Privacy & data
What happens to what you send us
This page covers the enquiry form on this website and nothing else. It is written to be read once. If anything here is unclear, ask on WhatsApp and we will answer in writing.
Data controller
HY Dental Smile Studio
Kartaltepe Mah. Süvari Cad. No:10/1, D2 Blok Ofis 4, Metropark, Sefaköy, Küçükçekmece, İstanbul
Who is responsible
The clinic named above is the data controller for this website. Under Turkish law that is the KVKK; for visitors in the European Union and the United Kingdom it is the GDPR. Either way it means the clinic decides what this site collects and is answerable for it.
There is no separate marketing company and no agency between you and us.
What the form collects
The enquiry form asks for your name, your phone number, the treatment you are asking about and your question. Stored with them are the language version of the site you used, the time you pressed send, and the page or advertisement that brought you here. For a short period, and only to stop automated submissions, the IP address the form was sent from is stored as well. There is no field for your address, your date of birth or your medical history.
X-rays are not uploaded through this website. If you send one, you send it yourself over WhatsApp.
Why we are allowed to hold it
We hold it to answer you. That is a step taken at your own request before any treatment agreement, and answering you is the only reason your details exist on our side.
Anything you choose to write about your health is treated as the sensitive information it is, and is read only by clinical staff.
Who reads it
The clinic's own staff. Your enquiry is written to the clinic's database. When staff notifications are configured, the same details are sent to the people who answer enquiries as a Telegram notification, so that a message arriving at two in the morning is not found at nine.
We do not sell your details, we do not pass them to other clinics or to intermediaries, and we do not use them for advertising.
Where it goes
This site and its database run on Cloudflare's network, which processes and stores data outside Turkey. The staff notification is delivered through Telegram, whose servers are outside Turkey and outside the European Union.
WhatsApp is operated by Meta. A message you send there — including an X-ray or a photograph attached to it — leaves Turkey and is carried and stored under Meta's own terms, not the clinic's. The clinic reads what arrives, but it does not control the service the message travels through, and it cannot delete anything from Meta's side on your behalf.
Using the form, or writing on WhatsApp, therefore means your details cross borders. If you would rather Meta had no part in it, use the enquiry form on this website instead of WhatsApp, or write to the postal address above.
How long it is kept
An enquiry stays in the clinic's inbox while it is being answered and for as long as we may need to show what was discussed. If it does not turn into treatment, ask us and we will delete it.
If you do become a patient, your clinical file is a separate record from this website and is kept for the period Turkish health legislation requires.
How to have it deleted
Message the clinic on WhatsApp, or write to the address above, and say that you want your enquiry removed. You can also ask what we hold, ask us to correct it, or object to our holding it at all. You do not have to give a reason, and we will confirm in writing when it is done.
If our answer does not satisfy you, you may complain to the Turkish data protection authority, or — if you live in the European Union or the United Kingdom — to your own national supervisory authority.
Cookies
This site sets no tracking cookies. There is no advertising pixel and no cross-site tracking. The only cookie it can set is the login session for the clinic's own staff area, which a visitor never reaches.
The clinic may run Cloudflare Web Analytics, which counts visits without cookies. It stores nothing on your device and builds no profile of you, but Cloudflare does process the IP address your request came from in order to count the visit. Apart from that, the security logs kept by our hosting provider are the only record that your visit happened.
If this changes
If what we do with enquiries changes, this page changes with it, and so does the date at the top.
Last updated: 4 August 2026