Privacy policy

Efalign Sağlık Teknolojileri (“Efalign”, “we”, “us”), established in İstanbul, Türkiye, operates the website www.efalign.com and is the data controller for the personal data described in this policy. This policy explains what data we collect through this website, why we collect it, who we share it with and what rights you have. You can reach us about anything in this policy at [email protected].

1. Scope

This policy covers only the public corporate website at www.efalign.com. The iLigner product website (www.iligner.com) and the doctor, patient and manufacturing-partner portals of the iLigner platform (portal.iligner.com, my.iligner.com and partner.iligner.com) are separate services with their own legal terms and privacy notices; when you use them, the notice published there applies. This website does not offer user accounts, does not process orders and does not collect any health or treatment data.

2. Data we collect

2.1 Contact form

When you send us a message through the contact form, we collect the information you type in:

• your name;
• your email address;
• your phone number (optional — only if you choose to provide it);
• the category you select (partnership, distribution, press or other);
• the text of your message;
• your consent confirmation and, separately, whether you opted in to receiving occasional product updates (optional);
• the language of the site you were using (English or Turkish).

2.2 Technical data

Like almost every website, ours runs on infrastructure that keeps standard technical records. Our hosting and security providers may process your IP address, browser and device information and request logs in order to deliver the site, defend it against attacks and diagnose faults. On the contact page, Cloudflare Turnstile may run an invisible bot check and process similar technical signals to distinguish humans from automated spam. We do not use this technical data to identify or profile individual visitors.

2.3 Analytics

If enabled, we measure aggregate site usage with Plausible Analytics, a cookieless tool that produces statistics such as page views and referral sources without cookies, without persistent identifiers and without cross-site tracking. A slot for Google Analytics exists in the site’s code but loads only if we ever activate it and you have given explicit consent through the cookie banner. See our cookie policy for details.

3. The form draft stored in your browser

As a convenience, the contact form keeps a draft of what you have typed (name, email, phone, category and message — never your consent choices) in your own browser’s localStorage, so an accidental page reload does not erase your message. The draft stays exclusively on your device, is never transmitted to us as a draft, expires after 15 minutes and is deleted when your message is sent successfully. You can also remove it at any time by clearing your browser’s site data.

4. Purposes and legal bases

We process the data above for the following purposes:

• Responding to your inquiry. We use your form data to understand and answer your request and to route it to the right team. Legal basis: the processing is necessary for steps taken at your request prior to a possible contract, and for our legitimate interest in answering messages sent to us (Turkish Personal Data Protection Law No. 6698 — “KVKK” — Article 5/2(c) and 5/2(f)).
• Occasional updates. Only if you tick the separate, optional marketing checkbox do we use your email address to send occasional updates about Efalign and its iLigner and Perla brands. Legal basis: your explicit consent (KVKK Article 5/1), which you may withdraw at any time by writing to [email protected].
• Security and abuse prevention. Technical data and bot-check results are processed to keep the site available and to filter spam. Legal basis: our legitimate interest in operating a secure website (KVKK Article 5/2(f)).
• Establishing, exercising or defending legal claims and complying with legal obligations, where applicable (KVKK Article 5/2(a), 5/2(ç) and 5/2(e)).

5. Recipients and processors

We do not sell personal data and we do not share it with third parties for their own marketing. Your data is handled by a small set of service providers acting on our instructions:

• DigitalOcean — hosting of the website (EU region, Frankfurt);
• Cloudflare — content delivery network, security filtering and the Turnstile bot check;
• Postmark (ActiveCampaign, LLC) — transactional email delivery of contact-form submissions to our team;
• Plausible Analytics — cookieless aggregate statistics, only if enabled;
• Google (Google Analytics) — only if this service is ever activated and only after your explicit consent via the cookie banner.

Contact-form submissions are delivered to us by email and/or recorded as inquiry records in our own back-office system so that our team can respond and keep track of the correspondence.

6. International transfers

Our website infrastructure is hosted in the European Union (Frankfurt), and some of the providers listed above are established outside Türkiye. Where personal data is transferred abroad, we rely on the mechanisms provided for in KVKK Article 9, including your express consent where required and, where available, transfer safeguards recognized by the Turkish Personal Data Protection Board. [KVKK Art. 9 transfer basis and safeguards — to be confirmed by counsel]

7. Retention

We keep contact-form submissions for as long as needed to handle your inquiry and any follow-up correspondence, and thereafter only as long as statutory limitation periods or legal obligations require. Email addresses processed on the basis of your marketing consent are used until you withdraw that consent. If you ask us to delete your data, we do so unless a legal obligation requires us to retain it, in which case we restrict it to that purpose. Draft data in localStorage never reaches us and expires on your device after 15 minutes.

8. Your rights

Under KVKK Article 11, you have the right to:

• learn whether your personal data is processed;
• request information about the processing, if it is;
• learn the purpose of the processing and whether the data is used in line with that purpose;
• know the third parties, in Türkiye or abroad, to whom the data is transferred;
• request correction of incomplete or inaccurate data;
• request deletion or destruction of the data under the conditions of KVKK Article 7;
• request that corrections, deletions and destructions be notified to third parties to whom the data was transferred;
• object to a result that arises to your detriment from analysis of your data exclusively by automated systems;
• claim compensation for damage caused by unlawful processing of your data.

9. How to exercise your rights

Send your request to [email protected] with enough information for us to verify your identity and understand your request. We respond as soon as possible and at the latest within thirty days, free of charge, in accordance with the KVKK and the Communiqué on the Procedures and Principles of Application to the Data Controller. If you are not satisfied with our answer, you may complain to the Turkish Personal Data Protection Board.

10. Children

This website is directed at a general audience and is not intended to collect data from children. Orthodontic treatment decisions, including for minors, are made with licensed clinicians, not through this website.

11. Changes to this policy

We may update this policy when our website, providers or legal requirements change. The current version is always published on this page with its last-updated date. Material changes will be highlighted on the site.

12. Contact

Data controller: Efalign Sağlık Teknolojileri, İstanbul, Türkiye. Email: [email protected]. For cookie-specific information, see the cookie policy; for the statutory Turkish disclosure, see the KVKK notice (aydınlatma metni), which is the authoritative text for Turkish law purposes.