WhatsApp

Last updated: 11 November 2026

This Privacy Policy explains how Teeth Plus Dental Clinic collects, uses and protects your personal data when you visit teethplus.com.tr, contact us, book an online consultation or receive treatment at our clinic. We process personal data in line with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, for patients and visitors in the United Kingdom and the European Economic Area, the UK GDPR and EU GDPR.

1. Who we are (data controller)

Teeth Plus Dental Clinic is operated by:

Günay Diş ve Ağız Sağlığı Poliklinik Hizmetleri Limited Şirketi
Hatipirimi Mah. Yunus Nadi Cad. 186 Sk. No: 23/4, 48700 Marmaris / Muğla, Türkiye
Trade Registry: Marmaris 12028 · MERSİS No: 0427113256200001
Tax Office / No: Marmaris Vergi Dairesi, 427 113 25 62
Email: info@teethplus.com.tr · Phone / WhatsApp: +90 507 838 33 16

We are the data controller for the personal data described in this policy.

2. Personal data we collect

  • Contact and identity data: your name, email address, phone number and WhatsApp number.
  • Booking data: the online consultation slot you choose, the treatment you are interested in and any message you send us.
  • Health data: information about your dental and medical history, photographs, X-rays, scans and treatment notes that you share with us or that we create while assessing and treating you. Health data is a special category of personal data and receives extra protection.
  • Communication data: messages, calls and video consultations with us by WhatsApp, phone or email.
  • Travel and administrative data: information you give us to plan your visit, such as arrival dates and accommodation or transfer preferences, and payment and invoicing details.
  • Security and server data: IP address, browser and device information and request logs that our hosting and security providers record automatically to deliver the website and protect it against attacks.
  • Analytics and advertising data: pages visited, how you interact with our website and adverts, and online identifiers, collected through cookies and similar technologies only if you consent to them.

3. How we use your data and our legal bases

We use your data only for the purposes below. Each purpose has its own legal basis, so withdrawing consent for one purpose (for example marketing) does not affect the others (for example the patient records we must keep by law).

  • Responding to enquiries and arranging consultations: to reply to you, schedule and hold your online consultation, and send confirmations and reminders. Legal basis: steps taken at your request before entering into a contract (UK GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
  • Verifying your phone number: we may send a one-time code by SMS or WhatsApp to confirm that the number you gave us is yours. Legal basis: our legitimate interest in preventing fake or mistaken bookings (UK GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
  • Health information you share before treatment: when you send us photos, X-rays or details of your dental condition so that we can assess your case. Legal basis: steps taken at your request before entering into a contract (UK GDPR Art. 6(1)(b)), together with your explicit consent for the health data itself (UK GDPR Art. 9(2)(a); KVKK Art. 6). You can withdraw this consent at any time.
  • Providing dental treatment and keeping patient records: to diagnose, plan and deliver your treatment and to keep the clinical records required by Turkish health legislation. Legal basis: performance of a contract (UK GDPR Art. 6(1)(b)) and our legitimate interest in keeping complete and accurate clinical records (UK GDPR Art. 6(1)(f)); under Turkish law, our legal obligations as a licensed health provider (KVKK Art. 5(2)(ç)). For health data, the provision of health care by professionals bound by confidentiality (UK GDPR Art. 9(2)(h); KVKK Art. 6(3)). These records are not deleted if you withdraw marketing or other optional consents.
  • Invoicing and accounting: Legal basis: legal obligation under Turkish tax and commercial law.
  • Newsletters: only if you have subscribed. You can unsubscribe at any time using the link in each email. Legal basis: consent.
  • Analytics and advertising cookies: to understand how our website is used and to measure and improve our adverts. These are set only if you accept them in our cookie banner. Legal basis: consent.
  • Website security: to deliver our website and protect it and our forms against attacks and spam through our hosting provider, Cloudflare and Google reCAPTCHA. Legal basis: legitimate interests.
  • Legal claims: to establish, exercise or defend legal claims. Legal basis: legitimate interests; for health data, UK GDPR Art. 9(2)(f) and KVKK Art. 6(3).

4. Who we share your data with

We do not sell your personal data. We share it only where necessary, with:

  • our dentists and clinic staff, who are bound by professional confidentiality;
  • dental laboratories and imaging providers involved in your treatment;
  • service providers that process data on our behalf:
    • Medicasimple (clinic management, patient records and appointments);
    • Google (email, calendar and booking notifications);
    • Meta Platforms (WhatsApp Business messaging and video consultations);
    • Twilio and Netgsm (SMS and WhatsApp notifications and verification codes);
    • Mailchimp (newsletters, only if you subscribe);
    • our website hosting provider and Cloudflare (content delivery and security);
    • Google reCAPTCHA (protects our forms against spam and automated abuse; it loads on pages with forms regardless of your cookie choices, because the forms cannot be protected without it);
    • website backup services used to restore the site in case of failure;
  • analytics and advertising providers, only if you accept the relevant cookies: Google Analytics 4, Google Ads, Meta Pixel and TikTok Pixel. These providers may also use the data for their own purposes under their own privacy policies;
  • accountants, legal advisers, insurers and public authorities where required by law.

5. International transfers

Our clinic is in Türkiye. If you contact us from the United Kingdom or elsewhere, your personal data will be transferred to and processed in Türkiye so that we can respond to you and provide your treatment.

Some of the providers listed above (in particular Google, Meta, Twilio, Mailchimp, Cloudflare and TikTok) may process data on servers outside Türkiye, including in the United States and the European Union. Where Turkish law requires it, we transfer data abroad only with your explicit consent or under another mechanism permitted by KVKK. You can ask us for more information about the transfers that apply to your data using the contact details in section 1.

6. How long we keep your data

  • General enquiries and online consultation bookings that do not lead to treatment: 1 year after our last contact, unless you ask us to delete them sooner.
  • Photos, X-rays and other health information sent for an assessment that does not lead to treatment: 1 year after our last contact, or earlier if you withdraw your consent.
  • Patient and clinical records: for the period required by Turkish health legislation.
  • Invoices and accounting records: for the period required by Turkish tax and commercial law (generally 10 years).
  • Newsletter data: until you unsubscribe.
  • Cookie data: as described in our Cookie Policy.

When data is no longer needed, we delete, destroy or anonymise it.

7. Cookies

We use strictly necessary cookies to run and protect our website. Google reCAPTCHA is also used on our forms as a security tool. Analytics and marketing tools (Google Analytics 4, Google Ads, Meta Pixel and TikTok Pixel) are loaded only if you accept them in our cookie banner. You can change your choices at any time through the cookie banner. See our Cookie Policy for details.

8. Your rights

Depending on where you live, you have the right to:

  • find out whether we process your personal data and receive a copy of it;
  • have inaccurate data corrected;
  • have your data deleted or anonymised;
  • restrict or object to our processing, including objecting to direct marketing at any time;
  • receive your data in a portable format;
  • withdraw your consent at any time, without affecting processing carried out before withdrawal;
  • learn the third parties to whom your data has been transferred, and object to a result that is to your detriment arising from analysis made solely by automated systems;
  • claim compensation for damage arising from unlawful processing.

To exercise your rights, email info@teethplus.com.tr or write to our address above. We will respond within one month under the UK GDPR, and within 30 days under KVKK. We may ask you to confirm your identity before acting on your request.

If you are not satisfied with our response, you can complain to the Turkish Personal Data Protection Authority (KVKK, www.kvkk.gov.tr) or, if you live in the UK, to the Information Commissioner’s Office (ICO, ico.org.uk).

9. Deleting data held through WhatsApp and Facebook

If you have contacted us through WhatsApp, Facebook or Instagram and want us to delete the personal data we hold about you, send a message with your name and phone number to info@teethplus.com.tr or to our WhatsApp number. We will delete your data, except where we must keep it by law, and confirm when this is done.

10. Security

We use appropriate technical and organisational measures to protect your data, including encrypted (HTTPS) connections, restricted access for authorised staff only and confidentiality obligations for everyone who handles patient information.

11. Children

Our website and online consultation service are intended for adults. We treat patients under 18 only with the involvement and consent of a parent or legal guardian.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with its “last updated” date.