Privacy Policy

Scope and contact

This policy explains privacy during website enquiries, consultation purchases and appointment planning. It does not replace the Personal Data Notice. The controller is Umut Zereyak, an individual taxpayer operating under the Dr Umut Zereyak Clinic brand.

• Service provider: Umut Zereyak
• Brand: Dr Umut Zereyak Clinic
• Tax office: Erenköy
• Tax number: 9980512598
• Address: Caddebostan Mah. Kantarcı Rıza Sk. No:1, İç Kapı No:4, Kadıköy/İstanbul, Türkiye
• Clinic / appointments: +90 505 115 7001
• Coordinator · WhatsApp: +90 505 115 7010
• Email: doctoruz34@gmail.com
• Alternative email: umut@zereyak.com

Use of information

Contact, appointment, order and billing information is used to deliver the service, answer requests and meet legal obligations. Health history and photographs are not requested in the purchase form. The photograph field in the contact form is optional and requires separate explicit consent; you may submit an enquiry without photographs.

Health information and photographs are shared only where necessary with the authorised doctor and staff whose duties require access. Buying a service, submitting a photograph or accepting this agreement does not authorise advertising, social media, training or marketing use.

Private photographs and security

Contact photographs and the related consent record are encrypted in private storage and accessible only through an authorised administrator session. They are not placed in public media. Notification emails contain neither photographs nor the message body. You can check that your face is not visible before uploading; the system does not automatically conceal faces.

Payments and external services

Card details are sent directly to the bank's payment system. Card numbers and CVV are neither received nor stored by the application server. The bank's own data processing information also applies.

Google Meet is the consultation channel; the clinic does not record audio or video. Only necessary information is shared with appointment, communication, billing and technical providers for the relevant purposes and legal conditions.

Using external platforms such as Google Meet and WhatsApp may involve transfers abroad. The requirements of Article 9 of Law No. 6698 must be met separately before a relevant transfer. The personal data notice, general contract acceptance and an early-service request do not constitute blanket consent to international transfers.

Session cookies and external links

Technical cookies maintain the session and protect forms. External content and links, including maps, video, social media and WhatsApp, are subject to their providers' data processing terms. Any choices or permissions required for non-essential processing are obtained separately.

Retention and security

Records are kept only as long as required for the purpose and applicable legal obligations. When those grounds cease, data is deleted, destroyed or anonymised as appropriate. Access to health data is restricted by role and the applicable conditions for special-category data.

You can contact the clinic to request information, correction or deletion where the conditions apply. The Personal Data Notice explains your rights and application procedure.