Privacy Policy

1. Data Controller

2. Information We Collect

We collect the following personal data directly from you:

• Name
• Email address
• Phone number (including WhatsApp contact details)
• Country of residence (inferred from the country code you select on our contact forms)
• Medical images — photographs of your teeth, gums, or hair/scalp that you choose to share with us for the purpose of a preliminary doctor consultation and clinic matching

This information is collected when you fill in a contact form on our website, message us via WhatsApp or other channels, or enquire about healthcare facilitation services.

We also collect limited technical data automatically when you visit our website (such as browser type, device, referring URL, and IP address). This is used solely for website analytics and security purposes.

3. Purpose of Data Collection

We collect and use your personal data to:

• Respond to your enquiries and provide information about treatment options and partner clinics.
• Coordinate your healthcare journey — including clinic matching, appointment planning, and travel logistics.
• Provide ongoing aftercare support and follow-up communication.
• Send service-related updates and, where you have opted in, marketing communications about relevant offers.
• Fulfil legal obligations, including maintaining accurate records.

4. Legal Basis for Processing

Under the GDPR, we rely on the following legal grounds:

• Consent — when you submit a contact form or opt in to marketing communications, you consent to us processing your data for those purposes. You may withdraw consent at any time.
• Contractual Necessity — where processing is necessary to take pre-contractual steps or to fulfil the facilitation services you have requested.
• Legitimate Interests — for basic website analytics and fraud prevention, where those interests are not overridden by your data protection rights.
• Legal Obligation — where we are required by law to retain or disclose certain records.

5. How We Protect Your Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted communications (HTTPS), access controls, and regular security reviews.

No data transmission over the internet can be guaranteed as completely secure. However, we take every reasonable step to protect the information you share with us.

6. Sharing of Your Data

We do not sell, rent, or trade your personal data. We may share it only in the following limited circumstances:

• Partner Clinics — we share relevant contact and treatment details with the clinic(s) we match you with, solely for the purpose of arranging your treatment. We only work with verified, trusted providers.
• Service Providers — we may use third-party tools for website hosting, email, analytics, or form processing. These providers are contractually bound to handle data securely and only as instructed by us.
• Legal Requirements — we may disclose data if required to do so by law, regulation, or a valid legal request from a competent authority.

7. International Transfers of Data

MJB Care is based in Turkey. If you are located within the European Economic Area (EEA), your personal data may be transferred to and processed in Turkey, which is outside the EEA.

We ensure such transfers comply with GDPR requirements by implementing appropriate safeguards — including Standard Contractual Clauses where required — to maintain an equivalent level of data protection.

8. Retention of Your Data

We retain your personal data for as long as necessary to provide our services and fulfil the purposes set out in this policy, including any legal, accounting, or reporting obligations.

When your data is no longer needed, we securely delete or anonymise it. If you request deletion, we will action this promptly unless we are required by law to retain the data.

9. Your Data Protection Rights

Under the GDPR, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your data in certain circumstances ("right to be forgotten").
• Restriction — ask us to restrict processing of your data in specific situations.
• Data Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests, including for direct marketing.
• Withdraw Consent — withdraw consent at any time where processing is based on your consent.

To exercise any of these rights, contact us at hi@mjb.care. We will respond within 30 days. You also have the right to lodge a complaint with the relevant supervisory authority — either your national data protection authority in the EU, or the Personal Data Protection Authority (KVKK) in Turkey.

10. Cookies

Our website uses cookies to enhance your browsing experience and analyse site traffic. Cookies are small text files stored on your device by your browser.

We use:

• Essential cookies — required for the website to function correctly.
• Analytics cookies — to understand how visitors use the site (aggregated, anonymised data).
• Preference cookies — to remember settings such as your selected language.

You can control or disable cookies through your browser settings at any time. Disabling certain cookies may affect site functionality.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. Any updates will be posted on this page with a revised "Last updated" date. We encourage you to check back periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us: