Privacy Policy

1. Definitions

• Personal data: any information relating to an identified or identifiable natural person.
• Sensitive (special category) data: data requiring special protection, such as health, genetic data, racial/ethnic origin, religion and sex life.
• Processing: any operation on data, including collection, recording, storage, use and transfer.
• Data Controller: the party determining the purposes and means of processing; here, Maison Lydéa IVF.
• Data Processor: a party processing data on behalf of and under the instructions of the Controller (e.g. hosting, messaging provider).
• Data Subject: the natural person whose personal data is processed (you).

2. Data Controller and Contact

3. Personal Data We Process

Depending on how you interact with us, we may process the following categories of data:

• Identity and Contact Data — The name, email address and phone number you provide when completing the consultation/appointment form or when contacting us.
• Appointment and Request Data — Your preferred appointment date, your reason for contact, and the content of the messages, questions and requests you send us.
• Health and Sensitive Data — Information about your fertility and reproductive health; medical and family history, diagnostic and test results, treatments applied; genetic data if you receive genetic screening; racial/ethnic origin to the extent relevant to treatment.
• Partner Data — If treatment is carried out with a spouse or partner, their identity, contact and health data.
• Identity / Travel Data — For international patients, passport/ID and travel details.
• Payment and Financial Data — Information relating to the collection of treatment fees. Card details are processed within the secure infrastructure of a payment provider; we do not store your full card number.
• Communication Records — The content of correspondence via WhatsApp, phone and email.
• Transaction and Usage Data — Your activity on the Site, the pages you view and how you use the Site.
• Technical Data (Collected Automatically) — IP address, device and browser type, operating system, language preference, referrer URL, date/time of visit, and similar information collected through cookies.

4. Sources of Personal Data

We mostly obtain your data directly from you. Where relevant and lawful, we may also obtain data from your spouse/partner, a referring doctor or clinic, institutions where you were previously treated, and laboratories engaged as part of your treatment.

5. How We Collect Personal Data

We collect your data through the consultation/appointment form on the Site, WhatsApp/phone/email communication, examination, counselling and treatment processes at the Clinic, and cookies and similar technologies during your visit to the Site.

6. Purposes of Processing

• Receive your consultation and appointment requests, respond through your patient coordinator, and schedule your appointment.
• Assess your medical history, make a diagnosis and provide a personalised treatment plan (IVF, ICSI, egg freezing, genetic screening, counselling, etc.).
• Communicate with you throughout treatment, answer your questions and provide support.
• Ensure the safety and follow-up of treatment and evaluate outcomes.
• Pricing, invoicing and accounting.
• Comply with our legal obligations (medical record-keeping, regulatory compliance).
• Assess our service quality and carry out internal audit/quality processes.
• Operate, secure and improve the Site.
• Send informational and promotional communications where you have given consent.

7. Legal Bases for Processing

Your data is processed under Law No. 89/2007 and the GDPR on the following bases:

• Explicit consent — in particular for processing and transferring sensitive (health/genetic) data, for promotional communications and for non-essential cookies.
• Provision of healthcare — your health data is processed by our medical staff, bound by a duty of confidentiality, to provide you with medical care.
• Performance of a contract — to carry out our treatment and service relationship.
• Compliance with a legal obligation — for record-keeping, retention and reporting duties.
• Protection of vital interests — in medical emergencies.
• Legitimate interests — for Site security, fraud prevention and service improvement (without overriding your rights).

8. Processing of Health and Sensitive Data

Your health and genetic data is processed only to provide you with medical services, by our clinical team bound by a duty of confidentiality. Such data is transferred to third parties only with your explicit consent. You are not required to share sensitive information in our forms; please provide only the minimum information necessary for your request to be handled.

9. Marketing, Patient Stories and Advertising

• Promotional communications (email/WhatsApp, etc.) are sent only with your explicit consent, and you may unsubscribe free of charge at any time.
• Patient reviews, success stories, photographs or videos are published only with your separate, explicit consent and limited to the scope of that consent. You may withdraw your consent at any time.
• In advertising and digital marketing, we do not use information about your health for ad targeting, and we do not transmit identifiable health data to advertising/tracking providers.

10. Disclosure of Personal Data

We do not sell your data or disclose it to third parties for marketing. Your data is shared only in the following cases, and only to the extent necessary:

• Parties involved in delivering your treatment — our clinical team and, where necessary, laboratories engaged as part of your treatment. Your sensitive data is transferred to third parties only with your consent.
• Our service providers (processors) — vendors providing site hosting, infrastructure, messaging, payment and technical support; these parties process data only on our behalf, under our instructions, and are bound by confidentiality.
• Competent public authorities and legal grounds — where necessary to comply with a legal obligation or to establish, exercise or defend a legal claim.

11. International Transfers

The Site is hosted on cloud infrastructure provided by Vercel Inc., and the servers may be located outside the TRNC. Services such as WhatsApp (Meta) and any analytics/infrastructure providers may process data abroad. Your personal data may be transferred abroad in accordance with Law No. 89/2007 where adequate safeguards are in place and, where required, with your explicit consent.

12. Retention Period

• Medical/treatment records: retained indefinitely and securely, to enable future treatment including embryo thawing and transfer procedures.
• Gamete/embryo and related consent records: retained indefinitely, as required for ongoing and future reproductive treatment continuity.
• Contact and appointment requests: 2 years following resolution of the request.
• Payment/accounting records: for the period required by applicable financial legislation.

Where a specific retention period applies, your data is deleted, destroyed or anonymised once that period expires.

13. Data Security

To protect your data we apply: SSL/TLS encryption, role-based access and the "need to know" principle, two-factor authentication, staff bound by confidentiality and regularly trained, secure hosting infrastructure, access logs and regular updates. While no transmission method is 100% secure, we take all reasonable measures to protect your data.

14. Data Breach Notification

If a breach affecting the security of your personal data occurs and poses a risk to your rights, we will notify the Personal Data Protection Board and, where required, you, without undue delay (and, where applicable, within 72 hours).

15. Automated Decision-Making and Profiling

We do not make decisions based solely on automated processing that produce legal effects concerning you. All medical decisions regarding treatment are made by our qualified medical staff.

16. Your Rights as a Data Subject

Under Law No. 89/2007 and the GDPR, you have the right to:

• Learn whether your data is being processed and request information about it.
• Learn the purpose of processing and whether it is used accordingly.
• Know the third parties to whom your data is transferred.
• Request rectification of incomplete or inaccurate data.
• Request erasure or destruction under the conditions set out in the Law.
• Object to processing.
• Withdraw your consent (withdrawal does not affect the lawfulness of prior processing).
• (GDPR) data portability and the right to lodge a complaint with a supervisory authority.
• Claim compensation for damages arising from unlawful processing.

17. How to Exercise Your Rights · Complaints

You may exercise your rights by emailing maisonlydeaivf@hotmail.com or writing to Maison Lydea IVF, Lefkoşa (Nicosia), North Cyprus. Your request must include information verifying your identity, and will be concluded within a reasonable period and any timeframe required by law.

In the TRNC, the supervisory authority is the Personal Data Protection Board (kvkk.gov.ct.tr). If you believe your rights have been infringed, you may lodge a complaint with the Board. If you are in the EU, you may contact your relevant national data protection authority.

18. Cookies

The Site uses cookies and similar technologies. For details, please see our Cookie Policy page.

19. Third-Party Links

The Site may contain links to third parties (e.g. social media). We are not responsible for the privacy practices of those sites; we recommend reviewing their own policies.

20. Children's Data

Our services and the Site are not intended for individuals under 18 years of age; we do not knowingly collect personal data from children.

21. Changes to This Policy

This Privacy Policy may be updated from time to time. The current version is always published on this page, with the "Last updated" date amended accordingly.

22. Contact

• Maison Lydéa IVF
• Email: maisonlydeaivf@hotmail.com
• Phone: +90 533 845 42 52 · WhatsApp: +90 533 845 42 52
• Address: Lefkoşa (Nicosia), North Cyprus