Privacy policy

Bonita Clinic, based in Istanbul, Türkiye, decides how the information described here is used, and is responsible for it.

The fastest way to reach us about anything on this page is the contact address published on our contact page. If you would prefer a postal address or the details of our registered entity for a formal request, ask and we will provide them.

When you complete the consultation form, we record what you enter:

Photographs of your teeth, scalp or body are the most sensitive thing this website handles, and they are treated accordingly.

Before a photograph leaves your device, your browser resizes it. That removes the metadata a camera attaches to a picture — including the GPS coordinates where it was taken — so we never receive your location from a photograph.

The file is then stored in a private location. It is not published, not indexed by search engines, and cannot be reached by anyone who guesses a web address: each file is stored under a random identifier that reveals nothing about you, and viewing one requires a short-lived link that our system issues only to a signed-in member of staff. Every time such a link is issued, it is recorded.

Photographs are used to assess your enquiry and nothing else. They are never used in advertising, on this website, or on social media unless you separately give written permission for a specific image — and consent for treatment is not consent to publish.

When you send an enquiry we also record a small amount of technical information, to keep the form working and to stop it being abused:

For the details you enter in the form: because you asked us to respond. Answering an enquiry is the service you requested.

For health information and photographs: because you gave explicit consent at the point of sending them. The exact wording you agreed to is stored alongside your enquiry, together with the version of this policy in force at that moment, so it can be reproduced if you ever ask what you agreed to.

For security and abuse prevention: because we have a legitimate interest in the form not being used to attack the site or to send bulk unsolicited submissions.

For measurement: only if you accepted it in the cookie banner. If you did not, no measurement takes place.

For marketing messages: only if you separately ticked the box asking for them. You can withdraw that at any time without affecting your treatment enquiry.

Inside the clinic: the treatment coordinators handling your enquiry, and the clinicians who need to review it in order to answer you.

Outside the clinic, we use a small number of technical suppliers who process information on our behalf and are not permitted to use it for their own purposes:

This website is operated from Türkiye, and the servers holding enquiries and photographs are located outside the European Economic Area.

If you are in the EEA or the United Kingdom, that means your information is transferred internationally when you contact us. We do this on the basis of your explicit consent to be assessed and contacted, and we require our suppliers to maintain appropriate technical and organisational protection wherever the data sits.

If you would prefer not to have your information transferred outside your own country, do not send it through this website — contact us and we will tell you what alternatives are available.

Enquiries are kept for as long as we may reasonably need to answer you and to maintain a record of care, and are then deleted.

Photographs are deleted sooner than the enquiry text where they are no longer needed, since they are the most sensitive part of what you send.

Records of what you consented to are kept for as long as we hold the enquiry itself, because a consent record that outlives the data it authorises is useless, and one that is deleted first leaves us unable to demonstrate that permission was ever given.

If you ask us to delete your information, we do so unless we are legally required to keep a specific record, in which case we will tell you which one and why.

Wherever you live, you can ask us to:

The whole site is served over an encrypted connection. Access to enquiries requires an individual staff account, and viewing a photograph is recorded.

Uploaded files are checked against their actual contents rather than their filename, so a file cannot be disguised as an image. The storage location is private and has no public address.

No system is perfect, and we would rather say so than claim otherwise. If you believe you have found a weakness in this website, please tell us — we would far rather hear it from you.

This website is intended for adults. We do not knowingly collect information from anyone under 18 without the involvement of a parent or guardian. If you believe a child has sent us information, contact us and we will delete it.

When this policy changes, the version number and date at the top change with it, and the previous wording is retained so that a consent recorded under an earlier version can still be matched to the text it referred to.

We will not apply a materially different use of information you already sent us without asking you again.