Privacy and cookies
How Patient Path handles your account, optional private journey saving, downloaded files, starter-question emails and support.
Last updated: 17 October 2026
- An account is required to save a private journey online. The worked example uses fictional information.
- Online saving is optional and needs your separate, explicit agreement to store the dental-treatment information in your journey. You can delete your saved journey at any time.
- You can also download a journey file and reopen it in your browser. A downloaded file stays under your control.
- Account and purchase emails are separate from marketing. The starter-question form does not upload your quotes or journey.
Who operates Patient Path
Patient Path Istanbul is operated by MAHMOUD SULAIMAN as an independent freelance project based in Turkey. MAHMOUD SULAIMAN is responsible for the personal information handled through accounts, private journey saving, purchase records, the starter-question form, email support and the operation of this website.
For questions or a privacy request, email mahmoud@patientpathistanbul.com.
Your journey entries, online saves and downloaded files
The tool processes your entries in your browser while you work. Opening a downloaded journey reads that selected file in your browser. Your entries or file are sent to our account service only when you choose to save the journey online. Sharing buttons can pass selected questions to an app or service you choose, as described below.
Online saving requires you to sign in to an account with active paid access. It is optional. The saved information includes the journey details and earlier versions you choose to keep, which may reveal information about your dental treatment. Before the first online save, we ask for a separate, explicit agreement to store that information in your private account. A purchase, account registration or marketing choice does not give that agreement.
The consent wording, version 2026-10-17-v1, is: ‘I agree to Patient Path Istanbul storing the dental-treatment information in this journey in my private account so I can reopen it on other devices. I can delete my saved journey at any time.’ We record the wording version and when you agreed alongside your account.
Your online journey is linked to your account and is not published or shared with clinics. Hostinger hosts the account service and saved records. Authorised administrators may access records where needed to provide support, protect the service or meet a legal obligation. Please include only the details needed for your own preparation; do not upload original medical records, identity documents, passwords or payment-card details.
You can withdraw your agreement to continued online storage by deleting your saved journey. If you cannot access your account, email us for help. Deleting an online journey does not remove copies you downloaded or shared. Existing provider backups may remain for their normal backup period and are not used as an active journey record.
Download my journey creates a file on your device; Open saved journey lets you select it to continue. Download before closing or refreshing if you have changes you have not saved online. A downloaded file contains your entries and earlier versions and is not an encrypted vault. Keep it on a device you trust. We cannot retrieve or remotely delete files on your device.
Your account and access
Your account uses an email address and password. We keep the account details, protected password information, sign-in and security records, and access status needed to run it. Hostinger hosts these records. Keep your password private and sign out on shared devices.
After a successful payment, access is linked to the email address used at checkout. Instructions to set a password or sign in are emailed to that address. Account and access messages, including password-reset messages, are transactional messages handled through Zoho Mail. They are separate from marketing and do not subscribe you to a mailing list.
Necessary, secure session cookies let the website recognise your signed-in account. They are used for account access and security, not advertising.
Payments and purchase records
When you choose to buy, Lemon Squeezy processes the payment through its checkout and handles the payment and billing details you provide there. Patient Path does not collect your full payment-card details in the journey tool.
Our Hostinger-hosted account service keeps transaction information needed to provide access and handle support or refunds, such as the order reference, checkout email, product, payment or refund status and access dates. Your journey content is not sent to Lemon Squeezy to process the purchase.
How long account and saved-journey records are kept
Account details and saved journeys are kept while you keep your account, unless you delete a saved journey earlier or ask us to delete the account. The 12-month paid-access period does not automatically erase your saved journey. After access expires, you can still read, download or delete that online record; making and saving new changes requires active paid access.
Use the saved-journey deletion control to remove the online copy, or contact us if you need help. To request account deletion, email mahmoud@patientpathistanbul.com. Keep a downloaded copy first if you want to retain your record.
We may retain limited transaction, consent, security or support records where needed to resolve a dispute, demonstrate how a request was handled or meet a legal recordkeeping obligation. These are separate from your active saved journey. Provider-controlled logs and backups follow the relevant provider’s retention arrangements.
Emailing you the starter questions
If you choose Email me the starter questions, the form requires your first name and email address. A phone number is optional. We use these details to address and send the fixed set of five general starter questions you requested, and to deal with a problem with that request. The form does not send your personal quotes, journey entries, saved files or personalised question selections to us.
An optional phone number is used only for support you separately request. Providing a phone number does not request a call or WhatsApp message. This form does not subscribe you to marketing emails, a newsletter, calls or WhatsApp promotions.
Form submissions are processed through our WordPress service hosted by Hostinger. Requested emails are sent using our Zoho email service. We keep the submitted contact details, request time and email dispatch status in a private list accessible only to authorised website administrators. Dispatch status is an operational record; it does not tell us that you have read the message.
Starter-form contact records are deleted after 90 days. If you separately ask for support, or a complaint or legal obligation requires a record, the relevant information is handled under the support and legal-retention purposes in this policy. Deleting a form record does not delete the email already delivered to you, or immediately remove provider-controlled logs and backups.
The form uses short-lived hashed identifiers to limit repeated or automated submissions. These abuse-control records are separate from the contact list. Hosting services may still receive your IP address as part of a normal website request.
When you email us
An email gives us your email address, any name you supply, your message, attachments you choose to send and the associated message details. Our Zoho email service also handles that correspondence.
We use it to reply, provide product support, deal with privacy requests and resolve complaints. We do not add support enquiries to a marketing list.
Please describe a technical issue using fictional examples. Do not attach medical records, identity documents or full payment-card details. If sensitive information is sent unexpectedly, we will avoid using it beyond what is needed to handle the message and will remove it where practical and appropriate.
Support correspondence is kept only for as long as needed to answer the enquiry, follow up, handle a complaint or meet a legal recordkeeping obligation. We consider whether the issue is closed, whether a dispute remains and whether retention is required by law.
Email support is handled by the operator in Turkey. Sending us an email therefore makes its contents available to us there. You do not need to email us your saved journey or patient information to use the tool.
Website services and technical information
Our hosting provider receives technical information when your browser requests the site, such as an IP address, browser and device information, requested pages, timestamps and security or error information. This is used to deliver, protect and troubleshoot the website.
The site, account service, private saved journeys and starter-question form are hosted by Hostinger, and the site is delivered through Hostinger's content delivery network. Zoho Mail handles requested starter emails, transactional account messages and support correspondence. Lemon Squeezy handles payment and billing details through its checkout. Fonts are loaded from Google Fonts and Fontshare, and one branding image is served from an Amazon CloudFront address. Requests to these suppliers can disclose your IP address and technical request information.
The operator is based in Turkey and can access information needed to operate the service from there. Providers may process information in countries outside your own, including the United States. Their privacy information describes their processing, retention and transfer arrangements. Contact us if you need more information about the suppliers used for this site.
Provider-controlled technical logs are separate from journey entries. We do not promise that hosting providers retain no logs or that all website traffic stays in one country.
Purposes and lawful bases
Where UK data protection law applies, we use the contract basis for account administration, providing paid access, linking purchases and handling support needed to fulfil a purchase. Steps you request before a purchase may also use this basis. Information required for legal obligations is handled on that basis.
For optional online journey storage, we rely on your consent as the lawful basis and your explicit consent as the condition for storing any health information in the journey. This is a separate choice before the first online save. You can withdraw it by deleting your online journey, without losing the option to keep your own downloaded file.
We rely on legitimate interests for delivering the starter questions you request, ordinary support, basic website delivery, security, abuse prevention and troubleshooting. The starter form is optional and its contact information is not used for marketing.
Patient Path does not make automated decisions about your treatment, clinic choice or medical eligibility. We do not treat an account, purchase or support email as blanket consent to process detailed medical records.
Your choices, rights and complaints
You do not need an account, the starter-question form or an email enquiry to view the site or explore its fictional example. An email address is required for an account and purchase delivery. Online saving needs a signed-in account, active paid access and the separate health-information choice described above. The starter-question form requires first name and email; a phone number is optional.
Where applicable, you can ask to access, correct, delete or restrict personal information we hold, or request a portable copy. The rights and any exceptions depend on the information and the reason it is held.
You can withdraw consent for optional online journey storage by deleting your saved journey, and you can object to processing based on legitimate interests. Email mahmoud@patientpathistanbul.com with other privacy requests or if you cannot use the account controls. Please do not attach identity documents unless we explain that a proportionate identity check is necessary.
You can also complain to the UK Information Commissioner's Office or the relevant data protection authority where you live. These routes do not require you to send medical records to Patient Path.
Changes to this policy
This policy describes the website and its fictional example, accounts, optional private journey saving, purchase records, starter-question emails, user-directed sharing and support. We will update the policy before introducing materially different data uses or new tracking. The updated date is shown at the top of the page.