Last updated: April 2026. This policy explains how GC Clinic collects, stores and uses personal data — enquiry information, clinical imaging, and consultation records — and what rights you have over that data.
Dr. Cansu Öztürk is the data controller for personal information processed through this site. Registered at Şakayık Sokak 39/1, Nişantaşı, Şişli, Istanbul 34365, Turkey. For privacy-related enquiries: [email protected].
All patient data and clinical imaging is stored on EU-resident servers, encrypted at rest (AES-256). Transfer to Dr. Cansu Öztürk's servers uses TLS 1.3. Newsletter data is held by Klaviyo in their EU region.
Under GDPR and equivalent UK legislation, you have the right to: access your data, correct inaccuracies, request deletion, restrict processing, port your data to another controller, and object to processing. Write to [email protected] — Dr. Cansu Öztürk responds within 28 days.
Dr. Cansu Öztürk uses a cookie consent banner. Before consent, only strictly necessary cookies load. After consent, Dr. Cansu Öztürk uses Google Analytics 4 for aggregated site analytics. You can change or withdraw consent any time via the Cookie Settings link in the footer.
Dr. Cansu Öztürk shares data only with: the CRM (HubSpot/Close) for enquiry management; Klaviyo (newsletter only); the WhatsApp Business provider. No marketing to third parties, ever. Dr. Cansu Öztürk does not sell data.
If you are unhappy with how Dr. Cansu Öztürk handles your data, you have the right to complain to the Turkish Personal Data Protection Authority (KVKK), the UK's ICO (if you are resident in the UK), or your local EU data-protection authority.