UK GDPR PRIVACY NOTICE

For Individuals in the United Kingdom

Last Updated: 10 September 2026

1. Who We Are and the Data Controller

ALPHA VERA INTERNATIONAL TURİZM LİMİTED ŞİRKETİ (“Alpha Vera International”, “Alpha Vera”, “the Company”, “we”, “us” or “our”) is an international health tourism intermediary organisation based in Türkiye.

Alpha Vera International does not directly provide medical diagnosis, treatment or healthcare services. We support the coordination of communication, appointments, health tourism arrangements, interpretation, travel and transfer processes between international individuals and relevant healthcare providers in Türkiye.

All medical assessments, diagnoses, treatment planning and medical procedures are carried out by the relevant healthcare facilities and healthcare professionals.

Data Controller: ALPHA VERA INTERNATIONAL TURİZM LİMİTED ŞİRKETİ

Address: Çağlayan Mahallesi, 2043 Sokak, Doruk Apartmanı Sitesi No:1, İç Kapı No:6, Muratpaşa / Antalya, Türkiye Telephone: +90 543 560 33 13 Email: info@alphaverainternational.com Website: www.alphaverainternational.com MERSIS No: 0057060881600001 Trade Registry No: 146098 Tax Identification No: 0570608816

This Privacy Notice is intended to provide information in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and other applicable UK data protection legislation.

2. Personal Data We May Process

Depending on how you interact with us and the services you request, we may process:

  • Your name and surname;
  • Age or date of birth;
  • Nationality;
  • Country of residence;
  • Telephone and WhatsApp number;
  • Email address;
  • Preferred language;
  • Passport or identification information where necessary;
  • Messages sent through our website, WhatsApp, email or other communication channels;
  • Information about the healthcare service you are interested in;
  • Flight, accommodation, transfer and companion information;
  • IP address, device and browser information;
  • Website usage and interaction data;
  • Cookie and similar technology information; and
  • Your consent and communication preferences.

3. Health Data and Special Category Data

As part of your health tourism enquiry, you may choose to provide information including:

  • Medical history;
  • Current medical conditions;
  • Medication information;
  • Allergy information;
  • Photographs;
  • X-rays and CT scans;
  • Test and examination results;
  • Medical reports;
  • Previous treatment information; and
  • Other information relating to the healthcare service you are seeking.

Health data is considered special category personal data under the UK GDPR.

Alpha Vera International does not process health information for the purpose of providing medical diagnosis or treatment. Such information may be processed for the purpose of coordinating your health tourism enquiry and, where necessary, sharing relevant information with the appropriate healthcare facility for assessment.

Where required, we identify an appropriate condition under Article 9 of the UK GDPR for processing special category data. Where we rely on explicit consent, it will be obtained through a clear, specific and separate affirmative statement and may be withdrawn.

4. Why We Process Your Personal Data

We may process your personal information to:

  • Receive and respond to your enquiry;
  • Understand your requirements;
  • Coordinate communication with relevant healthcare facilities;
  • Facilitate the receipt of medical assessment, treatment-plan information and quotations from healthcare facilities;
  • Coordinate appointments;
  • Arrange interpretation and communication support;
  • Coordinate travel dates and related arrangements;
  • Assist with accommodation and transfer coordination;
  • Organise international health tourism meetings and information events;
  • Respond to questions, requests and complaints;
  • Maintain the security of our systems;
  • Operate and improve our website;
  • Conduct analytics or marketing activities where the necessary choice or consent has been obtained; and
  • Comply with legal and regulatory obligations.

5. Lawful Bases for Processing

Depending on the processing activity, we may rely on one or more of the following lawful bases under Article 6 of the UK GDPR:

Contract or steps before entering into a contract Where processing is necessary to respond to your request or provide health tourism coordination services you have requested.

Legal obligation Where processing is necessary to comply with applicable legal or regulatory requirements.

Legitimate interests Where necessary for activities such as information security, fraud prevention, business administration or managing enquiries and complaints, provided that your rights and interests are not overridden.

Consent Where consent is required for particular communications, analytics, advertising or other processing activities.

For special category data, including health data, we also rely on an appropriate condition under Article 9 of the UK GDPR. Where explicit consent is relied upon, it is obtained separately from other consents.

6. Who We May Share Your Personal Data With

Where necessary and proportionate, we may share personal data with:

  • Healthcare facilities evaluating your enquiry;
  • Relevant doctors, dentists and healthcare professionals;
  • Interpreters and translation service providers;
  • Hotels and accommodation providers;
  • Transfer and transportation providers;
  • IT and hosting providers;
  • CRM and email service providers;
  • Google, Meta and other digital service providers; and
  • Public authorities, regulators or judicial bodies where legally required.

Healthcare facilities receiving information for medical assessment or treatment may have their own responsibilities as independent data controllers.

We do not provide transfer providers with your full medical information. Only information necessary to provide the transfer service, such as contact details, flight details, accommodation information and transportation requirements, is shared where required.

7. Processing in Türkiye and International Transfers

Alpha Vera International is established in Türkiye. If you contact us from the United Kingdom, your personal information may therefore be processed in Türkiye.

We may also use international technology providers such as Google, Meta, WhatsApp, email, hosting or CRM providers, which may involve processing in other countries.

Where the international transfer provisions of the UK GDPR apply, we will use an appropriate lawful transfer mechanism and safeguards as required by applicable data protection law.

8. How Long We Keep Your Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and for any applicable legal, regulatory or limitation periods.

When personal data is no longer required and there is no lawful reason to retain it, it will be securely deleted, destroyed or anonymised.

9. Cookies and Tracking Technologies

Our website may use services including:

  • Google Analytics;
  • Google Ads;
  • Meta Pixel;
  • Google Maps;
  • YouTube; and
  • Google reCAPTCHA.

Non-essential analytics and advertising technologies are not intended to operate before the required user choice or consent has been obtained.

For more information, please see our Cookie Policy.

10. Your Rights

Subject to applicable law and relevant exemptions, you may have the right to:

  • Request access to your personal data;
  • Request correction of inaccurate or incomplete personal data;
  • Request deletion of your personal data;
  • Request restriction of processing;
  • Object to certain processing;
  • Request data portability in applicable circumstances;
  • Withdraw consent at any time where processing is based on consent;
  • Exercise rights relating to certain automated decision-making; and
  • Lodge a complaint with a supervisory authority.

ICO guidance confirms that privacy information should explain the individual’s applicable rights, the right to withdraw consent and the right to lodge a complaint with a supervisory authority.

11. Withdrawing Consent

Where we rely on your consent or explicit consent, you may withdraw it at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

12. Complaints to the Information Commissioner’s Office

If you have concerns about how we handle your personal data, you may contact us first so that we have an opportunity to address your concern.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

13. UK Representative — If Applicable

If Alpha Vera International is required to appoint a representative in the United Kingdom under Article 27 of the UK GDPR, the representative’s identity and contact details will be published here.

UK Representative: [To be completed following legal assessment.]

The ICO states that organisations established outside the UK that offer services to people in the UK may, depending on the circumstances, be required to appoint and identify a UK representative.

14. Contact Us

For questions about this Privacy Notice or your personal data, please contact:

ALPHA VERA INTERNATIONAL TURİZM LİMİTED ŞİRKETİ

Email: info@alphaverainternational.com Telephone: +90 543 560 33 13 Address: Çağlayan Mahallesi, 2043 Sokak, Doruk Apartmanı Sitesi No:1, İç Kapı No:6, Muratpaşa / Antalya, Türkiye