Privacy Policy
How Belesthetic collects, uses and protects your personal and health data under the GDPR.
Last updated: 2026-01-01
Who we are
Belesthetic (company number BE 0000.000.000, registered in Belgium) is the data controller for the personal data described in this policy. You can reach us at hello@belesthetic.com or by post at our registered address in Brussels.
What we collect
Identity and contact details you give us (name, email, telephone, country). Health information you choose to share so that a treatment plan can be prepared: your treatment interest, medical history, medication, previous procedures and any photographs you upload. Technical data such as IP address and pages visited, collected only where you have consented to analytics cookies.
Why we process it, and on what basis
To answer your enquiry and prepare a treatment plan, on the basis of your explicit consent (Article 9(2)(a) GDPR for health data) and steps taken at your request prior to entering a contract. To arrange treatment with our hospital partner, on the basis of performance of that contract. To meet legal and accounting obligations. To improve the website, where you have consented to analytics.
Special category data
Health data receives additional protection under Article 9 GDPR. We process it only with your explicit consent, only for the purpose of arranging your care, and we do not use it for marketing, profiling or automated decision-making of any kind.
Who we share it with
Memorial Health Group and the treating physicians, so that your plan can be prepared and your care delivered. Our IT and hosting providers, under written processing agreements. We never sell your data and we never share it with advertisers or data brokers.
International transfers
Delivering your treatment requires transferring your data to Türkiye, which is outside the EEA and is not the subject of an adequacy decision. These transfers take place under Article 49(1)(a) GDPR, on the basis of your explicit consent given after being informed of the risk, and under standard contractual clauses with our partner where applicable.
How long we keep it
Enquiry data that does not lead to treatment: 12 months. Treatment files: 10 years, in line with Belgian and Turkish medical record-keeping requirements. Accounting records: 7 years. Analytics data: 14 months.
Your rights
You may request access, rectification, erasure, restriction, portability, and you may object to processing. Where processing is based on consent, you may withdraw that consent at any time, which does not affect processing carried out before withdrawal. Write to hello@belesthetic.com; we respond within one month.
Complaints
If you believe we have handled your data improperly you may complain to the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels.