Privacy Policy

1. Controller and contact

The operator and data controller of www.ortaakarsu.net is Ahmet Buğra Ortaakarsu. Contact: [email protected].

The website provides scientific content, drug interaction reference information and digital product pages. Data-access memberships and the single-page purchase model are in preparation.

2. Information, purposes and legal grounds

Website requests, forms, account activity, cookies and similar technologies may provide IP addresses, browser/device details, requested URLs, timestamps, security and usage records. If you create an account or contact us, information may include your name, email, account details and message. WooCommerce handles cart and session information and, if an order is placed, order, contact and billing information.

Purposes include operating the site, handling requests and accounts, security, troubleshooting, usage measurement, advertising and privacy preferences. Depending on the activity, a legal ground may be performance of a contract or requested service, a legal obligation, protection of legal rights, appropriately balanced legitimate interests or consent where required. Visiting the site does not constitute blanket consent to all processing.

3. Health information and queries

The website is not designed to collect patient records or assess personal treatment. Do not enter patient names, identity numbers, prescriptions, laboratory results, medical files or other people’s sensitive information in searches or messages.

Drug names and interaction queries may reveal health information when linked to an identifiable person. Query parameters and URLs may appear in browser history, server/security logs or analytics systems. We do not promise that queries are never logged or transmitted to third parties.

4. Cookies and service providers

WordPress and WooCommerce may use cookies for authentication, carts and sessions. The website also uses Google Analytics, Google Ads/AdSense, Google Funding Choices, reCAPTCHA and Cloudflare. Depending on their function, these services may process URLs, IP addresses, identifiers, device information and activity or security signals.

Manage choices through the privacy controls presented on the website where available. Browser settings can restrict or delete cookies, which may affect login and cart functionality. Processing that requires permission needs an appropriate choice mechanism; this notice does not replace it.

Details: Google Privacy Policy, Google partner-site disclosure and Cloudflare Privacy Policy.

5. Recipients and international processing

Hosting, email, website administration, analytics, advertising and security providers may receive information for their functions. Information may be disclosed to competent authorities where legally required. International providers may process data outside Türkiye. Applicable transfer conditions and safeguards must be considered for each arrangement; this notice is not a transfer permission or a guarantee of compliance for all services.

Paddle integration is not active. If introduced, payment data recipients, the provider’s role and relevant privacy information will be explained before transactions. Do not email card numbers, CVC codes or passwords.

6. Retention and security

Retention depends on the data, purpose, service settings and applicable legal requirements. Accounts, orders, correspondence and technical records have different needs. Deletion, destruction or anonymisation is assessed under applicable rules once the purpose and required retention end.

Access controls and technical measures support security. No internet transmission or system can be guaranteed completely secure. Keep your password private and report suspicious account activity.

7. Your rights and requests

Under applicable law, you may request information about whether your data is processed, its purposes and recipients, correction and, where conditions are met, deletion/destruction and other statutory remedies. GDPR rights may also apply to processing within its scope; that scope is not assumed for every visitor.

Send requests to [email protected], explaining the related account or activity. Proportionate verification may be required to avoid disclosing information to the wrong person. Do not attach identity documents or patient records to your first message. Requests are handled within applicable legal deadlines.

8. Planned services and updates

The advertised data plans do not currently request card details or collect subscription or single-page payments. Before new functions or providers are introduced, data flows, required notices and preference controls must be reviewed. Updates are published with a revision date, with additional notice or consent where required.