Legal

Privacy Notice

Last updated · 19 October 2026

Who we are

Boğaziçi Dental Clinic is operated by Boğaziçi Özel Ağız ve Diş Sağlığı Hizmetleri Ltd. Şti., Göztepe Mah. Batışehir Cad. Batışehir Sit. G3 Blok No: 6G, 34218 Bağcılar, Istanbul, Türkiye. We are the controller of the personal data described in this notice. Contact: management@bogaziciadsp.com, +90 212 706 96 09.

Because we offer our services to people in the United Kingdom and the European Union, the UK GDPR and the EU General Data Protection Regulation (GDPR) apply to how we handle your data, in addition to Turkish law (KVKK).

Our representatives

• EU representative (Art. 27 GDPR): Euverify Limited, Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork, T23 AT2P, Ireland
• UK representative (Art. 27 UK GDPR): Euverify Ltd, 3rd Floor, 86-90 Paul Street, London, EC2A 4NE, United Kingdom

You can contact them instead of us about any data protection question, by post at the addresses above or by email at sales@euverify.com.

What we collect

• Contact details you give us: name, phone number, WhatsApp profile name, email address.
• Your messages to us on WhatsApp, by phone or by email.
• Health information you choose to send before your visit: description of your dental condition, photos, X-rays, previous treatment.
• Booking details: appointment dates, travel dates, treatment plan and price offered.
• If you become our patient: the examination and treatment records Turkish health law requires us to keep.
• If you reach us through a Facebook or Instagram ad: the ad you clicked, as reported by Meta.

We do not use cookies or tracking on our website.

Why we use it and on what legal basis

• Answering your enquiry, giving you information and a price estimate, booking your appointment: Art. 6(1)(b), steps you asked us to take before a contract.
• Assessing your dental condition from the information you send before your visit: Art. 6(1)(b) and Art. 9(2)(a), your explicit consent for health data.
• Providing and recording your treatment: Art. 6(1)(b), Art. 6(1)(c) and Art. 9(2)(h), health care by professionals bound by confidentiality.
• Keeping records required by Turkish health law: Art. 6(1)(c), legal obligation.
• Following up on your enquiry if you have not replied: Art. 6(1)(f), our legitimate interest in answering patients who contacted us; you can tell us to stop at any time.

We do not send you marketing messages unless you agree to receive them. We do not sell your data.

Your health data and your consent

Sending us photos, X-rays or details about your teeth is optional. If you send them, you give us your explicit consent to use them to assess your case and prepare a treatment plan. You can withdraw this consent at any time by writing to us; this does not affect what we did before you withdrew it.

Replies prepared with an AI assistant

Some of our replies on WhatsApp are written by an AI assistant that works on our behalf, and our patient coordinators see the conversation. The assistant does not make decisions about you that have legal or similarly significant effects; a dentist decides your treatment. You can ask to speak to a member of our team at any time.

Who we share your data with

Our staff see your data only as needed to help you. We also use these service providers, who process your data on our instructions:

• Meta Platforms Ireland Ltd. (WhatsApp Business): carries our WhatsApp messages with you; EU and USA.
• Anthropic PBC: AI assistant that drafts replies to your messages; USA.
• netcup GmbH: hosts our patient management system; Germany.
• Hetzner Online GmbH: encrypted backups; Finland.
• Verimor Telekomünikasyon A.Ş.: our telephone system; Türkiye.
• Zoho Corporation: our email.

We share data with public authorities only where the law requires it. When Meta delivers WhatsApp messages, its own terms and privacy policy also apply.

Transfers outside the UK and the EU

We are based in Türkiye, so your data is processed in Türkiye, which does not have an adequacy decision from the EU or the UK. When you contact us, the transfer is necessary to answer your request and to take the steps you ask for before treatment (Art. 49(1)(b)). Transfers to our service providers in the USA are made under the European Commission's Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum. You can ask us for a copy of the safeguards we use.

How long we keep it

• Enquiries that do not lead to treatment: 12 months after our last contact, then deleted.
• Patient and treatment records: 20 years after your treatment ends, as Turkish health law requires, then deleted or anonymised.

Your rights

You have the right to ask for a copy of your data, to have it corrected, to have it deleted, to restrict or object to its use, to receive it in a portable format, and to withdraw your consent at any time. Some records must be kept by law even if you ask us to delete them; we will tell you if this applies. We answer within one month.

To use your rights, write to management@bogaziciadsp.com or to our address above.

Complaints

You can complain to us first. You also have the right to complain to a data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the authority in the country where you live or work; in Türkiye, the Personal Data Protection Authority (KVKK Kurumu).

Cookies

This site sets no cookies. If we introduce analytics, advertising measurement or embedded media that use cookies, we will ask for your consent before any non-essential cookie is set and list the cookies here.

Changes

We will update this notice when our practices change and show the new date at the top.