Legal
Privacy Policy
This policy explains what personal data you share through drmanihabibi.com, how it is used, how long it is kept, and what rights you have over it.
Last updated: 02.08.2026
1. Who is responsible for your data
The data controller for this website is Data Manager, based in Antalya, Türkiye. Your data is processed under Turkish data protection law (KVKK, Law No. 6698) and, where you are located in the EU or UK, in line with the GDPR.
- Address: Güzeloba Mah. 2246. Sk. No:5, 07230 Muratpaşa / Antalya, Türkiye
- Email: manihabibi@gmail.com
- Phone: +90 542 121 40 03
2. What data is collected
Only data you choose to send is collected through this website. The site does not hold medical records and does not create patient files.
2.1. What you send via the contact form or WhatsApp
- Identity and contact data: name, email address, phone number, and the city or country you are writing from
- Health data (special category): whatever you choose to include — height, weight, medical conditions, medication, previous operations, test results or reports
- Enquiry content: the topic you select and the text of your message
2.2. Data collected as you use the site
- Technical data: IP address, browser and device information, pages visited, time spent, and the source you arrived from
- This is collected through cookies and explained further in section 6.
Important: Health information is treated as special category data under both the GDPR and KVKK, and can only be processed with your explicit consent. That is why the consent checkbox on the contact form is mandatory. If you prefer not to share health details, you can use the form for a general question instead.
3. Why your data is used
- To answer your questions and appointment enquiries
- To carry out a preliminary assessment and arrange an appropriate form of consultation
- To contact you and follow up on your enquiry
- To keep the website secure and to analyse how it is used
- To meet obligations under applicable law
Your data is never sold and is not used for marketing or advertising without your separate consent.
4. Legal basis for processing
| Type of data | Legal basis |
|---|---|
| Identity and contact data | GDPR Art. 6(1)(b) and (f): steps prior to a contract, and legitimate interest |
| Health data | GDPR Art. 9(2)(a): explicit consent |
| Essential cookies | GDPR Art. 6(1)(f): legitimate interest |
| Analytics and marketing cookies | GDPR Art. 6(1)(a): consent |
5. Who your data is shared with
Your data is not shared as a rule. The following service providers may access it only to the extent needed to deliver the service:
- Hosting provider: to serve the website
- Email provider: to deliver messages sent through the form
- WhatsApp (Meta Platforms): if you choose to write via WhatsApp, that conversation is subject to the platform's own privacy policy
- Analytics services: where you consent, for anonymised usage statistics
- Partner hospitals: only at your request, to arrange a consultation or procedure
- Public authorities: only where required by law
Please note that the data controller is based in Türkiye, which is outside the EEA and UK. If you are in the EU or UK, sending an enquiry means your data will be transferred to Türkiye. This transfer is based on your explicit consent under GDPR Art. 49(1)(a), given when you submit the form.
6. Cookies
The site uses cookies to function and to improve:
- Essential cookies: required for basic functionality and security; these cannot be switched off.
- Analytics cookies: used to understand how pages are used; these run only with your consent.
- Marketing cookies: may be used for advertising measurement; these run only with your consent.
You can change your cookie preferences or delete existing cookies at any time through your browser settings. Declining non-essential cookies does not prevent you from using the site.
7. How long data is kept
- Enquiries that do not lead to treatment: up to 2 years from the end of the correspondence
- Enquiries that lead to a consultation or procedure: for the retention periods required by health legislation, within the record system of the treating institution
- Website usage data: up to 26 months
At the end of these periods data is deleted, destroyed or anonymised.
8. How your data is protected
Technical and organisational measures are in place to protect your data against unauthorised access, loss and misuse — including site-wide SSL encryption, restricted access rights, maintained software and regular backups.
Worth knowing: although email and messaging apps are generally secure, no transmission over the internet is completely risk-free. Please bear that in mind when sharing sensitive health information, and consider bringing detailed reports to the consultation itself.
9. Your rights
Under the GDPR and KVKK you have the right to:
- Ask whether your data is being processed and request access to it
- Be told why it is processed and whether it is used for that purpose
- Know which third parties your data has been shared with, in Türkiye or abroad
- Have inaccurate or incomplete data corrected
- Request erasure of your data where the legal conditions are met
- Ask that corrections or deletions be communicated to any third parties involved
- Object to processing, and request restriction of processing
- Receive your data in a portable format, and claim compensation for damage caused by unlawful processing
- Withdraw your consent at any time — withdrawal does not affect the lawfulness of processing carried out beforehand
To exercise any of these rights, write to manihabibi@gmail.com. Requests are answered within 30 days. If you are not satisfied with the response, you may complain to your national data protection authority — the ICO in the United Kingdom, or the Turkish Personal Data Protection Board (KVKK) in Türkiye.
10. International patients
If you are writing from outside Türkiye, your enquiry is received and processed in Türkiye. Where you are in the EU or UK, this constitutes an international transfer, made on the basis of the explicit consent you give when submitting the form. You can withdraw that consent at any time by contacting us, and ask for your data to be deleted.
11. Children
This website is not directed at people under 18 and data relating to children is not knowingly collected. If we become aware that data belonging to a minor has been submitted, it will be deleted.
12. Changes to this policy
This policy may be updated from time to time to reflect changes in law or in how the site operates. The current version is always published on this page, with the date above updated accordingly.
13. Contact
Data Manager
Güzeloba Mah. 2246. Sk. No:5, 07230 Muratpaşa / Antalya, Türkiye
Email: admin@newmehealthclinic.com
Phone: +90 542 121 40 03