Privacy Policy

1. Data Controller

AestheticFinder operates this platform and is the data controller for personal data collected through it, in line with Turkey’s Personal Data Protection Law (KVKK, Law No. 6698) and applicable GDPR principles.

2. Data We Collect

• Patient enquirers: Name, email, phone, country, budget range, procedure interest — only when submitting an enquiry form.
• Clinic users: Email address, clinic name, portal activity.
• All visitors: IP address, browser type, page views (analytics cookies only with consent).

3. Purpose and Legal Basis

We process data to match patients with clinics (contract performance), authenticate clinic portals, process payments (legal obligation), prevent fraud (legitimate interest), and improve the platform (consent for analytics).

4. Data Sharing & International Transfer

Your data is shared with the relevant clinic (for the appointment or quote you request), our payment processor (Paddle, our merchant of record — payment processing only), our email provider (Resend), and our hosting and database infrastructure. Data processing agreements are in place with all providers. Where data is transferred internationally, the transfer is made under standard contractual clauses or equivalent safeguards (KVKK Art. 9 / GDPR Chapter V).

5. Retention

• Lead enquiry data: 3 years
• Clinic account data: until account deletion
• Payment records: 10 years (tax law)
• Analytics cookies: 13 months
• Session cookies: when the browser is closed, or 7 days

6. Cookies

We use essential session cookies. Analytics cookies are enabled only with your consent. You can disable cookies in your browser settings at any time, though some services may then not work.

7. Your Rights

You have the right to access, correct, delete, or object to processing of your personal data, and to lodge a complaint with the supervisory authority. Contact us at info@aiotonom.com.