Privacy and Data Protection

If you ask us for a treatment plan you will tell us things about your health. This page says exactly what happens to that information, in plain terms, because you are entitled to know before you type it rather than afterwards.

CureBooking is operated by Atalante Software, Değirmendere Mahallesi, Park Olivia Residence 5G, 09400 Kuşadası / Aydın, Türkiye. Email [email protected], telephone +90 850 480 00 50.

Last updated 30 October 2026

What we collect

  • What you type into the enquiry form: your name, email address, telephone or WhatsApp number if you give one, the city you would prefer, the treatment you are asking about, and your message.
  • What you send us afterwards by email or WhatsApp. This commonly includes photographs, x-rays, scans, your medical history and the medication you take. Under UK and EU law that is special category health data and it is treated as such.
  • Which page you were on when you sent the enquiry, and which language version — so the reply answers the question you actually asked.
  • Standard technical data every website receives: your IP address, browser and the pages you opened, through our server logs and the Google Ads tag described below.

Why we are allowed to hold it

Your name, contact details and the treatment you asked about are processed to answer your enquiry and to prepare a plan and price — that is the contract you are asking us to prepare, and our legitimate interest in replying to you.

Health information is different and is processed only on the basis of your explicit consent. You give that consent by sending it to us, and you can withdraw it at any time by emailing [email protected]. Withdrawing it means we can no longer prepare a clinical plan, which is the honest consequence rather than a threat.

We do not buy contact lists, we do not sell yours, and we do not use what you send us in any advertising — not anonymised, not cropped, not as a case study.

Who sees it

  • Our own coordinators, who are the people who reply to you.
  • The partner clinic, hospital or surgeon who would treat you — but only the clinical information, only once you have asked us to arrange an assessment, and only the practice that is actually assessing your case. It is named to you in the written plan.
  • The hotel and transfer company, once you decide to travel, and then only your name and dates. They are not told what treatment you are having.
  • Telegram, which carries the internal notification that an enquiry has arrived. That message contains your name, contact details and your message, and Telegram processes it outside the UK and EU.
  • Google, through the advertising tag described below. Google does not receive your name, your message or anything you tell us about your health.
  • Nobody else. We do not share your data with other clinics, agencies or lead brokers.

Where it is stored and for how long

Enquiries are stored in our own database on a server in Germany, with a backup copy held by us. Correspondence stays in our email and WhatsApp accounts.

We keep enquiries for 24 months from your last message to us, so that a question you ask next year can be answered with the history in front of us. After that they are deleted. Records relating to treatment that actually went ahead are kept longer where Turkish accounting and health-travel rules require it.

You can ask us to delete everything sooner and we will, except where we are legally required to keep an invoice.

Cookies and advertising

This site loads the Google Ads tag (gtag) on every page. It sets Google advertising cookies and tells Google when someone who clicked one of our adverts opened a WhatsApp link, so that we can see which adverts produce enquiries. It does not record what you write.

We do not use analytics profiling beyond that, we do not run social media pixels, and we do not share audiences with anyone.

You can block these cookies in your browser settings or through Google’s own advert settings, and the site works normally without them.

Your rights

  • Ask what we hold about you, and get a copy.
  • Have mistakes corrected.
  • Have your data deleted, or withdraw your consent for the health information.
  • Object to how we use it, or ask us to restrict use while a complaint is looked at.
  • Receive your data in a portable file so you can take it elsewhere.
  • Complain to your own data protection authority — the ICO in the United Kingdom, your national authority in the EU, or the KVKK Authority in Türkiye.

How to exercise them

Email [email protected] with the request. We reply within 30 days, usually much sooner, and we do not charge for it. If the request comes from an address we have never corresponded with, we will ask one question to confirm it is you before sending anything out.