PRIVACY POLICY
Effective Date: 12 November 2025
Introductory Text: At Medora Smile, the privacy and security of your personal and health data are our highest priority. This policy outlines how we collect, use, process, and protect the information submitted to us for the sole purpose of providing specialized DENTAL TREATMENT CONSULTING and treatment coordination services for international patients.
1. DATA WE COLLECT
We collect information necessary to prepare your preliminary treatment roadmap and facilitate your clinical procedure. This data falls into three categories:
-
Identity and Contact Data: Name, surname, email address, phone number, and Country of Residence.
-
Profile Data: Age, gender, and preferred communication language.
-
Sensitive Health Data (Explicit Consent Required):
-
Dental Records, panoramic X-Rays, and CT scans.
-
High-resolution diagnostic images (intra-oral and smile photos).
-
Existing treatment history and specific aesthetic/functional goals.
-
2. LEGAL BASIS FOR PROCESSING & CONSENT
We process your data based on the following legal grounds:
-
Explicit Consent (Health Data): We process your sensitive health data (including images) strictly based on your explicit consent provided via the mandatory consent checkbox in our forms (GDPR Article 9(2)(a)). You have the right to withdraw this consent at any time.
-
Contractual Necessity (Identity Data): We process your Identity and Contact data to fulfill our consulting contract with you (i.e., preparing the treatment plan and coordinating logistics).
3. HOW WE USE YOUR DATA
Your data is used exclusively for:
-
Preliminary Assessment: To analyze your clinical suitability and create a personalized treatment plan proposal.
-
Specialist Matching: To facilitate communication and transfer necessary diagnostic data to our certified partner dental clinics/specialists for definitive diagnosis.
-
Coordination and Logistics: To arrange appointment schedules, transfers, and accommodation related to your treatment journey.
-
Communication: To contact you via phone or WhatsApp regarding your consultation request, treatment plan, and follow-up.
4. DATA SHARING AND TRANSFERS
We do not sell or rent your personal data. We only share data with necessary third parties under strict confidentiality agreements:
-
Partner Clinics: Your relevant Health Data is shared only with the specific certified dental specialist/clinic selected for your treatment, to ensure continuity of care.
-
Logistics Providers: Identity and Contact Data may be shared with pre-vetted transfer and accommodation partners (if booked through us) solely for service delivery.
5. DATA SECURITY AND RETENTION
-
We employ appropriate technical and organizational measures (e.g., encryption, access controls) to protect your data from unauthorized access, loss, or disclosure.
-
We retain your data only for as long as necessary to fulfill the purposes outlined in this policy, including any post-treatment follow-up period.
6. YOUR RIGHTS
Under GDPR and KVKK, you have the right to:
-
Access the personal data we hold about you.
-
Request the correction of inaccurate data.
-
Request the erasure of your personal data (Right to be Forgotten).
-
Withdraw your consent for the processing of your data at any time.
If you have questions about this policy or wish to exercise your rights, please contact us using the details provided on our website.
