Privacy Policy

1. Introduction

HekimDoktor ("we", "us", "our") operates the hekimdoktor.com website and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our platform. We are committed to complying with the General Data Protection Regulation (GDPR), Turkish Personal Data Protection Law (KVKK, Law No. 6698), UK-GDPR, and the California Consumer Privacy Act (CCPA).

2. Data We Collect

We may collect the following categories of personal data:

• Identity & Contact Data: Name, email address, phone number, profile information.
• Usage Data: Pages visited, search queries, IP address, browser type, device information.
• Health-Related Preferences: Preferred specialties, searched conditions, appointment history (never shared with third parties for marketing).
• Cookies & Tracking Data: Cookies, analytics identifiers, advertising identifiers (only with your explicit consent).

3. How We Use Your Data

We process your data to: (a) provide and improve our platform services, (b) connect you with healthcare providers, (c) send appointment reminders and service notifications, (d) analyze usage patterns to enhance user experience, and (e) comply with legal obligations. We process data based on your consent, contractual necessity, legitimate interest, or legal obligation.

4. Data Sharing & International Transfers

We do not sell your personal data. We may share data with: (a) healthcare providers you choose to contact, (b) service providers who assist our operations (hosting, analytics) under strict data processing agreements, and (c) authorities when required by law. For international data transfers outside the EU/Turkey, we use Standard Contractual Clauses (SCCs) and ensure adequate safeguards.

5. Your Rights

Depending on your jurisdiction, you have the following rights:

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object / Opt Out: Object to processing for marketing purposes or, under CCPA, opt out of data sales.

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, or as required by law. When data is no longer needed, we securely delete or anonymize it.

7. Data Security

We implement industry-standard security measures including encryption (TLS/SSL), access controls, regular audits, and secure data storage to protect your personal data against unauthorized access, alteration, or destruction.

9. Contact Us

For privacy-related inquiries, data access requests, or to exercise your rights, contact us at: privacy@hekimdoktor.com. Data Controller: HekimDoktor Teknoloji A.Ş., Istanbul, Turkey.