PRIVACY POLICY

Effective Date: August 12, 2026
Last Updated: August 12, 2026

DrSystems Tech Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or interact with our clinical and technology services across our UK and Türkiye operations.

Company Details & Data Controller

Data Controller: DrSystems Tech Ltd (UK Company Number: 16155731)
Registered Office: 439 Blackburn Road, Bolton, England, BL1 8NJ
Clinical Operations: Antalya, Türkiye
Data Protection Contact: idris.khan@drsystems.tech

1. Scope & Applicable Law

Because our corporate headquarters are located in the United Kingdom and our clinical operations are based in Antalya, Türkiye, we process personal data in compliance with applicable data protection laws, including: UK Data Protection Legislation (UK GDPR and the Data Protection Act 2018), EU GDPR (to the extent applicable for EU residents), and Turkish Personal Data Protection Law (KVKK Law No. 6698).

2. Information We Collect

Identity & Contact Data: Name, professional title, organization, email address, phone number, and physical location.
Technical & Usage Data: IP address, browser type and version, time zone setting, operating system, and data about website usage.
Clinical & Special Category Data: Processing of health-related data is strictly subject to explicit consent, medical confidentiality standards, and statutory regulatory approvals.

3. How We Use Your Information & Legal Basis

We process personal data based on UK GDPR Article 6 and KVKK Article 5: Legitimate Interests (to respond to inquiries and maintain security), Consent (explicit opt-ins for communications or clinical data), and Legal Compliance (statutory and regulatory requirements).

4. International Data Transfers

Operating between the UK and Türkiye involves cross-border transfers. We ensure appropriate safeguards are implemented, including standard contractual clauses (SCCs) and statutory compliance under UK GDPR Chapter V and KVKK Article 9.

5. Data Security & Retention

We implement robust technical and organizational measures to safeguard data and retain it only as long as necessary to fulfill the purposes of collection or to satisfy statutory legal requirements.

6. Your Legal Rights

Access, Rectification, and Erasure (Right to be Forgotten).
Restriction & Objection to processing.
Data Portability to another organization.
To exercise these rights, please contact idris.khan@drsystems.tech.

7. Complaints & Regulatory Authorities

UK: Information Commissioner’s Office (ICO) — ico.org.uk
Türkiye: Personal Data Protection Authority (KVKK) — kvkk.gov.tr