Privacy policy

Body Expert information

Updated: 16 September 2026.

Who is responsible for your data?

BODY EXPERT ULUSLARARASI TURİZM MEDİKAL VE DANIŞMANLIK TİC. LTD. ŞTİ., trading as Body Expert, is the controller for enquiries and the coordination of its services. Contact: info@bodyexpert.online; correspondence address: Fulya Mah. Prof. Bülent Tercan Cad., Fulya Life Residence N°26, Şişli / İstanbul, Turkey.

The practitioners and facilities providing your treatment are responsible for processing within their own medical activities. They provide the information applicable to your clinical record.

Information concerned

Depending on your interactions, this may include your name, contact details, country, language, project, messages, communication preferences, information needed to organise your stay and contractual documents. Browsing may also generate technical data, including IP addresses, browser details, pages visited and tracking preferences.

Provide only information relevant to your enquiry. Required fields are necessary to process the request; other fields are optional. Do not include a medical file, identity document or intimate photograph in a general message. Ask your coordinator which channel to use for documents needed by the clinical team.

Purposes and legal bases

Answering enquiries and preparing proposals: steps requested before entering into a contract, followed by performance of the contract for clients.
Coordinating appointments and agreed services: performance of the contract.
Billing and administrative duties: applicable legal obligations.
Security, abuse prevention and legal claims: legitimate interests, balanced against your rights.
Electronic marketing: consent where required by law, separate from an enquiry and withdrawable at any time.
Non-essential tracking: prior consent where required.

Health-related information requires additional protection. Where explicit consent is necessary for its collection or disclosure by Body Expert, that consent must be obtained separately. General acceptance of this policy is not consent to treatment, marketing or the processing of health data.

Recipients and service providers

Enquiries are intended for authorised Body Expert staff. Body Expert uses Zoho CRM to manage relationships with people who contact the company. Technical providers act within their assigned roles. Relevant practitioners and facilities should receive only information necessary to assess or organise your care. Reuse for a third party’s marketing requires an appropriate legal basis.

Processing in Turkey and international transfers

Body Expert and its clinical teams are based in Turkey, outside the European Economic Area. Zoho may process information in several countries depending on the account, services and subprocessors. Using Zoho therefore does not mean that all data remain in the European Union.

Transfers falling within Chapter V of the GDPR require a valid mechanism, such as standard contractual clauses together with the necessary assessment and safeguards. Zoho describes its commitments in its privacy policy. You may ask Body Expert for information on the recipients, countries and safeguards applicable to your data.

Retention

The GDPR does not prescribe one retention period for every type of information. The retention rule distinguishes the following purposes:

Prospect marketing without a contract: no more than three years from collection or your last active contact, with earlier deletion following withdrawal of consent or an applicable objection. A new message sent by Body Expert does not restart this period.
Client coordination: for the relationship and necessary follow-up. Afterwards, only records needed for a legal obligation or legal claim may remain in restricted archives for the applicable period.
Accounting and contractual records: for the statutory obligations and limitation periods applicable to the company and service; archiving does not authorise continued marketing use.
Medical information: limited to Body Expert’s coordination needs. Clinical record retention by healthcare professionals follows their own requirements; the three-year marketing period does not replace those rules.
Marketing objections: minimum information retained to honour your choice, for at least three years in accordance with CNIL guidance.
Cookies: see the categories and periods in the separate cookie policy.

At the relevant deadline, data must be deleted or anonymised. These rules also cover exports and copies, subject to backup renewal cycles and any justified legal archiving.

Your rights

Subject to the GDPR’s conditions, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. You may object to direct marketing at any time and withdraw consent without affecting the lawfulness of earlier processing.

Write to info@bodyexpert.online explaining your request. Proportionate identity evidence will be requested only if there is reasonable doubt. The normal response period is one month; an extension of up to two further months is possible under the GDPR’s conditions, with notice during the first month.

You may complain to the competent supervisory authority, including the CNIL for residents of France. Turkey’s supervisory authority is the KVKK. You may also ask for clarification about processing before sending sensitive documents.