Privacy Policy

1. Who we are

The data controller is NewMe Özel Sağlık Hizmetleri San. ve Tic. Ltd. Şti. (Nurman Tour Turizm), Çağlayan Mah. Barınaklar Bulv. Tunç Plaza No:43/3, Muratpaşa / Antalya, Türkiye. Email: info@newmehealthclinic.com.

We are based in Türkiye and Turkish law (KVKK) applies to everything we do. If you are in the United Kingdom, the UK GDPR and the Data Protection Act 2018 also protect your data; if you are in the European Union, the EU GDPR does.

2. What data we collect

• Contact details — your name, email address, phone number and country.
• Health information you choose to share — for example your medical history, height and weight, medication and photos sent for your surgeon’s assessment.
• Booking and travel details — your treatment dates, flight times for airport transfers and the identity details the hospital needs to admit you.
• Payment details — deposits are processed by our licensed payment provider. We never see or store your full card number.
• Website data — information collected through cookies, only if you allow it (see section 9).

3. Why we use it and our legal basis

• To answer your enquiry, assess whether treatment is suitable for you and plan your treatment — to take steps at your request before entering into a contract and to perform that contract (UK/EU GDPR Art. 6(1)(b)).
• To handle your health information — only with your explicit consent (UK/EU GDPR Art. 9(2)(a); KVKK Art. 6). You can withdraw your consent at any time; this does not affect processing that has already taken place.
• To arrange your stay, transfers and aftercare — to perform our contract with you (Art. 6(1)(b)).
• To meet our legal obligations — for example health tourism, accounting and tax records (Art. 6(1)(c)).
• To keep our services safe and improve them — our legitimate interests (Art. 6(1)(f)), balanced against your rights.
• Analytics and advertising cookies — only with your consent (Art. 6(1)(a) and the UK Privacy and Electronic Communications Regulations).

We do not make decisions about you based solely on automated processing.

4. Who we share it with

We share only what is needed, and only for the purposes above:

• the doctors and contracted healthcare institutions who assess and treat you;
• transfer and accommodation partners, when you ask us to arrange them;
• service providers who work for us — website hosting, email, WhatsApp messaging, payment processing, cookie consent, analytics and advertising tools — under contracts that limit how they may use your data;
• public authorities, where the law requires it.

We never sell your personal data.

5. Transfers to Türkiye and other countries

Because we are based in Türkiye and your treatment takes place there, your data is transferred to and processed in Türkiye. Türkiye is not covered by a UK or EU adequacy decision. We transfer your data because it is necessary to provide the treatment services you ask for and, for health information, on the basis of your explicit consent (UK/EU GDPR Art. 49(1)(a) and (b)). We protect it with access controls and confidentiality obligations. Some of our service providers (for example Google and Meta) may process data in other countries, including the United States, under their own transfer safeguards.

6. How long we keep it

We keep personal data only for as long as we need it for the purposes above, or for as long as the law requires — for example health tourism, accounting and tax records. Enquiries that do not lead to treatment are deleted or anonymised once they are no longer needed.

7. Your rights

You have the right to:

• access the personal data we hold about you;
• have inaccurate or incomplete data corrected;
• have your data deleted, or its use restricted;
• object to our use of your data, including for marketing at any time;
• receive your data in a portable format;
• withdraw your consent at any time.

To use any of these rights, email info@newmehealthclinic.com or write to our address above. We reply within one month (and within 30 days under KVKK). We may ask you to confirm your identity first.

8. How to complain

Please contact us first so we can try to put things right. You also have the right to complain to a data protection authority:

• In the UK: the Information Commissioner’s Office (ICO) — ico.org.uk/make-a-complaint, helpline 0303 123 1113.
• In the EU: the data protection authority in the country where you live or work.
• In Türkiye: the Personal Data Protection Authority (KVKK) — kvkk.gov.tr.

9. Cookies

Strictly necessary cookies keep the website working and do not need your consent. With your consent, we also use analytics and advertising cookies — Google Analytics, Google Ads, Meta Pixel and Microsoft Clarity — to understand how the website is used and to measure our adverts. We manage your choices with CookieYes: nothing optional runs until you accept, and you can accept, reject or change your choice at any time.

Change my cookie settings

10. Age

Our services are for adults aged 18 and over. We do not knowingly collect data from anyone under 18.

11. Security

Our website uses SSL encryption, and access to your data is limited to the people who need it to help you, all of whom are bound by confidentiality.

12. Changes to this policy

We update this policy when our services or the law change. The date below shows the latest version.

Last updated: 30 October 2026