Privacy notice

This notice explains how MedRise Health (“MedRise”, “we”) uses personal information when you contact us or travel with us. We are based in Istanbul, Türkiye, and we serve patients in the United Kingdom, so we follow both the UK GDPR and the Turkish Personal Data Protection Law (KVKK).

Who is responsible

MedRise Health, Istanbul, Türkiye, is the controller of your information. For any privacy question, email info@medrisehealth.com with “Privacy” in the subject line.

What we collect

• Contact details: your name, email address, phone or WhatsApp number and country.
• Travel details: dates, passport name and number when we book hotels and transfers, and companion names.
• Payment records: amounts, dates and references. Card details are handled by the payment provider, not by us.
• Messages you send us and notes of our calls.

Health information

To plan treatment we ask for photos of your teeth or scalp, X-rays or scans, your medical history and the medicines you take. This is special category data. We only process it with your explicit consent, which you give when you send it to us and can withdraw at any time.

How we use it

• To review your case and prepare an indicative plan and price (steps before a contract).
• To match you with a partner clinic and share your case with them, with your consent.
• To book and manage your hotel, transfers and itinerary (performance of our contract with you).
• To provide aftercare follow-ups and coordinate with your clinic.
• To keep accounting and legal records (legal obligation).
• To send occasional updates, only if you opt in. You can unsubscribe at any time.

Without health information we cannot prepare a treatment plan. We do not make automated decisions or build profiles about you.

Who we share it with

• Our partner hospitals and clinics (Medicana, Medipol, Lena Group), for the clinic treating you.
• Hotels, transfer companies and interpreters, with travel details only and never your health information.
• Service providers who host our email, website and files, under written data processing terms.
• WhatsApp (Meta), if you choose to message us there.
• Accountants, lawyers and public authorities where the law requires it.

WhatsApp

Many patients prefer WhatsApp. Messages are end-to-end encrypted, but WhatsApp is operated by Meta, which processes account and usage information under its own terms. If you prefer not to use it, email us instead. We delete case photos from devices when they are no longer needed.

International transfers

Your information is processed in Türkiye. There is no UK adequacy decision for Türkiye, so where we transfer information we rely on your explicit consent and, for service providers, on contractual safeguards. You can ask us for details of the safeguard that applies.

How long we keep it

• Enquiries that do not lead to a booking: up to 12 months after our last contact.
• Patient files after treatment: as long as needed for aftercare and legal claims, normally up to 10 years.
• Accounting records: for the period required by Turkish law.
• Marketing list: until you unsubscribe.

Your rights

You can ask to access, correct or delete your information, restrict or object to how we use it, take a copy in a portable format, and withdraw consent at any time. Withdrawing consent does not affect what we did before. Email us and we will reply within one month.

Complaints

Please tell us first: we acknowledge every privacy complaint within 30 days, look into it without delay and tell you the outcome. You can also complain to the UK Information Commissioner's Office (ico.org.uk, 0303 123 1113) or to the Turkish Personal Data Protection Authority (kvkk.gov.tr).

Children

Our services are for adults aged 18 and over.

Cookies

This website does not use advertising or analytics cookies. If that changes, we will ask for your consent first.

Security

Access to patient information is limited to the people who need it. Files are stored encrypted, and our service providers are bound by written terms.

Changes

We will update the date above when this notice changes, and tell current patients about significant changes.