Privacy Policy
Last updated: 3 July 2026
This policy explains how NexWell handles your personal data when you use thenexwell.com and our patient-coordination services.
1. Who we are (Data Controller)
Nexwell Global Solutions FZCO(“NexWell”, “we”, “us”) is the controller of the personal data described in this policy.
- Registered entity: NEXWELL GLOBAL SOLUTIONS FZCO
- Licence: Dubai Integrated Economic Zones Authority (IFZA), Licence No. 53266
- Registered address: IFZA Properties, Dubai Silicon Oasis, Dubai, UAE
- Contact: info@thenexwell.com
Our role.NexWell Clinics is the treating brand — our clinics and surgeons in Türkiye diagnose, plan, and perform your treatment, and operate as part of the same company as the coordination team you first contact. Nexwell Global Solutions FZCO is the single data controller for both the enquiry / coordination data collected before treatment and the clinical data recorded at our Türkiye facility — the facility is a business unit of NexWell, not a separate, independent clinic or a separate legal entity.
2. What data we collect
Data you give us (enquiry / quote forms):
- Identity & contact: name, email address, phone number, country of residence.
- Health-related information (special category): the treatment or procedure you are interested in, and any medical details you choose to share in your message or supporting documents.
Payment data: where a deposit or payment is processed, it is handled by our payment processor Stripe; NexWell does not store full card numbers.
Data collected automatically: IP address, device / browser information, pages viewed, and cookie / analytics identifiers (see Section 8).
3. Why we use it, and our legal basis
We process health data and share it with the treating facility only with your explicit consent, which you may withdraw at any time (Section 6).
| Purpose | Legal basis (GDPR) | Legal basis (KVKK) |
|---|---|---|
| Respond to your enquiry and prepare a coordination quote | Art. 6(1)(b) / 6(1)(f) | Md. 5 |
| Process health data so our clinicians can assess your case | Art. 9(2)(a) explicit consent | Md. 6 explicit consent |
| Process your health data for treatment at our Türkiye facility | Art. 6(1)(b) + 9(2)(a) | Md. 5–6 |
| Payments / deposits | Art. 6(1)(b) | Md. 5 |
| Marketing & analytics (only with consent) | Art. 6(1)(a) | Md. 5 |
4. Who we share data with
Because NexWell Clinics' Türkiye facility is part of the same company, moving your data from our coordination team to the clinicians treating you is internal use, not a disclosure to a separate organisation. We do share data with the following external recipients:
- GoHighLevel / LeadConnector — enquiry and CRM management.
- Stripe — payment processing.
- Google Analytics (GA4) & Google Tag Manager — website analytics (with consent).
- Meta (Facebook) Pixel — advertising measurement (with consent).
- Cookiebot — cookie-consent management.
- Sentry — application error monitoring.
We put data-processing agreements in place with our processors.
5. International data transfers
Your data — including health data — may be transferred between the United Arab Emirates (where NexWell is established), Türkiye (where NexWell Clinics delivers treatment) and the EU / UK (where many patients are located). Where we transfer EU / UK personal data to countries without an adequacy decision, we rely on appropriate safeguards, namely Standard Contractual Clauses (SCCs), together with your explicit consent for health-data sharing.
6. Your rights
Under GDPR / UK GDPR you have the right to access; rectification; erasure; restriction; data portability; to object; to withdraw consent at any time; and not to be subject to solely automated decisions. Under KVKK (Türkiye) you have equivalent rights.
To exercise any right, contact info@thenexwell.com. We respond within the legal timeframe (one month under GDPR / 30 days under KVKK).
7. How long we keep your data
We keep personal data only as long as necessary for the purposes described above and as required by law. Enquiry and coordination data is minimised and deleted or anonymised once your case is closed, unless a longer period is legally required (for example, statutory accounting retention for payment records). Clinical records created at our Türkiye facility are kept for the period required by Turkish health regulations for medical records, after which they are deleted or anonymised.
9. Data security
We apply appropriate technical and organisational measures (encryption in transit, access controls, HTTPS / HSTS, vetted processors). No method of transmission is 100% secure; we work to protect your data and to notify you and the relevant authority of a breach where legally required.
10. Complaints
If you believe we have mishandled your data you may complain to a supervisory authority — the ICO (UK), your local Data Protection Authority (EU), or the Kişisel Verileri Koruma Kurumu (KVKK, Türkiye). We ask that you contact us first at info@thenexwell.com so we can try to resolve it.
11. Changes to this policy
We may update this policy; the “Last updated” date above shows the latest version. Material changes affecting how we use health data will be notified where required.