Last updated: April 2026. This policy explains how GC Clinic collects, stores and uses personal data — enquiry information, clinical imaging, and consultation records — and what rights you have over that data.
Dr. Cansu Öztürk is the data controller for personal information processed through this site. Registered at Şakayık Sokak 39/1, Nişantaşı, Şişli, Istanbul 34365, Turkey. For privacy-related enquiries: info@gc.clinic.
All patient data and clinical imaging is stored on EU-resident servers, encrypted at rest (AES-256). Transfer to Dr. Cansu Öztürk’s servers uses TLS 1.3. Newsletter data is held by Klaviyo in their EU region.
Under GDPR and equivalent UK legislation, you have the right to: access your data, correct inaccuracies, request deletion, restrict processing, port your data to another controller, and object to processing. Write to info@gc.clinic — Dr. Cansu Öztürk responds within 28 days.
Enquiry data — name, email, phone/WhatsApp, country of residence, written description of your concern.
Clinical imaging — any X-ray, CBCT, or photographs you upload for second-opinion or quote purposes.
Technical data — IP address, device type, browser (only after cookie consent).
To reply to your enquiry and prepare a treatment plan.
To coordinate your treatment if you become a patient.
For newsletter (only if you subscribed separately).
For site analytics — only after explicit cookie consent.
Non-patient enquiries — deleted 30 days after your last interaction.
Patient records — retained per Turkish Ministry of Health regulations (minimum 10 years).
Newsletter subscribers — until you unsubscribe.