Privacy Policy

At Agagsia Dental Clinic (operating under World Agagsia Health Tourism, collectively referred to as "we", "us", or "our"), we are committed to safeguarding the privacy and security of our patients, website visitors, and event attendees.

This Privacy Policy explains how we collect, use, disclose, and protect your personal and medical information in compliance with the EU/UK General Data Protection Regulation (GDPR / UK GDPR) and the Turkish Law on the Protection of Personal Data (KVKK No. 6698).

1. Data Controller Information

• Company Name: World Agagsia Health Tourism / Agagsia Dental Clinic
• Clinic Locations: Istanbul & Antalya, Türkiye
• Contact Email: info@agagsiadental.com
• MERSIS No: 815027390500011
• Tax No: 0701075922
• Head Office Address: Güzeloba, 2272. Sk. No:80-1, 07230 Muratpaşa/Antalya, Türkiye
• Phone / WhatsApp: +44 7824 104451

2. Information We Collect

We collect information directly from you when you fill out contact/lead forms, register for dental meet-up events, communicate via WhatsApp/phone, or receive treatment planning services:

• Identity & Contact Data: Full name, phone number, email address, country of residence, and date of birth.
• Special Category Data (Health & Medical Data): Dental records, panoramic X-rays, photos of your teeth, medical history, allergies, medications, and clinical assessment notes required for preliminary evaluation and treatment planning.
• Travel & Coordination Data: Flight details, hotel reservation data, and passport/ID details needed for transfer, accommodation, and clinic scheduling.
• Technical & Usage Data: IP address, browser type, device information, operating system, and interaction data collected automatically via cookies and analytics tools when visiting our website.
• Campaign & Tracking Data: If you reach us through an advertisement, the campaign parameters (such as UTM parameters and the Google Ads click ID / GCLID), the landing page and full link you visited, the clinic and language you selected, and the website version (A/B variant) you saw are recorded together with your enquiry so we can measure the effectiveness of our advertising.

Our services are intended for adults. We do not knowingly collect personal data from children under 18 without the consent of a parent or legal guardian; where a treatment concerns a minor, the data is processed with the parent's or guardian's consent.

3. Purposes and Legal Grounds for Processing

We process your data for the following purposes based on specific legal grounds:

We do not make decisions based solely on automated processing or profiling that produce legal effects concerning you. Treatment plans and quotations are prepared by our medical and patient-coordination teams.

4. Where Your Data Is Stored (Zoho CRM)

The personal data you submit to us through website forms, event registrations, WhatsApp/phone enquiries, and treatment planning is recorded and managed in Zoho CRM, the customer relationship management platform provided by Zoho Corporation, which we use to manage enquiries, appointments, patient communication, and follow-ups.

Your CRM records are hosted in Zoho's European Union data centers (Netherlands and Ireland), on servers located within the EU.

Zoho acts as our data processor and handles your data only on our instructions under a data processing agreement. Access to your records is limited to authorized staff through role-based permissions.

Details you submit through our contact and consultation forms are not stored on our website's own servers; they are transmitted directly to Zoho CRM. Event (meet-up) registrations are additionally kept in our website database for the time needed to manage slots and capacity, and are also sent to Zoho CRM. Beyond this, only the technical records needed to operate the site (such as security logs) remain on our web server.

5. How We Share Your Information

We do not sell, rent, or trade your personal information. Your data is shared strictly on a need-to-know basis with:

• Our Healthcare Professionals & Clinics: Dentists, surgeons, and medical staff operating at our facilities in Antalya and Istanbul.
• Operational Service Providers: Contracted transfer providers, VIP transport services, and partner hotels strictly to execute your itinerary.
• IT & Cloud Infrastructure: Zoho CRM, cloud database hosting, telecommunications/VoIP providers, and encrypted data storage services operating under strict data processing agreements.
• Legal & Regulatory Authorities: Official bodies or healthcare authorities when required by mandatory legal obligations under Turkish law.

6. International Data Transfers

Because our physical treatment facilities are located in Türkiye while many of our patients reside in the United Kingdom, the European Union, and other countries, and because our cloud service providers (including Zoho CRM) may process data on servers outside your country of residence, your data may be transferred across international borders.

All cross-border transfers are conducted in compliance with standard contractual clauses (SCCs), explicit patient consent, or legally recognized adequacy mechanisms to guarantee equivalent data protection.

When you accept analytics and marketing cookies, Google Analytics (Google LLC / Google Ireland Limited) and the Meta Pixel (Meta Platforms Ireland Limited / Meta Platforms, Inc.) may process data about your visit and transfer it to servers outside your country of residence, including the United States. These transfers rely on the providers' standard contractual clauses or other approved transfer mechanisms.

7. Data Security and Retention

• Security: We apply strict technical and organizational measures, including TLS/SSL encryption, role-based database access, firewall defenses, and secure data storage to protect your personal and health information against unauthorized access, alteration, or disclosure.
• Retention: We retain medical and patient files in accordance with the mandatory statutory retention periods set by the Turkish Ministry of Health. Non-medical inquiry and marketing data (including the corresponding Zoho CRM records) are retained for 2 years from our last contact with you, or until you withdraw your consent if earlier, and are then deleted or anonymized.

8. Your Legal Rights

Depending on your country of residence (EU, UK, or Türkiye), you have specific statutory rights regarding your personal data:

• Right of Access: Request copies of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data, subject to mandatory legal record-keeping requirements for healthcare providers.
• Right to Restrict or Object to Processing: Object to or restrict certain processing activities, including marketing communications.
• Right to Data Portability: Request transfer of your data to another controller in a structured, commonly used format.
• Right to Withdraw Consent: Withdraw your explicit consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Rights under KVKK Art. 11: Apply to us to learn whether personal data is processed, request information, learn the purpose, and request rectification or destruction within legal bounds.
• Right to Lodge a Complaint: Complain to a data protection authority if you believe your data is processed unlawfully: the Personal Data Protection Board (KVKK) in Türkiye, the Information Commissioner's Office (ICO) in the United Kingdom, or the supervisory authority of your EU member state of residence.

To exercise any of these rights, please contact our Data Protection Team at info@agagsiadental.com or call +44 7824 104451.

9. Cookies and Tracking Technologies

Our website uses essential cookies, which are necessary for the site to work, and — only with your consent — analytical and marketing cookies to optimize site performance and monitor marketing campaigns. The analytics and marketing tools we use are Google Analytics and the Meta (Facebook) Pixel. They are not activated until you accept them in our on-site cookie consent banner. You can change or withdraw your preferences at any time through the banner or your browser settings.

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our medical services, operational workflows, or regulatory requirements. Any updates will be published on this page with an updated effective date.

Last updated: 9 October 2026