Privacy Policy

01Who we are

Wanna Be Taller is a brand of Bul Sağlık Danışmanlık ve Turizm Ltd. Şti. ("Medzonia", "we", "us"), an international health tourism facilitator holding an International Health Tourism Authorization Certificate No. AK-0198 issued by the Republic of Türkiye Ministry of Health. We are the data controller for the personal data described in this policy.

• Address: Cihangir Mahallesi, E-5 Yanyol (Londra Asfaltı) Caddesi No: 291/1, İç Kapı No: 50, Avcılar, Istanbul, Türkiye
• MERSİS No: 0188096589400001
• E-mail: support@wannabetaller.com (general) · kurumsal@medzonia.com (data protection requests)
• Phone / WhatsApp: +90 531 988 30 90

We are not a hospital and we do not provide medical treatment ourselves. Surgery and medical care are provided by our contracted, Ministry-authorized hospitals and surgeons, who are separately responsible for the medical records they create.

02What personal data we collect

Data you give us

• Quote request form: your name, phone number, whether we can reach you via WhatsApp or WeChat using that number (or your WeChat ID), your e-mail address (required if we cannot reach you on these apps), and any message you write — for example your current height and the height increase you are hoping for. We also record that you accepted this policy and the date and time of your request.
• Contact form: your name, e-mail address, phone number (optional) and message.
• WhatsApp, WeChat, Telegram, e-mail, phone and social media messages: your name, contact details, country, age and anything you choose to send us, including photos and documents.
• Health information you share for medical assessment: height, weight, medical history, chronic illnesses, medications, X-ray images and test results.
• If you become a patient: passport and travel details needed for visa support, accommodation and transfers; insurance details for your complication insurance policy; payment and invoicing information.

Data collected automatically

• Technical data: IP address, browser and device type, language, the page from which you submitted a form, and the date and time of your visit.
• Usage data collected through cookies and similar technologies, only where you have allowed them (see section 7): pages viewed, time on page, clicks and scrolling, and how you arrived at our website (for example from a Google ad).
• Contact button statistics: when you tap our floating contact buttons (WhatsApp, call, e-mail), we record which button was used, the page, your device type and language, a random visitor ID stored in your browser and a hashed form of your IP address. We use this only to measure interest in each channel; it does not identify you by name.

Our cost calculator and height comparison tool run entirely in your browser. The values you enter are not sent to us unless you choose to send your plan via WhatsApp.

03How and why we use your data

We do not use your data for automated decisions that have legal or similarly significant effects on you, and we never sell your personal data.

04Health data and your consent

Information about your health is “sensitive personal data” under KVKK and “special category data” under GDPR. We process it only with your explicit consent and only for the purposes listed above. You give this consent when you tick the consent box on our quote form, or when you send us medical information or documents after we have informed you of this policy.

You can withdraw your consent at any time by writing to kurumsal@medzonia.com or telling your patient coordinator. Withdrawal does not affect the lawfulness of processing carried out before you withdrew your consent. If you withdraw consent, we will not be able to continue your medical assessment or treatment planning.

We never publish your identity, photos, videos or treatment details — including in before-and-after galleries or patient stories — without your separate written permission.

05Who we share your data with

We share personal data only to the extent necessary:

• Our contracted surgeon and hospital — for medical assessment and treatment.
• Our contracted insurance company — to issue your complication insurance policy.
• Accommodation and transport partners, including our partner travel agency Hemcar (Ministry of Culture and Tourism licence no. 12109) — only the details needed to organize your stay and transfers. They do not receive your medical information.
• Public authorities — when required by law, for example health tourism reporting obligations or a court order.
• Service providers who process data on our behalf under contract:

06International transfers

We are based in Türkiye, and most of our patients contact us from other countries. Our website is hosted in Germany, and some of the service providers listed above are located outside Türkiye, in the European Union, the United Kingdom, the United States or Asia.

For transfers to our service providers, we use the standard contracts published by the Turkish Personal Data Protection Board under Article 9 of KVKK and notify them to the Personal Data Protection Authority as required by law. Communications with you while you are abroad, and transfers needed to organise your treatment, travel and stay, are made where this is necessary for the performance of our contract with you, as permitted by Article 9(6) of KVKK.

Where GDPR applies, transfers from the European Union rely on the European Commission’s adequacy decisions (including the EU–US Data Privacy Framework for certified providers) or the Standard Contractual Clauses.

07Cookies and similar technologies

We use strictly necessary cookies to run and protect the website. All other cookies — for statistics, session analytics and advertising — are used only after you accept them in our cookie banner, which is managed by CookieYes. You can change or withdraw your choice at any time with the cookie settings button shown in the corner of every page, or by deleting cookies in your browser.

Microsoft Clarity records how pages are used (mouse movements, clicks, scrolling). Text you type into forms is masked and is not recorded. Cloudflare Web Analytics, which we also use, does not set cookies.

Embedded or linked content from YouTube, TikTok, Trustindex, ProvenExpert and Trustpilot may set their own cookies when it loads or when you interact with it; their privacy policies apply.

08How long we keep your data

Medical records created by the hospital are kept by the hospital under its own legal obligations. When the periods above end, data is deleted, destroyed or anonymised.

09How we protect your data

We use encrypted (HTTPS) connections on our website, access controls limiting your data to staff and partners who need it, spam and bot protection on our forms, and confidentiality obligations for our staff and partners. Form submissions are sent to our secure business mailbox and are not stored in the website database. No method of transmission over the Internet is completely secure, but we work to protect your data with appropriate technical and organisational measures.

10Your rights

Under Article 11 of KVKK, you have the right to:

• learn whether your personal data is processed and request information about it;
• learn the purpose of processing and whether it is used accordingly;
• know the third parties in Türkiye or abroad to whom your data is transferred;
• request correction of incomplete or inaccurate data;
• request deletion or destruction of your data under the conditions of Article 7 of KVKK;
• request that corrections or deletions be notified to third parties who received your data;
• object to a decision adversely affecting you based exclusively on automated analysis;
• claim compensation for damage caused by unlawful processing.

If GDPR applies to you (for example if you are in the European Union), you also have the rights of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw your consent at any time.

How to apply: send your request by e-mail to kurumsal@medzonia.com or by post to the address in section 1, with your name and the details needed to identify you. We respond free of charge within 30 days at the latest. If you are not satisfied with our answer, you can complain to the Turkish Personal Data Protection Authority (www.kvkk.gov.tr) or, if you are in the EU, to the data protection authority of your country.

11Age limit

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has sent us personal data, please contact us and we will delete it.

12Links to other websites

Our website links to other sites and platforms, such as our social media profiles, review platforms and AI assistants (ChatGPT, Perplexity, Claude). These services are not operated by us; their own privacy policies apply when you use them.

13Changes to this policy

We may update this policy when our services or the law change. The “Last updated” date at the top shows the latest version. For significant changes, we will post a notice on our website.

14Contact

If you have any questions about this policy or your personal data, contact us at support@wannabetaller.com or via WhatsApp at +90 531 988 30 90. For requests about your personal data rights, write to kurumsal@medzonia.com.

15Language versions

This policy is available in several languages. If there is any inconsistency between versions, the English version prevails.