Last updated: September 2026 · Vantage Cosmetic Surgery Clinic, Istanbul
Vantage Cosmetic Surgery Clinic ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit cosmeticsurgeryclinicturkey.com or contact us through any of our communication channels.
This policy applies to all visitors, patients, and enquirers regardless of location, and is compliant with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR 2016/679), and the Turkish Personal Data Protection Law (KVKK No. 6698).
1. Who We Are
Vantage Cosmetic Surgery Clinic is a specialist cosmetic and plastic surgery clinic located in Istanbul, Turkey. We are part of the Heva Clinic Group.
Registered address: Barbaros, Şen Sk. No:2, Ataşehir, İstanbul, 34746, Turkey
Contact email: [email protected]
WhatsApp: +90 501 253 15 93
2. What Personal Data We Collect
We may collect the following categories of personal data:
Full name, date of birth, gender, nationality.
Email address, phone number, WhatsApp number, country of residence.
Medical history, surgical enquiries, photos submitted for consultation. This is special category data handled with additional care.
IP address, browser type, device information, pages visited. Collected via cookies and Google Analytics.
3. How We Collect Your Data
We collect personal data through the following channels:
- Contact forms submitted on this website
- WhatsApp and telephone enquiries
- Email correspondence
- Consultation requests (online and in person)
- Cookies and analytics tools when you browse our website
- Social media interactions (Instagram, Facebook, TikTok)
4. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Responding to consultation and treatment enquiries | Legitimate interest / Pre-contractual steps |
| Providing medical and surgical services | Contractual obligation / Explicit consent |
| Sending appointment confirmations and follow-up communications | Contractual obligation |
| Sending promotional content (only with consent) | Consent |
| Improving our website and user experience | Legitimate interest |
| Compliance with legal and regulatory obligations | Legal obligation |
5. Cookies and Tracking
Our website uses cookies and similar tracking technologies. We use the following types:
- Essential cookies: Required for the website to function correctly. These cannot be disabled.
- Analytics cookies: We use Google Analytics via Google Tag Manager to understand how visitors interact with our website. Data is anonymised and aggregated.
- Marketing cookies: Used to track the effectiveness of campaigns on Google Ads, Meta, and TikTok.
You can manage cookie preferences through your browser settings at any time.
6. How Long We Keep Your Data
- Enquiry data (non-patients): 2 years from last contact.
- Patient medical records: 10 years from the date of treatment, in compliance with Turkish medical record retention requirements.
- Marketing consent records: Until consent is withdrawn.
- Website analytics data: 26 months (Google Analytics default retention).
7. Who We Share Your Data With
We do not sell your personal data to third parties. We may share your data with:
- Medical staff and clinical team at Vantage Clinic and Heva Clinic Group.
- Partner hospitals and anaesthesia providers involved in your surgical care.
- Technology service providers including Google, WordPress, and Cloudflare — all operating under appropriate data processing agreements.
- Legal and regulatory authorities where required by law.
8. International Data Transfers
As a clinic based in Turkey serving international patients, your personal data may be transferred to and processed in Turkey. Turkey has been granted adequacy status by the European Commission for certain transfers. Where data is processed by third-party platforms such as Google, those transfers are governed by Standard Contractual Clauses approved by the European Commission.
9. Your Rights
Under UK GDPR, EU GDPR, and KVKK, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your data where there is no compelling reason to continue processing it.
- Right to restriction: Request that we restrict processing in certain circumstances.
- Right to data portability: Receive your data in a structured, commonly used format.
- Right to object: Object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
10. Health Data — Special Category Information
Medical and health information is classified as special category personal data under GDPR and KVKK. We process this data only with your explicit consent and solely for the purposes of providing medical consultation and treatment. Health data is stored securely, accessed only by relevant clinical staff, and never shared for marketing purposes.
11. Data Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include SSL encryption on our website, restricted staff access to patient records, and secure data storage. In the event of a data breach posing a risk to your rights and freedoms, we will notify the relevant supervisory authority and affected individuals in accordance with legal requirements.
12. Third-Party Links
Our website may contain links to third-party websites including social media platforms and partner clinics. This Privacy Policy applies only to our website. We are not responsible for the privacy practices of external sites.
13. Children's Privacy
Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us immediately.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page will be updated accordingly. Continued use of our website following any changes constitutes your acceptance of the updated policy.
15. Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the relevant supervisory authority:
- UK residents: Information Commissioner's Office (ICO) — ico.org.uk
- EU residents: Your local EU Data Protection Authority
- Turkey: Kişisel Verileri Koruma Kurumu (KVKK) — kvkk.gov.tr
Contact Us About Your Data
For any questions, requests, or concerns regarding this Privacy Policy:
Email: [email protected]
WhatsApp: +90 501 253 15 93
Address: Barbaros, Şen Sk. No:2, Ataşehir, İstanbul, 34746, Turkey
Get in Touch →