At MJB Care ("we", "our", or "us"), your privacy matters to us. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website or contact us to arrange healthcare facilitation services. We are committed to complying with the General Data Protection Regulation (GDPR) and applicable Turkish data protection law.
MJB Care is an independent healthcare facilitator — not a clinic, not a hospital. We act as an intermediary, connecting patients with verified medical providers in Istanbul. We do not provide medical advice or treatment, and the personal data we handle relates to arranging those referrals and providing ongoing support.
1. Data Controller
MJB Care
Yenibosna Merkez, 29 Ekim Cd. No: 19/A, 34180 Bahçelievler/İstanbul, Turkey
Email: hi@mjb.care
Phone / WhatsApp: +90 552 351 58 94
2. Information We Collect
We collect the following personal data directly from you:
- Name
- Email address
- Phone number (including WhatsApp contact details)
- Country of residence (inferred from the country code you select on our contact forms)
- Medical images — photographs of your teeth, gums, or hair/scalp that you choose to share with us for the purpose of a preliminary doctor consultation and clinic matching
This information is collected when you fill in a contact form on our website, message us via WhatsApp or other channels, or enquire about healthcare facilitation services.
Health information is treated as a special category of data. Photographs of your teeth, gums, or scalp are health-related images. We only collect and process these images with your explicit, informed consent, given at the point you choose to submit them to us, and solely for the purpose of a preliminary consultation and matching you with a suitable partner clinic. You are never required to submit photographs to contact us, and you may withdraw this consent at any time by contacting hi@mjb.care, after which we will delete any images we hold that are no longer needed.
Where you contact us via WhatsApp, your messages are also subject to WhatsApp's (Meta's) own privacy policy and terms of service, in addition to this Privacy Policy. We do not control how WhatsApp itself processes message metadata.
We also collect limited technical data automatically when you visit our website (such as browser type, device, referring URL, and IP address). This is used solely for website analytics and security purposes.
To save you a step, our contact forms use a third-party IP geolocation lookup (ipapi.co) to guess your country and pre-fill the phone dial code. This is a best-effort convenience only — it is never stored by us, you can see and change the pre-filled value before submitting, and the lookup provider processes your IP address under its own privacy policy.
3. Purpose of Data Collection
We collect and use your personal data to:
- Respond to your enquiries and provide information about treatment options and partner clinics.
- Coordinate your healthcare journey — including clinic matching, appointment planning, and travel logistics.
- Provide ongoing aftercare support and follow-up communication.
- Send service-related updates and, where you have opted in, marketing communications about relevant offers.
- Fulfil legal obligations, including maintaining accurate records.
4. Legal Basis for Processing
Under the GDPR, we rely on the following legal grounds:
- Consent — when you submit a contact form or opt in to marketing communications, you consent to us processing your data for those purposes. You may withdraw consent at any time.
- Explicit Consent for Health Data — where you choose to share dental, gum, or scalp photographs, this is special category health data under Article 9 GDPR. We only process these images on the basis of your explicit consent, separate from your general consent to be contacted.
- Contractual Necessity — where processing is necessary to take pre-contractual steps or to fulfil the facilitation services you have requested.
- Legitimate Interests — for basic website analytics and fraud prevention, where those interests are not overridden by your data protection rights.
- Legal Obligation — where we are required by law to retain or disclose certain records.
4a. KVKK — Turkish Personal Data Protection Law
MJB Care is based in Türkiye, so in addition to the GDPR, we process your personal data in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"). Where this section and the GDPR section above differ only in terminology, the same protections apply under both frameworks.
Under KVKK, health data — including the dental, gum, or scalp photographs you choose to share with us — is a "special category of personal data" and is processed only with your explicit consent ("açık rıza"), given at the point you submit it, for the sole purpose of a preliminary consultation and clinic matching.
As the data controller ("veri sorumlusu"), MJB Care processes your data on the legal grounds set out in KVKK Article 5 (and Article 6 for special-category data), corresponding to the same bases described in the GDPR section above: your explicit consent, the necessity of processing to provide the facilitation service you requested, and our legal obligations.
You may exercise your KVKK Article 11 rights (to learn whether your data is processed, request information, request correction or deletion, and object to a result produced solely by automated analysis) in the same way as the GDPR rights listed in Section 10, by contacting hi@mjb.care. You may also apply to Türkiye's Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu / KVKK) directly.
5. How We Protect Your Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted communications (HTTPS), access controls, and regular security reviews.
No data transmission over the internet can be guaranteed as completely secure. However, we take every reasonable step to protect the information you share with us.
7. Affiliate Program Data
MJB Care operates a referral partner ("affiliate") program. If you register as an affiliate, we collect and process additional personal data specific to that relationship:
- Name, email, and phone number, provided at registration.
- Social media handles (Instagram, TikTok, or other platforms you choose to provide) where you tell us how you intend to promote your referral link.
- Login credentials — your affiliate code and a 4–6 digit PIN. Your PIN is never stored in plain text; it is cryptographically hashed with a unique salt before being saved, and we cannot retrieve or view your original PIN.
- Referral activity — clicks, page visits, and WhatsApp button clicks associated with your unique referral link or code, used to attribute and calculate commission.
- Sales and commission records — the status, revenue, and commission amount associated with patients you refer, so that commissions can be calculated and paid accurately.
We use this data solely to operate the affiliate program: verifying your identity, tracking referrals, calculating and paying commissions, communicating with you about your account, and preventing fraudulent or abusive use of the program (for example, self-referrals or misleading promotional claims).
Affiliate data is retained for as long as your affiliate account is active and for a reasonable period afterward to satisfy accounting, tax, and dispute-resolution obligations. You may request access to, correction of, or deletion of your affiliate data by contacting hi@mjb.care, subject to our need to retain financial records as required by law.
Participation in the affiliate program is also governed by our separate Affiliate Program Agreement, which sets out the commission structure, eligibility rules, and conduct requirements in full.
8. International Transfers of Data
MJB Care is based in Turkey. If you are located within the European Economic Area (EEA), your personal data may be transferred to and processed in Turkey, which is outside the EEA.
We ensure such transfers comply with GDPR requirements by implementing appropriate safeguards — including Standard Contractual Clauses where required — to maintain an equivalent level of data protection.
9. Retention of Your Data
We retain your personal data for as long as necessary to provide our services and fulfil the purposes set out in this policy, including any legal, accounting, or reporting obligations. In practice:
- Health photographs (dental, gum, or scalp images) are kept only for as long as needed for your consultation and treatment matching, and are deleted on request — see Section 2.
- General contact and enquiry data is kept for the duration of our relationship with you, plus a reasonable period afterward in case you return to us or raise a query.
- Financial and commission-related records (including affiliate payment records) are retained for the periods required under Turkish commercial and tax law, which can require books and records to be kept for up to 10 years.
When your data is no longer needed, we securely delete or anonymise it. If you request deletion, we will action this promptly unless we are required by law to retain the data.
10. Your Data Protection Rights
Under the GDPR, you have the following rights:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — request deletion of your data in certain circumstances ("right to be forgotten").
- Restriction — ask us to restrict processing of your data in specific situations.
- Data Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests, including for direct marketing.
- Withdraw Consent — withdraw consent at any time where processing is based on your consent.
To exercise any of these rights, contact us at hi@mjb.care. We will respond within 30 days. You also have the right to lodge a complaint with the relevant supervisory authority — either your national data protection authority in the EU, or the Personal Data Protection Authority (KVKK) in Turkey.
12. Children's Privacy
Our website and services are not directed at, and are not intended for use by, anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hi@mjb.care and we will delete it promptly.
Where a patient under 18 is referred to us, we require that a parent or legal guardian act as the point of contact and provide any consent on the minor's behalf, consistent with our Terms & Conditions.
13. Data Breach Notification
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay, and in any case within the timeframe required by applicable law (72 hours under GDPR, where feasible). Where a breach is likely to result in a high risk to you, we will also notify you directly.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. Any updates will be posted on this page. We encourage you to check back periodically.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:
MJB Care
Yenibosna Merkez, 29 Ekim Cd. No: 19/A, 34180 Bahçelievler/İstanbul, Turkey
Email: hi@mjb.care
Phone / WhatsApp: +90 552 351 58 94