This Privacy Policy explains how Auraliss processes, protects and stores personal data collected through our website and communication channels. Auraliss provides international health tourism intermediary services and does not operate as a healthcare facility. All medical procedures are performed exclusively in Ministry-authorized, licensed contracted clinics.
By using our website or contacting us, you agree to the terms outlined in this Privacy Policy.
1. Types of Personal Data We Collect
We only collect limited personal information that you voluntarily provide:
- Full name
- Phone number
- Email address
- Basic message or inquiry content
Additionally, for general analytics and website performance monitoring, the following technical data may be collected automatically:
- IP address
- Browser information
- Device information
- Cookie and analytics data (Google Analytics, Meta Pixel, etc.)
No medical diagnosis, medical history or special category health data is collected unless voluntarily provided by the user for coordination purposes.
2. How We Collect Personal Data
Personal data is collected through:
- Website contact form
- Email communication
- Phone calls
- WhatsApp messages
- Social media messages
- Analytics and cookie tools
We do not collect data from third parties without consent.
3. Purpose of Processing Personal Data
Your personal data is processed for the following purposes:
- Responding to inquiries
- Providing coordination and communication support
- Organising appointment scheduling and travel planning
- Providing information about available services
- Customer support before, during and after the treatment trip
- Managing website performance and security
- Compliance with legal and regulatory obligations
We do not use personal data for automated decision-making or profiling.
4. Legal Basis for Processing (KVKK & GDPR)
Your data is processed under:
- Explicit consent (KVKK m.5/1, GDPR Art.6/1-a)
- Legitimate interest for communication and coordination (KVKK m.5/2-f, GDPR Art.6/1-f)
- Legal obligations (KVKK m.5/2-ç)
5. Data Sharing With Third Parties
Personal data may be shared only with:
- Licensed and Ministry-authorized contracted clinics (for appointment coordination)
- Technology and communication service providers (WhatsApp, hosting provider, email servers)
- Analytics platforms (Google Analytics, Meta Pixel)
- CRM systems such as Zoho (if used)
We never sell or transfer personal data to unauthorized third parties.
6. Data Storage and Retention Period
Personal data is stored securely and retained for:
- 2 years for general inquiries
- 5 years if part of legal or coordination records
After the retention period, data is permanently deleted or anonymized.
7. International Data Transfer
Some of our service providers (e.g., email or cloud services) may operate outside Türkiye. In such cases, data is transferred in compliance with:
- KVKK international transfer rules
- GDPR adequacy and standard contractual clauses
8. Your Rights Under KVKK & GDPR
You have the following rights:
- To learn whether your data is processed
- To request a copy of your data
- To request correction or deletion
- To object to data processing
- To withdraw consent
- To request restriction of processing
- To request information about third-party transfers
Requests can be submitted via our KEP address or email.
Contact for requests: info@auralisshealthtour.com
9. Data Security
We apply administrative and technical measures to protect data, including:
- Encrypted communication
- Secure hosting infrastructure
- Access-restricted systems
- Regular security audits
10. Cookies and Tracking Technologies
Our website may use:
- Google Analytics
- Meta Pixel
- Session cookies
- Performance cookies
Users can manage cookie preferences via browser settings or cookie banner tools.
11. Updates to This Policy
Auraliss may update this Privacy Policy to comply with new regulations or service changes. Updates are published on this page with the revision date.