Privacy Policy
SEDA · Last updated: 23 October 2026
This Privacy Policy explains how SEDA ("SEDA", "we", "us") collects, uses and protects personal data when you visit our website (withseda.com) or contact us, and how we handle patient data when we operate on behalf of clinics.
It has two parts:
- Part A covers visitors and prospective customers (people who use this website, fill in our forms or contact us).
- Part B covers patient and clinic data that we process on behalf of our clinic customers.
1. Who we are
SEDA provides an AI front-desk service for clinics: an assistant that answers patients on WhatsApp, Instagram, Facebook and by phone, books appointments and hands conversations to the clinic team when needed.
- Contact: aiclinicsolutions@gmail.com
- Phone: +353 87 487 6931
For Part A, SEDA is the data controller (under KVKK) / controller (under GDPR). For Part B, SEDA is the data processor and the clinic is the controller.
Part A: Website visitors and prospective customers
2. What we collect
| Category | Examples | How we get it |
|---|---|---|
| Contact details | Name, clinic name, phone number, email address, country | You enter them in our demo request form or send them to us |
| Communication data | Content of messages you send us by email, WhatsApp or the contact form | You send it to us |
| Scheduling data | The time you choose for a call and the details you give when booking | Our scheduling tool |
| Technical data | IP address, browser type, device, pages visited, date and time of access | Automatically, through server logs |
We do not ask for health data through this website. Please do not send medical information through our forms.
3. Why we use your data and on what basis
| Purpose | Legal basis (KVKK art. 5 / GDPR art. 6) |
|---|---|
| Replying to your demo request and arranging a call | Steps taken at your request before entering a contract (KVKK 5/2-c; GDPR 6(1)(b)) |
| Running and improving our website, keeping it secure, preventing misuse | Our legitimate interests (KVKK 5/2-f; GDPR 6(1)(f)) |
| Following up on your enquiry and presenting our service to clinics | Our legitimate interests (KVKK 5/2-f; GDPR 6(1)(f)) |
| Sending marketing messages, if you opt in | Your explicit consent (KVKK 5/1; GDPR 6(1)(a)); you can withdraw it at any time |
| Meeting legal obligations and responding to authorities | Legal obligation (KVKK 5/2-ç; GDPR 6(1)(c)) |
4. Cookies
This website uses only strictly necessary technical cookies. We do not use analytics or advertising cookies at this time. If we add them, we will update this policy and ask for your consent first.
5. Who we share data with
We do not sell personal data. We share it only with service providers that help us run the service, under contracts that require them to protect it:
- Hosting and infrastructure providers (for example, cloud hosting)
- Email and calendar providers (for example, Google Workspace)
- Scheduling tools (for example, a booking calendar)
- Messaging platforms (for example, WhatsApp, if you contact us there)
- Professional advisers and authorities, where the law requires it
6. Transfers outside your country
Some of our providers may be located or process data outside Turkey or the European Economic Area. Where this happens, we rely on the safeguards the law allows: an adequacy decision, standard contractual clauses, or another appropriate safeguard, and, in the cases allowed under KVKK article 9, your explicit consent.
7. How long we keep your data
- Demo requests and enquiries: up to 24 months after our last contact, unless we start working together.
- Customer records: for the duration of the contract and the periods required by law.
- Server logs: up to 12 months.
When the retention period ends, we delete or anonymise the data.
8. Your rights
Under KVKK article 11 and the GDPR, you have the right to:
- find out whether we process your personal data and request information about it;
- learn the purpose of the processing and whether it is used in line with that purpose;
- know the third parties to whom your data is transferred, in Turkey or abroad;
- request correction of incomplete or inaccurate data;
- request deletion or destruction of your data;
- request that corrections and deletions be notified to third parties we shared the data with;
- object to a result against you produced solely through automated analysis;
- claim compensation if you suffer damage from unlawful processing;
- under the GDPR, also request portability of your data, restriction of processing, and object to processing based on our legitimate interests.
To use these rights, write to aiclinicsolutions@gmail.com with your name and the details of your request. We respond within 30 days, free of charge in most cases. You may also complain to the Turkish Personal Data Protection Authority (KVKK) or, if you are in the EEA, to your local data protection authority.
Part B: Patient data processed for clinics
9. Our role
When a clinic uses SEDA, patients write to or call the clinic, and our assistant answers on the clinic's behalf. In this case:
- the clinic decides why and how patient data is used. The clinic is the controller and is responsible for informing its patients;
- SEDA processes the data only on the clinic's documented instructions, as a processor.
If you are a patient and want to exercise your rights, please contact the clinic you wrote to. We will help the clinic respond.
10. What the assistant processes
Depending on how the clinic configures it: messages and call content, name, phone number, requested treatment, appointment details, the channel and, where available, the advert the patient came from. Calls may be recorded and transcribed only if the clinic enables this; when recording is on, callers hear a notice at the start of the call.
11. What we commit to
- We use patient data only to provide the service to the clinic.
- We keep each clinic's data separate from other clinics' data.
- We host data in the region the clinic chooses: Turkey or abroad.
- Data is encrypted in transit and at rest.
- Access is limited to people who need it to run the service.
- The assistant does not provide diagnosis or medical advice. Clinical, urgent or sensitive matters are handed to the clinic's team.
- We keep data for the period set by the clinic, and delete or return it when the contract ends.
- A data processing agreement is available to every clinic customer on request.
- If we become aware of a personal data breach affecting a clinic's data, we notify the clinic without undue delay.
12. Security
We apply technical and organisational measures to protect personal data, including encryption, access controls, separation of customer data and monitoring. No system is completely secure, but we work to keep the risk low and to respond quickly if something goes wrong.
13. Children
Our website and service are not directed at children, and we do not knowingly collect their data through this website.
14. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows the latest version. If we make material changes, we will tell you in a clear way.
15. Contact
SEDA aiclinicsolutions@gmail.com · +353 87 487 6931