Privacy Notice — Protection of Personal Data (KVKK & GDPR)

Last updated: June 2026

Truself Health Group respects your privacy and is committed to protecting the personal data you share with us. This notice explains what data we collect, why we collect it, how we use and protect it, and the rights you have under the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the EU General Data Protection Regulation (“GDPR”).

1. Data Controller

The data controller responsible for your personal data is:

• Truself Health Group
• Kervangeçmez Sok. Dilan Pasajı No: 9/2A, Dükkan No: 7, Şişli — İstanbul, Türkiye
• Email: info@truselfhealthgroup.com
• Phone / WhatsApp: +90 530 775 14 31

2. What Personal Data We Collect

• Identity & contact data: your name, email address, phone number and country.
• Health information you choose to share: medical history, photographs, treatment goals and similar details you send so that we can prepare a personalised plan. Under KVKK and GDPR this is “special category” (sensitive) data and is only processed with your explicit consent.
• Communication records: messages exchanged with our team by form, email, phone or messaging apps.
• Website usage data: limited technical data and cookies — see our Cookie Policy.

3. Why We Process Your Data

• To respond to your enquiries and provide information you request;
• To prepare personalised treatment plans, quotes and online consultations;
• To coordinate your treatment, travel, accommodation, appointments and aftercare with our contracted hospitals, physicians and service providers;
• To manage applications from healthcare professionals who wish to partner with us;
• To meet our legal, accounting and regulatory obligations.

4. Legal Basis for Processing

Depending on the situation, we rely on: your explicit consent (in particular for health data), the performance of a contract or steps taken at your request, our legitimate interests in operating and improving our services, and compliance with a legal obligation — in line with Articles 5 and 6 of KVKK and Articles 6 and 9 of the GDPR.

5. Sharing & International Transfer

As a coordinator of medical care, we share the data necessary to deliver the services you request with our contracted hospitals, surgeons, dentists and other specialists, and with travel, accommodation and translation providers. Where this involves transferring data, it is done only to the extent required to fulfil your request and, where sensitive data is involved, on the basis of your explicit consent. We do not sell your personal data.

6. Data Retention

We keep your personal data only for as long as necessary for the purposes described above, or for any period required by applicable law. When it is no longer needed, it is securely deleted or anonymised.

7. Data Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse or disclosure, and we limit access to those who need it to serve you.

8. Your Rights

Under KVKK (Article 11) and the GDPR you have the right to: learn whether your data is processed and request information about it; request correction or deletion; object to or request restriction of processing; withdraw your consent at any time; and lodge a complaint with the competent authority.

9. Changes to This Notice

We may update this notice from time to time. The current version is always available on this page with its “last updated” date.