Privacy Policy

Last updated: 8 November 2026

Draft for review. Company details in square brackets must be completed once the company is incorporated, and this text should be reviewed by a qualified lawyer before use in your jurisdiction.

1. Who we are

Sutworks ("we", "us") is operated by [legal company name], registered number [number], registered address [address]. For privacy questions, write to emir@sutworks.com.

2. What this website collects

This website is an information page. It does not use accounts, advertising pixels or analytics cookies. We receive personal data only when you contact us.

Email. If you write to us, we receive your email address, name and the content of your message.
Booking. If you book a call through Cal.com, Cal.com processes the details you enter (name, email, time) under its own privacy policy, and we receive the booking.
Language preference. If you switch language, we store a small cookie named "lang" in your browser for up to one year so the site remembers your choice. It contains no personal data. We also use your approximate country, derived from your IP address by our hosting provider, only to choose the default language.
Server logs. Our hosting provider (Vercel) may process technical data such as IP address and browser type to deliver and secure the site.

3. Why we use it, and our legal basis

To reply to your enquiry and arrange a call (legitimate interests, or steps taken at your request before a contract).
To send you the free analysis you asked for (your request / contract preparation).
To keep the site secure (legitimate interests).

4. Business contact emails

We may contact business email addresses of clinics about our services. We use publicly available business contact details, identify ourselves, and include our company details and an unsubscribe option in every message. If you tell us to stop, we add you to a permanent suppression list and do not contact you again. To opt out at any time, write to emir@sutworks.com.

5. Who we share data with

We use service providers to run our business, including Vercel (hosting), Google Workspace (email), Cal.com (scheduling) and email-sending tools. They process data on our instructions or under their own terms. Some are located outside your country, including in the United States; where required we rely on appropriate safeguards such as standard contractual clauses. We do not sell personal data.

6. Patient data

This website does not collect patient data. When we work with a clinic, patient-related data is handled only under a written agreement with that clinic, minimised, anonymised wherever possible, and processed on the clinic's instructions.

7. How long we keep it

Enquiry emails are kept for as long as needed to handle your request and for up to [24] months afterwards, unless a contract requires longer. Suppression-list entries are kept indefinitely so that we honour your request.

8. Your rights

Depending on where you live (for example under the UK GDPR, EU GDPR or Turkish KVKK) you may ask to access, correct or delete your data, object to or restrict its use, or request a copy. Write to emir@sutworks.com. You may also complain to your data-protection authority, such as the UK Information Commissioner's Office.

9. Changes

We will update this page when our practices change and revise the date above.