Last updated: 11 November 2026

1. Who we are

Dent Health Istanbul (“Dent Health”, “we”) helps international patients plan and receive dental treatment in Istanbul, Turkey. This policy explains what personal data we collect through dent-health.com, our forms and our messaging channels, and how we use it.

The data controllers are:

  • Dent Health Sağlık Hizmetleri Ltd. Şti. — Ihlamur Yolu Sok. No:32 Daire:1, Teşvikiye, Nişantaşı, 34365 Şişli / Istanbul, Turkey (dental treatment and clinical records)
  • DH İst Easy Travel Agency (licence no. 13755) — Kâğıthane, Istanbul, Turkey (patient coordination, travel and accommodation arrangements)

Privacy contact: info@dent-health.com · WhatsApp +90 542 247 22 74 · Phone +90 850 242 34 87

2. What data we collect

TypeExamplesWhere it comes from
Contact detailsName, WhatsApp/phone number, email, countryWebsite forms, WhatsApp, phone, email, Facebook/Instagram lead forms
Treatment enquiryTreatment you are interested in, preferred dates, messages you send usForms and messages
Health dataPhotos of your teeth, X-rays, dental history, medical conditions and medications you tell us about, treatment plansYou send them to us, or they are created during your treatment
Booking and travel dataFlight details, hotel and transfer requests, passport name where needed for bookingsYou send them to us
Payment dataAmounts paid, booking payment, invoices (we do not store full card numbers)Payment confirmations
Website usage dataPages visited, device and browser type, approximate location, clicks on WhatsApp/phone links, form submissionsCookies and similar technologies (see section 6)

Health data is a special category of personal data. We only process it to assess, plan and provide your treatment, and only with your explicit consent or where the law allows it.

3. Why we use your data and our legal basis

PurposeLegal basis (GDPR / UK GDPR · KVKK)
Reply to your enquiry and send you a free treatment plan and quoteSteps at your request before a contract (GDPR Art. 6(1)(b)) · KVKK Art. 5(2)(c)
Assess your photos and X-rays and prepare a treatment planYour explicit consent (GDPR Art. 9(2)(a)) · KVKK Art. 6 explicit consent
Provide treatment, keep clinical records, give your guarantee and aftercareContract (Art. 6(1)(b)); health care (Art. 9(2)(h)); legal obligations (Art. 6(1)(c)) · KVKK Art. 5(2)(c), (ç), 6(3)
Arrange hotel, transfers and appointmentsContract (Art. 6(1)(b))
Follow up on your enquiry by WhatsApp, phone or emailYour consent given on our form (Art. 6(1)(a)); legitimate interest in answering enquiries you started (Art. 6(1)(f))
Ask for a review after treatmentLegitimate interest (Art. 6(1)(f)); you can say no at any time
Measure and improve our website and advertisingLegitimate interest (Art. 6(1)(f)) and, where required, your consent
Accounting, tax and legal claimsLegal obligation (Art. 6(1)(c)); legitimate interest (Art. 6(1)(f))

You can withdraw your consent at any time. This does not affect what we did before you withdrew it.

4. Who we share your data with

We never sell your data. We share it only as far as needed:

RecipientWhyData
Our dental clinic, its dentists and in-house dental laboratoryPlan and carry out your treatmentContact, health and treatment data
Treatment-planning software, including an AI-assisted planning toolPrepare a draft plan from your photos; a dentist always reviews and approves itPhotos, X-rays, treatment notes
Kommo (CRM)Manage enquiries and follow-upsContact details, messages, enquiry status
WhatsApp / Meta PlatformsMessaging with youMessages, photos you send
Hotels, transfer companies, travel suppliersBookings you ask forName, dates, flight details
WordPress.com (Automattic)Website hosting and form storageForm submissions, technical logs
Google (Analytics) and Meta (Pixel)Website measurement and advertisingWebsite usage data
Accountants, lawyers, authoritiesLegal and tax obligations, legal claimsWhat the law requires

All service providers act on our instructions and must keep your data confidential.

5. International transfers

We are based in Turkey, so your data is transferred from your country to Turkey to plan and provide your treatment. Some service providers (for example Meta, Google, Automattic and Kommo) may process data in the United States or other countries.

Where data leaves the EU/UK, we rely on the transfer being necessary for the treatment you asked for (GDPR Art. 49(1)(b)), your explicit consent (Art. 49(1)(a)), or our providers’ standard contractual clauses and data protection frameworks. For transfers out of Turkey we follow KVKK Article 9.

6. Cookies and tracking

ToolPurposeType
Essential website cookiesSite works, forms, language choice, securityNecessary
Google Analytics 4Understand how visitors use the siteAnalytics
Meta PixelMeasure our Facebook/Instagram ads and show relevant adsMarketing

You can block or delete cookies in your browser settings at any time. We are adding a cookie choice tool to this website; once it is live, analytics and marketing cookies will only be used with your consent.

7. How long we keep your data

DataHow long
Enquiries that did not lead to treatment2 years after our last contact, then deleted
Clinical records, X-rays, treatment plans of treated patientsAs long as Turkish health law requires, and at least for the guarantee period
Invoices and accounting records10 years (Turkish tax law)
Website analytics data14 months
Marketing consentUntil you withdraw it

8. Your rights

Under GDPR, UK GDPR and KVKK you can ask us to:

  • see the personal data we hold about you and get a copy
  • correct data that is wrong or incomplete
  • delete your data, where we no longer need it or you withdraw consent
  • restrict or object to how we use it, including follow-up messages
  • send your data to you or another provider in a common format
  • withdraw your consent at any time

Write to info@dent-health.com or message us on WhatsApp. We reply within 30 days. You can also complain to your data protection authority (for example the ICO in the UK or CNIL in France) or to the Turkish Personal Data Protection Authority (KVKK).

9. Security, children, changes

  • Security: access to patient data is limited to the people who need it; accounts are password-protected and data is sent over encrypted connections.
  • Children: for patients under 18, a parent or legal guardian must contact us and give consent.
  • Changes: we may update this policy; the date at the top shows the latest version.