Privacy Policy — SaluVista

This Privacy Policy explains how SaluVista ("we", "us") collects, uses and protects your personal data when you use our website and app.

What we collect

We may collect the information you give us directly — such as your name, email, phone number and the details you share in an enquiry or in the app — and basic technical data (such as anonymous analytics) needed to run the site securely.

How we use it

To respond to your enquiries and provide our services.
To arrange consultations and coordinate care you request.
To keep our website and app secure and improve them.

Health information

Any health information you share for screening is treated as sensitive personal data, handled securely, and used only to support your care. Medical screening takes place privately in the app, and a qualified human always reviews it.

Your rights (GDPR)

Depending on your location, you may have the right to access, correct, delete or restrict the use of your personal data, and to object to certain processing. To exercise these rights, contact us using the details below.

Data sharing & security

We do not sell your personal data. We share it only with the providers and partners needed to deliver the service you request, and we apply appropriate security measures to protect it.

Who is responsible for your data (data controller)

For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR, and the Turkish Personal Data Protection Law (KVKK, Law No. 6698), the data controller is SaluVista (an Orozan company), Istanbul, Türkiye. You can contact us about any data-protection matter at info@saluvista.com.

Our lawful bases for processing (EU & UK GDPR)

Where the EU GDPR or the UK GDPR applies to you, we process your personal data only where we have a lawful basis to do so. Depending on the situation, we rely on one or more of:

Consent — for example, when you ask us to arrange a consultation, or when you share health information for screening.
Performance of a contract — to provide the services you request from us.
Legitimate interests — to operate, secure and improve our website and app, provided your interests and rights do not override those interests.
Legal obligation — where we are required by law to retain or disclose certain information.

Health data and other special-category data

Information about your health is "special-category" personal data under Article 9 of the EU and UK GDPR, and a "special category of personal data" under the KVKK. We process it only with your explicit consent, or on another lawful ground permitted for health data, and solely to support the care you ask us to help coordinate. You can withdraw your consent at any time; withdrawal does not affect processing already carried out before you withdrew it. Medical screening takes place privately in the app and is always reviewed by a qualified human.

Your rights under the EU GDPR

If you are in the European Economic Area (EEA), you have the right to access your personal data; to have it corrected or erased; to restrict or object to its processing; to receive it in a portable format; and to withdraw consent at any time. You also have the right to lodge a complaint with your local data-protection supervisory authority. To exercise any of these rights, contact us at info@saluvista.com.

International data transfers

SaluVista operates from Türkiye, so personal data you provide is processed outside the EEA and the United Kingdom. Where we transfer personal data internationally, we do so on a lawful basis — such as your explicit consent, an adequacy decision, or appropriate safeguards like Standard Contractual Clauses — and we take steps designed to keep your data protected to a comparable standard.

UK visitors (UK GDPR & Data Protection Act 2018)

If you are in the United Kingdom, your personal data is protected by the UK GDPR and the Data Protection Act 2018, and the rights described above apply to you in their UK-equivalent form. You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). Transfers of your data to Türkiye are made using the safeguards recognised under UK data-protection law.

Visitors in Türkiye (KVKK)

If you are in Türkiye, we process your personal data in accordance with the Personal Data Protection Law No. 6698 ("KVKK"). As data controller, we process your data for the purposes described in this policy, retain it only for as long as necessary, and apply the technical and administrative measures the KVKK requires. We rely on your explicit consent (açık rıza) to process your health data, unless another lawful ground under the KVKK applies. Under Article 11 of the KVKK you may, among other things, learn whether your data is processed, request information about it, ask for its correction or deletion, and object to a result reached solely by automated analysis. Requests can be sent to info@saluvista.com.

Data retention

We keep personal data only for as long as needed for the purposes set out in this policy, or for as long as applicable law requires, after which it is deleted or anonymised.

Contact

For any privacy question or request, email info@saluvista.com. See also our Terms of Service.

This is a placeholder template, not legal advice. A qualified lawyer must complete and review this policy for GDPR and local compliance before it is published.