Last updated: 19 August 2026
This policy applies to https://lumaclinicturkiye.com, appointment forms and patient-coordinator channels operated by Luma Clinic Türkiye (“the clinic”, “we”). It is general information and is not legal advice.
Controller
The controller is Luma Clinic Türkiye. Clinic address: Nispetiye Caddesi No: 1, 34340 Beşiktaş, Istanbul. Contact: info@lumaclinicturkiye.com, +90 850 000 00 00. Hours: Monday – Saturday, 09:00 – 19:00.
Send privacy requests to the same email or phone. We may ask you to confirm your identity.
Data we collect
Enquiry forms collect your name, email, phone, country code and message. If you share treatment goals, travel dates or photos, we keep them as part of your request.
Health information (history, symptoms, clinical photos) is special-category data. We use it only to plan care and to contact you, with your explicit consent and under applicable law.
The site may set essential cookies for language, session and security. See the Cookie Policy.
Purposes
We use your data for free pre-assessment, appointment planning, sharing a treatment plan with the doctor, coordinating international visits (transfer and hotel support), legal retention and answering you.
We do not send marketing email or SMS. If that channel is ever opened, we will ask for separate consent. Forms are not used to build a sales list.
Legal bases
In Türkiye we follow Law No. 6698 (KVKK). For visitors from the European Economic Area we also apply the GDPR. Bases include steps toward a contract, legitimate interests (clinic security and communication), explicit consent for health data, and legal duty.
Sharing
Data may be shared with the treating team, in-house lab and — only when needed — transfer or hotel partners. Hosting, SMTP email and site infrastructure providers may have technical access as processors.
We do not sell your data. We do not share it with advertising networks without consent, unless the law requires disclosure.
Retention and security
Contact logs, appointments and medical files are kept for the periods required by health and commercial law, then deleted or anonymised.
Access is limited. Channels and servers are protected with reasonable technical and organisational measures. Transmission over the internet cannot be made risk-free.
Your rights
You may request access, correction, erasure, restriction, objection and a complaint, under KVKK and — where it applies — the GDPR. Details are on the KVKK and GDPR pages.
Write to info@lumaclinicturkiye.com. We may need extra information to verify you.