Privacy Policy

1. Data Controller

The data controller for this website is Cellavia Dental Clinic, located at Cellavia Dental Clinic, Kucukbakkalkoy, Ahmet Yesevi Cd No: 8, 34750 Atasehir/Istanbul. You can reach us at info@cellaviadental.com for any privacy-related questions.

2. Data We Collect

We collect the following categories of personal data:

• Consultation form data — name, email, phone number, country, treatment interest, medical notes (e.g. diabetes status), and case description.
• Chat widget data — name, email, phone number, and free-text messages submitted through our live chat widget.
• Attribution data — referral source, landing page URL, UTM campaign parameters, Google click identifiers (gclid, gbraid, wbraid), and Meta click identifiers (fbclid).
• Analytics data — anonymised page views, scroll depth, click events, and device/browser type collected through Google Analytics 4 and Google Tag Manager.
• Cookie data — functional and analytics cookies as detailed in section 7 below.

3. Legal Basis for Processing

• Consent — Analytics and marketing cookies are set only after you grant consent via our cookie banner (Cookiebot).
• Contractual necessity — Consultation form data is processed to fulfil your request for a case review and treatment plan.
• Legitimate interest — Attribution data is used to measure advertising effectiveness and improve our services.

4. How We Use Your Data

• Coordinating your case review and proposing a preliminary treatment plan.
• Responding to consultation requests within 48 hours.
• Sending appointment-related communications (no marketing unless you opt in).
• Measuring website performance, ad campaign effectiveness, and improving user experience.
• Server-side conversion tracking via Google Analytics 4 Measurement Protocol to ensure accurate attribution.

5. Data Sharing and Third Parties

We share personal data only with the following categories of recipients:

• CRM system (GoHighLevel / LeadConnector) — to manage consultations, appointments, and patient communication workflows.
• Google (Analytics 4, Tag Manager, Ads) — anonymised analytics data and conversion events; data is processed in the EU/EEA where available.
• Meta (Facebook Pixel) — anonymised page view and conversion events, activated only after consent.
• Cookiebot (Usercentrics) — cookie consent management; no personal data is shared beyond your consent choice.
• Vercel — website hosting; server logs may contain IP addresses, retained per Vercel's privacy policy.
• Email delivery (Resend) — used as a fallback channel for internal lead notifications only.

We do not sell personal data to third parties.

6. International Data Transfers

Some of our service providers (Google, Meta, Vercel) may process data outside the EU/EEA. These transfers are safeguarded by Standard Contractual Clauses (SCCs) or adequacy decisions as applicable.

7. Cookies and Tracking Technologies

We use Cookiebot to manage your cookie preferences. On first visit you will see a consent banner. You can change your preferences at any time by clicking the cookie icon or visiting our cookie declaration page.

8. Data Retention

• Consultation records — retained for up to 24 months after last contact, then deleted or anonymised.
• Analytics data — retained as configured in Google Analytics (default 14 months).
• Cookie data — individual cookie lifetimes vary; see cookie declaration for details.

9. Your Rights

Under the GDPR and Turkish Data Protection Law (KVKK), you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — ask us to restrict processing of your data.
• Data portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interest.
• Withdraw consent — withdraw cookie or marketing consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at info@cellaviadental.com. We will respond within 30 days.

10. Data Security

We use HTTPS encryption, server-side rate limiting, and access controls to protect your data. Form submissions are validated and sanitised before processing.

11. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect data from minors. If you believe a minor has submitted data, please contact us for deletion.

12. Changes to This Policy

We may update this policy to reflect changes in our practices or applicable law. The "last updated" date at the top indicates the most recent revision.

13. Contact

For privacy questions, data requests, or complaints, contact us at info@cellaviadental.com.

Cellavia Dental Clinic
Cellavia Dental Clinic, Kucukbakkalkoy, Ahmet Yesevi Cd No: 8, 34750 Atasehir/Istanbul