommodation and aftercare.
• To communicate with you before, during and after your treatment.
• To keep medical and administrative records as required by law.
• To improve our website and services, and to keep them secure.
• With your consent, to send you information you have asked for.

Legal bases for processing

Under the GDPR and UK GDPR, we rely on the following legal bases:

Under KVKK, we process your data on the corresponding grounds, including your explicit consent for health data and the establishment or performance of a contract.

Who we share your information with

We never sell your personal data. We share it only where necessary, with:

• The hospital and clinical team where your surgery is performed, including the anaesthesia team.
• Patient coordinators and interpreters who support your journey.
• Service providers (processors) who act on our behalf under contract — for example, our CRM and messaging tools, website hosting, and communication platforms such as WhatsApp.
• Professional advisers and authorities where we are required to do so by law.

Our processors may only use your data on our instructions and must keep it secure.

International data transfers

Because our clinic is based in İstanbul, your data is processed in Türkiye. If you contact us from the UK, the EU/EEA or elsewhere, this means your information is transferred outside your home country.

Where we transfer data internationally, we take steps to protect it — for example, by relying on your explicit consent for the specific transfer, or by putting appropriate safeguards in place such as standard contractual clauses, in line with the GDPR, UK GDPR and KVKK.

How long we keep your information

We keep your personal data only for as long as necessary for the purposes set out in this policy, and to meet our legal, medical and accounting obligations. Medical records are retained for the period required by applicable Turkish law; enquiry data that does not lead to treatment is kept for a shorter period and then deleted or anonymised.

Your rights

Depending on where you are, you have rights over your personal data, including the right to:

• Access the personal data we hold about you;
• Ask us to correct inaccurate or incomplete data;
• Ask us to delete your data in certain circumstances;
• Restrict or object to our processing;
• Request a copy of your data in a portable format;
• Withdraw your consent at any time, where we rely on it;
• Lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at info@ardapelen.com. If you are in the UK you may also contact the Information Commissioner’s Office (ICO); in the EU/EEA, your local data protection authority; and in Türkiye, the Personal Data Protection Authority (KVKK Kurumu).

Cookies & similar technologies

Our website uses cookies and similar technologies to make the site work, to remember your preferences, and to understand how the site is used. You can control or disable cookies through your browser settings. Where required, we ask for your consent to non-essential cookies before they are set.

How we protect your information

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. While no method of transmission over the internet is completely secure, we take reasonable steps to keep your information safe and to limit access to those who need it.

Children’s privacy

Our services are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “last updated” date at the top of this page. We encourage you to review it periodically.

Contact us