Journey Cure

Legal / Privacy notice

Privacy notice Journey Cure Global

Last updated: 2026-05-01
Data controller: Journey Cure Global
Contact: hello@journeycure.com

This notice describes what personal data Journey Cure Global collects from website visitors and prospective patients, why we collect it, how long we keep it, and how you can exercise your rights under the EU GDPR and Turkish KVKK.

What we collect

  • Contact and case details you submit through forms: name, email, phone, organisation, case type, summary, and any uploaded medical documents.
  • Hashed visitor IP and user-agent for fraud and abuse prevention. Raw IPs never persist on our servers.
  • Consent decisions (analytics / marketing) along with the policy version and timestamp.
  • Analytics events if you opt in: page paths, referrers, locale. No advertising identifiers, no cross-site tracking.

Why we use it

  • To respond to your enquiry and coordinate medical cases (legal basis: legitimate interest / contract).
  • To comply with regulatory, fiscal and clinical record-keeping obligations.
  • To send operational updates and marketing only if you opt in (legal basis: consent).

How long we keep it

  • Contact, partner and case submissions: 730 days, after which they are anonymised in place.
  • Case attachments: stored in Supabase storage under a private bucket and deleted on request or after retention expires.
  • Consent log: 2555 days (evidentiary retention).
  • Analytics events: 365 days.

Sharing

We do not sell your data. We share it only with the operational sub-processors required to coordinate your case:

  • Hosting: Vercel
  • Database & storage: Supabase
  • Transactional email: Resend
  • Bot protection: Cloudflare Turnstile
  • Hospital and insurance partners only data required to plan and deliver care.

Your rights

You may ask us to access, rectify, erase, restrict, port, or object to our processing of your personal data. Submit a request via /legal/dsar. We verify by email and respond within 30 calendar days.

Updates

If we materially update this notice, the new version is stamped alongside your saved consent so you always know which version you agreed to.