Privacy Policy
This Privacy Policy describes how Assoc. Prof. Dr. Ayşe Atay ("we", "us", "our") collects, uses, and shares personal data when you visit drayseatay.com (the "Site") or submit a consultation request through it.
We respect your privacy. We process your data lawfully under the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK No. 6698) where applicable.
1. Who is the data controller
Assoc. Prof. Dr. Ayşe Atay, practicing at the dental clinic located at 19 Mayıs Mah. Etfal Hastanesi Sk. Kent Apt. No:2, D:78, 34360 Şişli/Istanbul, Turkey, is the controller responsible for personal data collected through this Site.
Contact for privacy inquiries: info@drayseatay.com
2. What data we collect
2.1 Information you provide via the consultation form
- Full name
- Email address
- Phone number (including country code)
- Country of residence
- Treatment of interest (veneers, dental implants, full mouth rehabilitation, etc.)
- Free-text message describing your dental concerns or questions
- Privacy consent confirmation
2.2 Information collected automatically
- IP address and approximate location (city/country level)
- Browser type and version, operating system, device type
- Pages you visit on this Site, time spent, clicks, scroll depth
- Referring website (e.g. Google search, social media)
- Cookies and similar tracking technologies (see Section 6)
2.3 Information you may share via WhatsApp
If you click a WhatsApp button on this Site, you will be redirected to WhatsApp's platform. Any messages, images, or documents you send to us via WhatsApp are stored on WhatsApp's servers (operated by Meta Platforms Inc.) and are also visible to our clinic staff who handle the conversation. WhatsApp's own privacy policy applies to that platform.
3. How we use your data
We use your personal data only for the following purposes:
- To respond to your consultation request and provide information about treatments, scheduling, and pricing
- To provide a personalized treatment plan based on the information you share
- To follow up with you about your inquiry via email, phone, or WhatsApp
- To improve the Site, our services, and the patient experience
- To comply with our legal and regulatory obligations
- To measure the performance of our advertising campaigns (in aggregate, non-identifying form)
4. Legal basis for processing
Under GDPR Article 6, we process your data based on:
- Your consent — when you submit the consultation form and tick the privacy consent box (Article 6(1)(a))
- Performance of a contract / pre-contractual measures — to respond to your treatment inquiry (Article 6(1)(b))
- Legitimate interests — to operate, improve, and secure the Site, and to advertise our services responsibly (Article 6(1)(f))
- Legal obligations — patient record retention requirements under Turkish health and tax law (Article 6(1)(c))
5. Who we share your data with
We do not sell your personal data. We share it only with the following categories of recipients, under appropriate contractual safeguards:
- Clinic staff — receptionists, treatment coordinators, and clinical team members involved in responding to your inquiry
- Email service providers — to deliver lead notifications and follow-up correspondence (e.g. Cloudflare Email Routing, Zoho Mail)
- Cloudflare, Inc. — hosting and content delivery for this Site
- Google LLC — Google Ads conversion tracking and Google Analytics (in aggregate, see Section 6)
- Meta Platforms, Inc. — Meta Pixel for advertising performance measurement (when activated)
- WhatsApp / Meta — when you choose to contact us via WhatsApp
- Legal and tax advisors — only when required by law
Some of these recipients (e.g. Google, Meta, Cloudflare) are based in countries outside the EU/EEA. Where applicable, transfers are protected by EU Standard Contractual Clauses or equivalent safeguards.
6. Cookies and tracking technologies
This Site uses cookies and similar technologies, including:
- Strictly necessary cookies — required for the Site to function (e.g. CDN security, session)
- Analytics cookies — Google Analytics and Google Ads conversion tags, used to measure advertising performance and Site usage
- Advertising cookies — Meta Pixel (when activated) and Google Ads remarketing tags
You can disable cookies in your browser settings, opt out of Google Analytics via the Google Analytics Opt-out Browser Add-on, and manage Google Ads personalization via your Google Ads Settings.
7. How long we keep your data
- Consultation form submissions — kept for up to 24 months from your last interaction with us, then deleted unless you become a patient
- Patient records (if you become a patient) — kept for the period required by Turkish health regulations (typically 20 years)
- Server logs and analytics data — kept for up to 14 months in identifiable form, then anonymized or deleted
- WhatsApp conversations — retained on WhatsApp's servers per their retention policy; clinic-side copies retained per the consultation form rule above
8. Your rights
Under GDPR and KVKK, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data ("right to erasure"), subject to legal retention requirements
- Object to or restrict certain processing activities
- Withdraw your consent at any time (without affecting the lawfulness of past processing)
- Receive a copy of your data in a portable format
- Lodge a complaint with a supervisory authority — for EU residents, your local data protection authority; for Turkey, the KVKK
To exercise any of these rights, email us at info@drayseatay.com and we will respond within 30 days.
9. Security
We implement reasonable technical and organizational measures to protect your data, including HTTPS encryption in transit, access controls, and Cloudflare security infrastructure. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
10. Children
This Site is not directed at children under 16. We do not knowingly collect personal data from children. Treatments for minors are arranged through the parent or legal guardian.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via a notice on this page. Continued use of the Site after changes constitutes acceptance.
12. Contact
For any privacy-related questions or to exercise your rights:
Email: info@drayseatay.com
Phone / WhatsApp: +90 549 680 7367
Clinic address: 19 Mayıs Mah. Etfal Hastanesi Sk. Kent Apt. No:2, D:78, 34360 Şişli/Istanbul, Turkey