Medicaroute Privacy Policy

Effective Date: 20/02/2026
Data Controller (Veri Sorumlusu): Medicaroute Teknoloji Hizmetleri Limited Şirketi (“Medicaroute”, “we”, “us”, “our”)
Registered Address: Ahmet Yesevi Mh. Kerem Sk. A-BLOK İDARİ VE KULUÇKA BİNASI Bina No: 9, Ofis No 404/2 Pendik/İSTANBUL
Contact: support@medicaroute.com
Website: Medicaroute.com and any related subdomains, apps, and services (the “Platform”)

This Privacy Policy explains how we collect, use, share, store, and protect personal data when you use Medicaroute. We aim to comply with applicable data protection laws, including Türkiye’s Law on the Protection of Personal Data No. 6698 (“KVKK”). Depending on where you are located and how you use the Platform, the EU General Data Protection Regulation (“GDPR”) may also apply. (kvkk.gov.tr)

If you are looking for our Terms of Use, please refer to the Terms on the Platform.

1) Key Principles

We process personal data in a lawful, fair, and transparent way, for specific purposes, and to the extent necessary. We implement reasonable technical and organizational safeguards to protect personal data. (kvkk.gov.tr)

2) What Personal Data We Collect

The data we collect depends on how you use the Platform (as a patient, visitor, doctor, clinic/hospital representative).

A) Information you provide

For patients / visitors

Identity and contact details (e.g., name, email, phone number)
Inquiry details (e.g., treatment interests, preferences, travel dates if shared)
Files you upload (e.g., medical reports/images) only if you choose to upload them
Messages you send through the Platform (forms, chat, WhatsApp links, email)

For providers (doctors/clinics/hospitals)

Profile data (e.g., name, title, specialties, languages, experience, education)
Contact and clinic details (address, phone, email, website, social links)
Verification-related information you submit (e.g., licenses/certifications, where applicable)
Messages and lead communications through the Platform

B) Data collected automatically

Device and log data (IP address, browser type, device identifiers, timestamps, pages viewed)
Usage data (clicks, interactions, approximate location derived from IP)
Cookies and similar technologies (see Section 8)

C) Sensitive data / health data

If you share medical or health information (e.g., records, test results, photos, diagnoses) as part of an inquiry, it may be considered sensitive personal data. We only process this data as needed to provide the Platform functionality you request and in line with your consent and/or other lawful basis under applicable law.

3) How We Use Personal Data (Purposes)

We may use personal data to:

Provide, operate, and improve the Platform and user accounts
Enable inquiries and communication between patients and providers
Verify and manage provider profiles and Platform integrity
Provide customer support and respond to requests
Prevent fraud, abuse, and security incidents
Measure and improve performance, analytics, and user experience
Send service-related communications (e.g., confirmations, security notices)
Send marketing communications where permitted and/or where you have consented (you can opt out)

4) Legal Bases for Processing

We rely on one or more of the following legal bases, depending on the context and applicable law:

Your explicit consent (especially for sharing inquiry details with providers and for certain cookies/marketing)
Performance of a contract / providing requested services (e.g., operating your account and features you request)
Legal obligations (where required by law)
Legitimate interests (e.g., security, fraud prevention, improving the Platform), balanced against your rights

Transparency requirements (what we tell you and when) are guided by KVKK and, where applicable, GDPR information duties. (kvkk.gov.tr)

5) Sharing and Transfers of Personal Data

A) Core rule: patient consent

We do not share patient information with providers or third parties without the patient’s consent, except where required by law or as necessary to protect the rights, safety, and security of users and the Platform.

When you submit an inquiry, you may be asked to confirm consent to share specific information with selected providers so they can respond.

B) Who we may share data with

Subject to the rule above, we may share personal data with:

Providers you choose or authorize (doctors/clinics/hospitals) to respond to your request
Service providers (processors) that help us run the Platform (e.g., hosting, email delivery, analytics, customer support tools, security services)
Professional advisors (lawyers, accountants) when necessary
Authorities if required by law, court order, or to protect rights/safety

C) International transfers

Your data may be processed in Türkiye and may be transferred to and processed in other countries depending on where our service providers are located (e.g., hosting, email, analytics). When international transfers occur, we take steps intended to maintain appropriate safeguards as required by applicable law and contracts.

6) Data Retention

We keep personal data only as long as necessary for the purposes described in this Policy, including:

maintaining accounts and providing services,
complying with legal obligations,
resolving disputes, and
enforcing our agreements.

Retention periods vary by data type and context. If you request deletion, we will evaluate it under applicable law and may retain certain data where legally required or necessary for legitimate purposes (e.g., security, fraud prevention, legal claims).

7) Security Measures

We use reasonable administrative, technical, and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. (kvkk.gov.tr)
However, no online service can be guaranteed 100% secure.

8) Cookies and Similar Technologies

We may use cookies and similar technologies to:

operate core site functions (e.g., login/session),
remember preferences,
analyze site performance and usage,
support marketing (where enabled and permitted).

You can control cookies through your browser settings and, where available, our cookie preference tools. Disabling certain cookies may affect site functionality.

9) Your Rights and Choices

Depending on applicable law (including KVKK and, where applicable, GDPR), you may have rights such as:

learning whether your personal data is processed,
requesting access and information,
requesting correction/rectification,
requesting deletion/erasure under certain conditions,
objecting to certain processing (where applicable),
requesting restriction (where applicable),
withdrawing consent at any time (where processing is based on consent).

KVKK also provides a set of data subject rights under Article 11 and requires transparency (aydınlatma) about processing. (kvkk.gov.tr)
If GDPR applies, rights include access, rectification, erasure, restriction, portability, and objection in relevant cases. (European Commission)

How to exercise rights: Email us at support@medicaroute.com. We may request verification to protect your data. We will respond within the timelines required by applicable law.

Marketing preferences: If you receive marketing emails, you can opt out using the unsubscribe link or by contacting us.

10) Children’s Privacy

The Platform is not intended for children under 18. If you are a parent/guardian and believe a child has provided personal data, contact us and we will take appropriate steps under applicable law.

11) Third-Party Links and Provider Practices

The Platform may link to third-party websites and services. Providers (doctors/clinics/hospitals) are independent controllers of the personal data they receive and process. Their privacy practices may differ. We encourage you to review provider and third-party privacy notices.

12) Changes to This Privacy Policy

We may update this Policy from time to time. Changes take effect when posted on the Platform with an updated Effective Date.

13) Contact

Medicaroute Teknoloji Hizmetleri Limited Şirketi
Ahmet Yesevi Mh. Kerem Sk. A-BLOK İDARİ VE KULUÇKA BİNASI Bina No: 9, Ofis No 404/2 Pendik/İSTANBUL
Email: support@medicaroute.com