1. Who we are
Global Doctor Review is a trading name of Topuz & Partners Ltd, a private limited company incorporated in England and Wales (company number 16161649), with its registered office at Office 403, Screenworks, 22 Highbury Grove, London, N5 2ER, United Kingdom. References to “we”, “us”, or “our” in this policy refer to Topuz & Partners Ltd.
2. What are cookies?
Cookies are small text files stored on your device when you visit a website. We also use similar technologies such as local storage in your browser. Some are set by us (first party); others by partners whose services we embed (third party).
This policy explains what we use, why, and how you can control optional cookies. It applies to visitors from all locations and has been prepared to comply with the UK General Data Protection Regulation (UK GDPR), the Privacy and Electronic Communications Regulations (PECR), the EU General Data Protection Regulation (EU GDPR), the Turkish Personal Data Protection Law (KVKK), and other applicable privacy laws.
3. How we ask for your consent
When you first visit our site, a cookie banner gives you the choice to reject non-essential cookies, accept all, or manage your preferences by category. No optional cookies or third-party scripts are loaded until you have made a choice.
You can change your preferences at any time using the button in the footer of any page.
Your consent choice is recorded anonymously in our consent audit log (see section 6) as required by applicable law.
4. Cookie categories
Strictly necessary
These cookies and technologies are required for the site to function. They include your consent preferences, sign-in sessions, and basket or account data stored in your browser. Because they are essential, they do not require your consent and cannot be disabled through our banner.
Functional
These enable embedded maps on our directory and organisation profile pages. Without them, interactive maps will not load. They are only set after you give consent.
Analytics
These help us understand how visitors use the site so we can improve it. After you consent to analytics cookies, we load Google Analytics (gtag.js) to measure page views and aggregate traffic. You can withdraw analytics consent at any time via Cookie preferences.
Marketing
These are used to measure advertising effectiveness or deliver personalised marketing. After you consent to marketing cookies, we load Meta Pixel to measure ad performance and site conversions, and send matching server-side events to Meta via the Conversions API when marketing consent is granted. Retention is governed by Meta's Business Tools Terms (hashed contact information deleted after matching; Event Data retained for up to two years). You can withdraw marketing consent at any time via Cookie preferences.
5. Cookies and technologies we use
| Name / service | Provider | Purpose | Type | Duration | Category |
|---|---|---|---|---|---|
| gdr_cookie_consent | Global Doctor Review | Stores your cookie consent preferences. | cookie | 12 months | necessary |
| gdr_consent_region | Global Doctor Review | Stores your detected privacy region for consent audit logging. | cookie | Browser session | necessary |
| gdr_visitor_id | Global Doctor Review | Stores an anonymous identifier used only to record consent decisions for audit purposes. | cookie | 12 months | necessary |
| next-auth.session-token (and related) | Global Doctor Review | Keeps admin and member users signed in securely (via NextAuth). | cookie | Session / up to 12 hours | necessary |
| gdr-cart | Global Doctor Review | Remembers items in your basket between visits. | localStorage | Until cleared | necessary |
| gdr-account-session | Global Doctor Review | Caches member portal session state in your browser between visits. | localStorage | Until cleared | necessary |
| Google Maps JavaScript API | Interactive directory map on the Find a Doctor page. | script | Varies (third party) | functional | |
| OpenStreetMap tiles (via Leaflet) | OpenStreetMap / unpkg | Location map on organisation profile pages. | script | Varies (third party) | functional |
| Google Analytics 4 (gtag.js) | Website usage statistics and page-view measurement. | script | Varies (third party) | analytics | |
| Meta Pixel | Meta | Browser pixel and companion server-side Conversions API events for advertising measurement and optimisation. | script | Varies (third party) | marketing |
6. Consent audit log
When you make a consent decision, an anonymous record is written to our secure database (Turso, hosted in the European Union — Dublin, Ireland). Each record contains:
- Your anonymous visitor ID (a random identifier with no link to your name, email, or IP address)
- The date and time of the consent event (UTC)
- Your detected privacy region
- The version of this policy in effect at the time
- Your category choices and the action taken
No name, email address, IP address, or other personal data is stored in the consent log. Records are retained for 3 years from the date of the consent event, after which they are permanently and automatically deleted.
7. Third-party checkout
When you make a payment through Stripe Checkout, you are redirected to Stripe's website (stripe.com). Stripe may set its own cookies on its domain during the checkout session. We do not control those cookies. For details, see Stripe's privacy notice.
8. Infrastructure and hosting
The following services process request data as part of operating the site. They do not set cookies on our domain and do not require consent, but are disclosed here for transparency.
Vercelhosts and delivers globaldoctorreview.com. All page requests are processed by Vercel's infrastructure. See Vercel's privacy policy.
Cloudflareacts as our DNS provider and reverse proxy. All traffic to globaldoctorreview.com passes through Cloudflare's network, which processes IP addresses, request headers, and URLs for security and performance purposes. Cloudflare may collect aggregate traffic analytics. See Cloudflare's privacy policy.
9. How long we keep your consent record
Each anonymous consent audit log entry is retained for 3 years from the date and time of the consent event (stored in UTC). When that period ends, the record is permanently deleted. Deletion is automatic: a scheduled process runs on the first day of each month at 02:00 UTC and removes all records older than three years. We do not keep consent audit log entries beyond this retention period.
The policy version in force when you gave consent is stored with each record. The current version is 1.1. If we make material changes to this policy, the version number will be updated and new consent events will be logged against the revised version.
Your in-browser consent preferences are stored separately (see section 5) and are kept for up to 12 months, or until you clear them from your browser.
10. Your rights
Depending on your location, you may have the right to access, correct, or request deletion of data we hold about you, withdraw consent at any time, object to processing, and lodge a complaint with a supervisory authority.
UK visitors may complain to the Information Commissioner's Office (ICO) at ico.org.uk.
EU visitors may complain to their national data protection authority.
Turkish visitors may contact the Personal Data Protection Authority (KVKK) at kvkk.gov.tr.
To exercise any of these rights or for questions about this policy, contact us at privacy@globaldoctorreview.com. See our Privacy Notice for full details of how we process personal data across the site.
11. Changes to this policy
We will update this policy when we make material changes to the cookies or technologies we use. The version number in our consent log will be incremented accordingly. The date at the top of this page reflects when the policy was last revised.
This policy covers cookies and similar technologies only. For full details of how we process personal data, see our Privacy Notice.
Manage your cookie preferences
Update which optional cookies and similar technologies we may use on your device.