Privacy Policy
Last updated: January 1, 2026
1. Introduction
At Clyna.io ("we", "us" or "our") we take your privacy seriously. This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, and the rights you have under applicable data-protection laws, including the Turkish Personal Data Protection Law (KVKK) and, where relevant, the EU General Data Protection Regulation (GDPR).
2. Data We Collect
Depending on how you use the Platform, we may collect the following categories of personal data:
- Identity data: first name, last name, date of birth, gender
- Contact data: email address, phone number, postal address
- Health data: treatment preferences and basic medical history — only when you voluntarily provide it as part of a quote request, and always with your explicit consent
- Payment data: card details (processed by our PCI-DSS compliant payment provider), billing address and transaction history
- Usage data: IP address, device identifiers, browser type and version, pages visited, referrer, approximate location
3. How We Use Your Data
We process your personal data only for specific, lawful purposes, including:
- Providing, maintaining and improving our services
- Facilitating communication between you and Clinics
- Processing bookings, quotes, payments and refunds
- Personalizing content, recommendations and search results
- Complying with our legal, tax and regulatory obligations
- Detecting, preventing and investigating fraud or abuse
4. How We Share Your Data
We do not sell your personal data. We share it only with the following categories of recipients and only to the extent necessary:
- Clinics: the healthcare providers you choose to contact, so they can prepare a treatment plan or quote for you
- Service providers: trusted vendors that help us run the Platform (hosting, payment processing, analytics, email delivery, customer support), bound by contractual confidentiality obligations
- Legal authorities: courts, regulators or government agencies when required by law, court order or to protect our rights
- Business transfers: in connection with a merger, acquisition, reorganisation or sale of assets, subject to equivalent protections
5. Cookies and Similar Technologies
We use cookies and similar technologies to keep you signed in, remember your preferences, measure traffic and provide relevant content. You can manage cookies through your browser or our cookie-preference centre. For details, see our Cookie Policy.
6. Data Security
We apply industry-standard technical and organisational measures to protect your personal data, including TLS encryption in transit, encryption at rest for sensitive fields, access controls, logging and regular security reviews. No method of transmission over the Internet is 100% secure, however, and we cannot guarantee absolute security.
7. Your Rights
Subject to applicable law, you have the right to:
- know whether we process personal data about you
- request information about the data we hold
- understand the purposes for which your data is processed
- have incomplete or inaccurate data corrected
- request deletion of your data ("right to be forgotten")
- restrict or object to certain processing activities
- be informed about third parties with whom your data has been shared
8. Data Retention
We keep your personal data only for as long as needed to provide the services, comply with our legal obligations, resolve disputes and enforce our agreements. When you delete your account, we remove or anonymise your data within a reasonable period, except where retention is required by law (for example tax and accounting records).
9. Children's Privacy
Our services are not directed to children under 18. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected such data without valid parental consent, we will delete it promptly.
10. Changes to this Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a prominent notice on the Platform before the changes take effect.
11. Contact Us
If you have questions about this Privacy Policy or want to exercise your rights, please contact our Data Protection team:
Email: [email protected]