Privacy Policy

Effective Date: January 14, 2026

This Privacy Policy explains how HealRoad (“HealRoad”, “we”, “us”, “our”) collects, uses, shares, and protects your personal data when you use our website, applications, and related services (collectively, the “Services”).

Important: HealRoad is a digital platform that helps users discover and compare healthcare options and connect with independent healthcare providers. HealRoad is not a medical provider and does not deliver medical care.

1. Who We Are

Data Controller: HealRoad
Address: İşçi Blokları Mahallesi, Muhsin Yazıcıoğlu Caddesi, No:57/86 Çankaya/Ankara
Phone: +90 554 838 42 07
Email: privacy@healroad.com

2. Personal Data We Collect

We may collect the following categories of personal data depending on how you use the Services:

2.1. Data You Provide

• Contact information: name, email address, phone number, country, preferred language.
• Account information (if you create an account): login and profile preferences.
• Request and journey information: treatment interest, preferred dates, location preferences, budget range, and details you provide to receive offers or coordination support.
• Health-related information (special category data): medical photos, reports, symptoms, medical history, and other information you choose to share so clinics/providers can evaluate your request.
• Communications: messages and interactions with our support team and within the platform.

2.2. Data Collected Automatically

• Device and usage data: IP address, browser type, device identifiers, pages viewed, and timestamps.
• Approximate location: derived from IP address (city/region-level).
• Cookies and similar technologies: described in Section 7 (Cookies & Analytics).

2.3. Data From Third Parties

• Clinics and providers: offer details, availability, and updates related to your request (where applicable).
• Service providers: analytics, communications, hosting, and security providers who support our Services.

3. How We Use Your Data

We use personal data to:

• Provide and operate the Services (e.g., process requests and present clinic/provider offers).
• Facilitate communications between you, HealRoad, and clinics/providers (as applicable).
• Provide customer support, respond to inquiries, and manage your account (if any).
• Improve and personalize the Services, including content and language preferences.
• Maintain security, prevent fraud, and protect users and the platform.
• Comply with legal obligations and enforce our terms and policies.

Marketing communications: We may send service-related messages (e.g., request updates). Where required by law, we will obtain your consent before sending marketing communications. You can opt out at any time using the unsubscribe link (if provided) or by contacting us.

4. Legal Bases for Processing

Depending on your location and applicable law (including, where relevant, the GDPR and Türkiye’s data protection law (KVKK)), we rely on one or more of the following legal bases:

• Contract / steps to enter a contract: to provide the Services you request.
• Consent: for certain cookies/analytics, marketing where required, and for health-related data when applicable.
• Legitimate interests: to improve, secure, and operate our Services (balanced against your rights).
• Legal obligation: to comply with applicable laws and lawful requests.

Health-related data: If you provide health/medical information, we process it only as needed to facilitate your request and share it with clinics/providers for evaluation, and only under a valid legal basis (often your explicit consent or another lawful basis where applicable).

5. How We Share Your Data

We may share personal data with:

• Clinics and healthcare providers so they can evaluate your request, prepare offers, and coordinate services. We share only what is necessary for these purposes.
• Vendors and processors that help us provide the Services (e.g., hosting, analytics, messaging, customer support tools), under contractual obligations to protect your data.
• Professional advisers (lawyers, auditors) where necessary.
• Authorities when required by law or when needed to protect rights, safety, and security.
• Business transfers in connection with a merger, acquisition, reorganization, or sale of assets (with appropriate safeguards).

We do not sell your personal data in the traditional sense. If any activity is considered “selling” or “sharing” under certain laws, we will provide the required notices and choices.

6. International Transfers

Because HealRoad serves international users and may work with clinics/providers and vendors in different countries, your data may be transferred to and processed in countries outside your country of residence.

When we transfer data internationally, we implement appropriate safeguards required by applicable law (such as contractual protections and security measures).

7. Cookies & Analytics

We use cookies and similar technologies to operate our site, remember preferences, enhance security, and understand how the Services are used.

7.1. Types of Cookies

• Strictly necessary: essential for core functionality (e.g., security, session management).
• Preferences: remembers settings like language.
• Analytics: helps us measure usage and improve performance.
• Marketing: measures campaign effectiveness and shows relevant ads (where used and permitted).

You can control cookies through your browser settings and, where available, through our cookie banner/settings. If you disable cookies, some parts of the Services may not function properly.

8. Data Retention

We retain personal data only for as long as necessary to provide the Services, meet legitimate business needs, and comply with legal obligations. Retention periods vary depending on the type of data and why it was collected.

9. Security

We implement reasonable administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration. However, no system can be guaranteed to be 100% secure.

10. Your Rights

Depending on your location and applicable law, you may have rights to:

• Access your personal data and receive a copy
• Correct inaccurate or incomplete data
• Request deletion of your data (where applicable)
• Object to or restrict certain processing
• Withdraw consent (where processing is based on consent)
• Data portability (where applicable)
• Lodge a complaint with a data protection authority

To exercise your rights, contact us using the information in Section 11 (Contact). We may need to verify your identity before responding.

11. Contact

If you have questions or requests regarding this Privacy Policy or your personal data, please contact:

• Email: privacy@healroad.com
• Phone: +90 554 838 42 07
• Address: İşçi Blokları Mahallesi, Muhsin Yazıcıoğlu Caddesi, No:57/86 Çankaya/Ankara