Privacy Policy

Last updated: 14.10.2026

This Privacy Policy explains how Atlantic Dental collects and uses personal data when you visit atlanticdentalturkey.com and its campaign (landing) pages, fill in a form, take our dental profile quiz or otherwise contact us through the website. It is written with our international patients in mind and covers the EU General Data Protection Regulation (GDPR), the UK GDPR and the Turkish Personal Data Protection Law No. 6698 (KVKK). Information specific to Turkish law is set out in our KVKK Information Notice, and cookies are covered in more detail in our Cookie Policy.

1. Who we are

The controller of your personal data is Atlantic Dental ("we", "us"), Levazım Mah. Koru Sok. No:2 İç Kapı No: 325 Beşiktaş/İstanbul, Türkiye. You can reach us at info@atlanticdentalturkey.com; our telephone and WhatsApp numbers are shown on the Contact page.

2. What data we collect

Information you give us

  • Contact and enquiry forms (home page, contact page and campaign pages): your name, email address, telephone number, the treatment you are interested in, your message and, on some forms, your preferred contact method (phone, WhatsApp or email).
  • Dental profile quiz: your answers about your teeth, concerns and goals (for example missing or failing teeth, dentures, difficulty chewing, how you would like your smile to look, your preferred timing), together with your name, email address and telephone number.
  • Photos: the form on our London campaign page lets you select a photo, but the photo itself is not uploaded or sent to us. Only the file name is added to your message. If you wish to share photos or X-rays, our team will suggest a secure way to do so.
  • Other contact: anything you tell us by email, telephone or WhatsApp.

Information collected automatically

  • Technical form data: the page and form you used, the website language and, if you arrived through an advertisement or campaign link, its UTM parameters (source, medium, campaign, content and term).
  • Server logs: our hosting provider records standard technical data such as IP address, browser and device information (user agent), and the date, time and address of each request.
  • Abuse prevention: when a form is submitted, the Cloudflare Turnstile check processes technical signals (see section 6), and our server keeps a hashed (non-readable) form of your IP address for a short time to limit repeated submissions.
  • Cookies and similar technologies: see our Cookie Policy.

3. Health information

Information about your dental health, such as your quiz answers or details you include in a message, is a special category of personal data under the GDPR and the KVKK. We ask you to share only what is needed for us to respond to your enquiry. Where we process such information before you become a patient, we rely on your explicit consent (Art. 9(2)(a) GDPR; Art. 6 KVKK). Once you become a patient, your health data is processed by health professionals bound by professional secrecy for diagnosis and treatment (Art. 9(2)(h) GDPR; Art. 6(3) KVKK) and in line with Turkish health legislation.

4. Why we use your data and our legal bases

  • Responding to your enquiry and arranging a consultation or treatment: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and, for health information, your explicit consent.
  • Recording and following up enquiries in our CRM: the same bases as above, together with our legitimate interest in organising patient enquiries efficiently (Art. 6(1)(f) GDPR).
  • Protecting the website and forms against spam, bots and abuse, and keeping server logs: our legitimate interest in the security of our services (Art. 6(1)(f) GDPR).
  • Website analytics and advertising measurement (Google Analytics, Google Ads, Meta Pixel): your consent, where required by law (Art. 6(1)(a) GDPR, KVKK, ePrivacy rules and UK PECR).
  • Meeting legal obligations and handling legal claims: legal obligation (Art. 6(1)(c) GDPR) and our legitimate interest in establishing, exercising or defending legal claims.

We do not sell your personal data, and we do not use your health information for advertising.

5. The dental profile quiz

At the end of the quiz you see a profile and a planning score based on your answers. These are for general information only. They are not a medical diagnosis and do not produce any decision with legal or similarly significant effects for you; any treatment recommendation is made only after a dentist has reviewed your case.

So that you can continue where you left off, the quiz saves your progress, answers and the contact details entered in the quiz in your own browser's local storage. This information stays on your device until you restart the quiz or clear your browser's site data, and it is sent to us only when you submit the quiz.

6. Who we share your data with

We share personal data only as far as necessary, with:

  • Our email delivery service: form and quiz submissions are delivered to our mailbox through an email delivery service operated by our website's technical service provider (mailsender.piksel.co), acting as our processor.
  • Zoho Corporation: your submission, including a summary of your quiz answers and any campaign information, is recorded as a lead in our Zoho CRM account, hosted in Zoho's US data centre (processor). See the Zoho Privacy Policy.
  • Our hosting provider, GoDaddy, which hosts the website and its server logs.
  • Google and Meta, for analytics and advertising measurement through Google Tag Manager, Google Analytics 4, Google Ads conversion tracking and the Meta Pixel (see section 7 and our Cookie Policy). Our website is not configured to send the content of your forms or quiz answers to these tools; only event information is passed on, such as the fact that a form was sent from a particular page.
  • Our partner clinic in London, Kensington Dental Studio: if you request an in-person assessment in London through our London campaign page, the details needed to arrange it (your name, contact details and request) may be shared with this clinic.
  • Professional advisers and public authorities, where required by law or needed to protect our rights.

Cloudflare Turnstile

We use Cloudflare Turnstile, provided by Cloudflare, Inc., on our forms and quiz to protect them against automated submissions and abuse. To tell people and bots apart, Turnstile may process technical signals such as your IP address, TLS fingerprint, browser (user agent) information and the website on which the form is used. We rely on our legitimate interest in keeping our forms secure. Cloudflare's processing is described in the Cloudflare Privacy Policy and the Turnstile Privacy Addendum.

7. Analytics, advertising and third-party content

Our website uses Google Tag Manager to load Google Analytics 4, Google Ads conversion tracking and the Meta (Facebook) Pixel. These tools help us understand how the website is used and whether our advertisements lead to enquiries. Google and Meta may also use this data for their own purposes as independent controllers, and for the Meta Pixel we may act as joint controller with Meta for the collection and transmission of data. Some pages also load content from third parties, which receive your IP address when the content is displayed: Google Maps (map on the contact and campaign pages), Google Fonts, the jsDelivr content network (icons) and the 360-degree virtual tour provided by 360gez (app.360gez.com). Details and your choices are set out in our Cookie Policy.

8. International transfers

We are based in Türkiye, so information you send through the website is processed by us in Türkiye. Some of our service providers process data in other countries, particularly the United States (Zoho, Google, Meta, Cloudflare). Transfers from Türkiye are carried out in accordance with Article 9 KVKK, on the basis of the appropriate safeguards provided for in the law (such as standard contracts) or, where these are not available, one of the occasional-transfer exceptions in Article 9(6) KVKK, including your explicit consent where required. For data protected by the GDPR or UK GDPR, transfers to our providers are carried out on the basis of appropriate safeguards recognised under those laws, such as the European Commission's Standard Contractual Clauses (with the UK addendum) or, where a provider is certified, the EU-US Data Privacy Framework and its UK extension. You can request more information about these safeguards by contacting us.

9. How long we keep your data

  • Enquiries that do not lead to treatment (emails and CRM records): 2 years from the last contact, unless you ask us to delete them sooner.
  • Patient records, if you become our patient: for the period required by Turkish health legislation.
  • Records needed for legal claims: until the relevant limitation period expires.
  • Server logs: about 6 months.
  • Hashed IP data used to limit repeated submissions: a short time, after which it is deleted automatically.
  • Quiz progress in your browser: until you restart the quiz or clear your browser's site data.
  • Consent-based data: until you withdraw your consent, unless another legal basis applies.

10. Security

Our website is served over HTTPS, and form submissions are transmitted to our email service and CRM over encrypted connections. Access to enquiries is limited to the staff who need it to respond to you. Our website server does not keep a copy of form submissions. No system can be completely secure, so please do not send more sensitive information through the website than is needed for your enquiry.

11. Children

Our website is not directed at children under 18, and we do not knowingly collect their data through it. Enquiries about treatment for a minor should be made by a parent or legal guardian.

12. Links to other websites and social media

Our website contains links to WhatsApp, Instagram, Facebook, YouTube, TikTok and Google Maps. When you follow these links you leave our website, and the privacy policies of those services apply. If you message us on WhatsApp, WhatsApp processes your messages under its own terms, and we process what you send us for the purposes described in this policy.

13. Your rights

Depending on the law that applies to you, you have the right to:

  • access the personal data we hold about you and receive a copy;
  • have inaccurate or incomplete data corrected;
  • have your data deleted;
  • restrict our processing of your data;
  • receive data you provided to us in a portable format;
  • object to processing based on our legitimate interests, and to direct marketing at any time;
  • withdraw your consent at any time, without affecting processing carried out before withdrawal;
  • not be subject to a decision based solely on automated processing that significantly affects you.

To exercise your rights, contact us at info@atlanticdentalturkey.com. We may need to verify your identity before responding. We will reply within one month under the GDPR and UK GDPR, and within 30 days under the KVKK. The KVKK application procedure is described in our KVKK Information Notice.

You also have the right to lodge a complaint with a supervisory authority: in the EU, the authority of your country of residence or work (in France, the CNIL); in the UK, the Information Commissioner's Office; and in Türkiye, the Personal Data Protection Authority. We would appreciate the chance to address your concerns first.

14. Changes to this policy

We may update this Privacy Policy when our services, providers or legal requirements change. The current version is always published on this page with its "last updated" date.