OUR PRIVACY POLICY

Privacy and Cookies Policy of Yourette

 

1. Introduction

 

This Privacy Policy explains how Aura Özel Ağız Diş Sağlığı Tur. İnş. San. ve Tic. Ltd. Şti., operating under the Yourette brand in Antalya, Turkey, collects, uses, stores and protects personal data provided by patients and prospective patients.

 

We process personal data in accordance with applicable data protection laws, including Turkish KVKK, EU GDPR/RODO and UK GDPR, where applicable.

 

This Privacy Policy applies to information provided through our website, WhatsApp, email, social media, online forms, phone communication, in-person visits and other communication channels used by the clinic.

 

2. Data Controller

 

The data controller responsible for processing personal data is:

 

Aura Özel Ağız Diş Sağlığı Tur. İnş. San. ve Tic. Ltd. Şti.

Operating under the Yourette brand

Antalya, Turkey

Email: Info@yourette.com

WhatsApp: +447788100584

 

3. What information we collect

 

We may collect and process the following information:

 

• name and surname;

• phone number, email address and social media contact details;

• country of residence and preferred language;

• dental, medical and aesthetic treatment enquiries;

• photographs, X-rays, CT scans, medical images and treatment-related documents;

• medical history and information relevant to treatment planning;

• appointment dates, travel dates, hotel or transfer details, where relevant;

• payment, invoice and administrative information;

• communication records between the patient and the clinic.

 

4. Why we use your information

 

We use your information to:

• respond to enquiries;

• assess your case and prepare a treatment plan;

• communicate with our dentists, surgeons and clinical team;

• arrange consultations, appointments and treatment;

• organise clinic-related support such as hotel or transfer assistance, where requested;

• provide medical, dental or aesthetic treatment;

• keep legally required clinical and administrative records;

• provide aftercare, warranty support and follow-up communication;

• comply with legal, accounting, tax and regulatory obligations;

• protect the legal rights of the clinic, patients and clinical staff.

 

5. Medical images and AI-assisted review

 

To improve accuracy, consistency and clinical workflow, our clinical team may use secure digital tools, including AI-assisted image-review support, when assessing X-rays, CT scans, photographs and treatment information.

 

These tools are used to support our dentists, surgeons and clinical team. They do not replace professional clinical judgement. Any diagnosis, treatment plan or medical decision is reviewed and approved by a qualified clinician.

 

We may also use anonymised, aggregated or de-identified clinical and image-analysis information to improve our internal clinical systems and treatment-planning workflow. Where information is used for internal system improvement, we take steps to remove or limit identifying details and restrict access to authorised personnel.

 

Identifiable patient data is not sold and is not provided to third parties for external AI training. We do not use identifiable patient images or medical information for public marketing, advertising, publication or social media without separate permission.

 

6. Legal basis for processing

 

Depending on the situation, we process personal data on the basis of:

 

• taking steps before entering into a treatment agreement;

• providing healthcare, dental and aesthetic treatment services;

• patient consent, where required;

• legal, regulatory, accounting and medical record-keeping obligations;

• legitimate interests, such as responding to enquiries, improving our service, managing communication and protecting our legal position.

​​

Because medical and dental information is sensitive health data, we only process it where necessary for clinical assessment, treatment planning, healthcare provision, patient communication, legal compliance, medical record-keeping, or where the patient has provided the relevant consent.

​

7. Who we may share information with

​

Where necessary, your information may be shared with:

 

• dentists, surgeons, doctors and authorised clinical staff;

• treatment coordinators and administrative staff;

• dental laboratories and medical laboratories;

• radiology, imaging and diagnostic providers;

• hotel, transfer or travel-support providers, only where needed for arrangements requested by the patient;

• IT, CRM, website, email, cloud storage and communication service providers;

• accountants, lawyers, insurers and professional advisers;

• public authorities, courts or regulators where legally required.

 

We only share information where it is necessary and appropriate for the purpose involved.

​

8. No sale of identifiable patient data

​

We do not sell identifiable patient personal data, medical information, X-rays, scans, photographs or contact details.

 

Patient data is used for clinic-related purposes, including enquiry handling, treatment assessment, treatment planning, clinical care, administration, aftercare, legal compliance, internal quality improvement and services requested by the patient.

 

Where information is shared with dentists, surgeons, laboratories, imaging providers, IT providers, hotels, transfer providers or professional advisers, this is done only where necessary for treatment, clinic administration, legal compliance or services requested by the patient.

​

9. International data transfers

​

Our clinic is based in Turkey, while many patients contact us from the European Union, the United Kingdom and other countries. For this reason, personal data may be transferred, accessed or stored internationally.

 

This may happen through communication tools, email, WhatsApp, website forms, CRM systems, cloud storage, appointment systems, imaging systems, laboratories, professional advisers or other service providers involved in treatment and clinic administration.

 

Where required, we use appropriate safeguards and organisational measures to protect personal data during international processing or transfer. We only transfer or share data where it is necessary for enquiry handling, treatment planning, clinical care, administration, legal compliance or services requested by the patient.

​

10. How long we keep information

​

We keep personal and medical information only for as long as necessary for the purposes for which it was collected, including treatment planning, clinical care, legal record-keeping, aftercare, warranty support, tax/accounting duties and legal protection.

 

Medical and clinical records may need to be kept for the period required under Turkish law and applicable medical regulations.

 

Enquiry data from people who do not proceed with treatment is kept only for a reasonable period, unless longer retention is required for legal, administrative or legitimate business reasons.

​

11. Marketing and patient photos

​

We do not use identifiable patient photos, videos, X-rays or medical information for public marketing, advertising, social media or promotional purposes without separate permission.

 

Consent for treatment is separate from consent for marketing, photography or video publication.

 

If a patient gives permission for photos or videos to be used, that permission may be withdrawn for future use by contacting the clinic. Materials already published may take time to remove from third-party platforms and may not always be fully within the clinic’s control once shared publicly.

​

12. Patient rights

​

Depending on applicable law, you may have the right to:

 

• ask whether we process your personal data;

• request access to your personal data;

• request correction of inaccurate or incomplete data;

• request deletion or destruction of data where legally possible;

• object to or restrict certain processing;

• withdraw consent where processing is based on consent;

• ask who your data has been shared with, where applicable;

• make a complaint to the relevant data protection authority.

 

Some medical, legal or accounting records cannot be deleted immediately if the clinic is legally required to keep them.

​

13. Security

​

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, disclosure or alteration.

 

Access to patient information is limited to authorised persons who need the information for treatment, treatment planning, administration, legal compliance or clinic-related services.

​

14. Changes to this Privacy Policy

​

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or internal procedures.

 

The latest version will be published on our website.

​

15. Contact

​

For privacy or data protection questions, please contact:

 

Yourette / Aura Özel Ağız Diş Sağlığı

Antalya, Turkey

Email: Info@yourette.com

WhatsApp: +447788100584