Last updated: September 10, 2026

Table of contents
    Add a header to begin generating the table of contents

    At TurnUp BV, we are committed to protecting your privacy and handling your personal data with care. This Privacy Policy explains what data we collect, how we use it, and what your rights are as a user of our platform, TurnUp World.

    By using our services, you also agree to our Terms and Conditions, which govern the contractual relationship between you and TurnUp.

    1. Who We Are

    TurnUp BV
    Foreestelaan 1 9000 Gent, Belgium
    VAT BE 0782.448.322
    privacy@turnup.be
    www.turnup.world

    2. What Data We Collect

    Depending on your use of our platform, we may collect:

    • Patient information (e.g., name, date of birth, phone, email, language preferences)
    • Appointment data (e.g., date, time, duration, provider, status, location)
    • Treatment details (e.g., treatment type, duration, assigned professional)
    • Employee/user data (e.g., login credentials, profile, availability, roles)
    • Opening hours and agenda availability per user or practice
    • Company/practice information (e.g., address, contact info, linked domains)
    • Communication preferences and contact history
    • Waitlist entries, no-show tracking, and scheduling behavior
    • Calendar synchronization logs

    Within the TurnUp platform, we do not log or store technical browser data such as IP addresses or device information unless explicitly enabled by the user. Our public website works differently; see section 9, “Website visitors, cookies and advertising”.

    3. Why We Collect Your Data

    We use personal data to:

    • Provide access to the TurnUp World platform
    • Manage appointments and waitlists
    • Sync calendars and notify users of updates
    • Send appointment confirmations, reminders and follow-ups (via email/SMS/notifications)
    • Support our users with onboarding, training, and daily questions
    • Improve the quality and performance of our platform
    • Maintain contractual and legal obligations
    • Generate aggregate insights through machine learning (AI) models

    Our AI-based appointment prediction model operates on anonymized or pseudonymized data to help identify trends (e.g., likely no-shows), always without identifying individuals.

    We never sell your personal data.

    4. Third-Party Tools & Integrations

    To offer our services, we use:

    • Postmark (email delivery platform)
    • Microsoft Graph API (optional email delivery via the client’s own M365 account)
    • Spring (SMS gateway)
    • Firebase Cloud Messaging (FCM) for app notifications
    • Azure (cloud hosting and infrastructure)

    All external tools comply with data protection standards (e.g., GDPR) and are used under signed processor agreements.

    This section covers tools used to deliver the TurnUp platform. For the third parties involved in cookies, analytics and advertising on our public website, see section 9.

    5. Legal Basis for Processing

    We process data based on:

    • Your explicit consent
    • Contractual necessity
    • Legal obligations
    • Legitimate interest (e.g., platform maintenance, fraud prevention)
    • For cookies and similar technologies on our public website, see section 9

    6. Data Retention

    We store personal data only as long as necessary for:

    • Providing services
    • Fulfilling legal/tax obligations
    • Supporting historical reporting and traceability

    Users or clients may request deletion of data where applicable.

    7. Data Security

    We apply robust security measures:

    • Encrypted data storage
    • Access control by role and responsibility
    • Secure infrastructure (Azure)
    • Regular software updates and audits

    8. Your Rights

    You have the right to:

    • Access the data we store about you
    • Correct inaccurate or outdated info
    • Request deletion of your data
    • Object to processing or withdraw consent
    • File a complaint with your local supervisory authority (in Belgium, the Data Protection Authority; in the Netherlands, the Autoriteit Persoonsgegevens; in the United Kingdom, the Information Commissioner’s Office)

    To exercise these rights, contact: privacy@turnup.be

    9. Website visitors, cookies and advertising

    This section applies to visitors of our public website (turnup.world). It does not apply to data processed within the TurnUp platform on behalf of dental practices, which is covered by sections 2 to 8.

    We use cookies and similar technologies on our website for functional purposes, analytics and advertising. Essential cookies are required for the website to work. Analytics and advertising technologies are only activated after you give consent through our cookie banner. You can change or withdraw your consent at any time via the cookie settings on our website. A full overview of the individual cookies we use, their purpose and their lifespan is available in our Cookie Policy.

    Who receives your data

    Where you consent to analytics and marketing cookies, we work with the following partners.

    Advertising partners, with whom we act as joint controllers (see below):

    • Google Ireland Limited (Google Ads)
    • Meta Platforms Ireland Limited (Meta Pixel)
    • LinkedIn Ireland Unlimited Company (LinkedIn Insight Tag)

    Service providers acting on our instructions as processors, under data processing agreements:

    • Google Ireland Limited (Google Analytics, Google Tag Manager)
    • HubSpot Ireland Limited (embedded demo booking calendar)

    What we share

    With your consent, these partners receive online identifiers and technical data, such as your IP address, browser and device information, cookie and advertising identifiers, the pages you view, and the actions you complete on our website (for example submitting a form or booking a demo).

    In addition, when you submit a form or book a demo, we share a pseudonymised version of the contact details you provide, such as your email address and phone number, with Google (Enhanced Conversions), Meta (Advanced Matching) and LinkedIn. These details are converted into a one-way SHA-256 hash before transmission, which means we never send your email address or phone number in readable form. The hash is used solely to match your action to an advertisement you have seen or clicked, so that we can measure and improve the effectiveness of our advertising campaigns.

    We treat hashed identifiers as personal data under the GDPR. We therefore only share them where you have given consent for marketing cookies and similar technologies, and we do not share them for any other purpose.

    Our advertising partners may combine this data with data they hold from other websites and services, and use it to show you personalised advertising. Each partner does so under its own privacy policy.

    Legal basis

    The placing of non-essential cookies and similar technologies, and the subsequent sharing of data with the partners listed above, takes place on the basis of your consent (Article 6(1)(a) GDPR), read together with:

    • Article 10/2 of the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data, implementing Article 5(3) of the ePrivacy Directive;
    • Article 11.7a of the Dutch Telecommunications Act (Telecommunicatiewet), for visitors in the Netherlands;
    • Regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), for visitors in the United Kingdom.

    Essential cookies are placed on the basis of our legitimate interest in providing a secure and functioning website (Article 6(1)(f) GDPR). You may withdraw your consent at any time via [Cookie settings], with effect for the future.

    Our role and that of our partners

    For the collection of data through these technologies and its transmission to Google Ads, Meta and LinkedIn, we act as a joint controller together with the relevant partner within the meaning of Article 26 GDPR. For their own subsequent use of that data, each partner acts as an independent controller under its own privacy policy:

    • Google: https://policies.google.com/privacy
    • Meta: https://www.facebook.com/privacy/policy
    • LinkedIn: https://www.linkedin.com/legal/privacy-policy

    For Meta and LinkedIn, these arrangements are governed by the joint controller terms that form part of their advertising agreements. For Google Ads, we consider ourselves a joint controller for the collection and transmission stage on the basis of Article 26 GDPR.

    In essence: we are responsible for obtaining your consent and for informing you about the collection and transmission of the data, and each partner is responsible for its own further processing and for the security of the data it holds. You can exercise the rights described in section 8 either with us or directly with the relevant partner. A summary of the essence of these arrangements is available on request via privacy@turnup.be.

    Google Analytics, Google Tag Manager and the HubSpot demo booking calendar are used on our instructions as processors, under signed data processing agreements.

    International transfers

    These partners may process the data outside the EEA and the United Kingdom, including in the United States. Such transfers take place on the basis of the EU-US Data Privacy Framework and its UK Extension where the recipient is certified under it, and/or on the basis of the European Commission’s Standard Contractual Clauses with additional safeguards. You can request more information, including details of the safeguards applied, via privacy@turnup.be.

    Retention

    Website analytics data is retained for a maximum of 14 months in Google Analytics. Our advertising partners apply their own retention periods, as set out in their privacy policies. The lifespan of each cookie is listed in our Cookie Policy.

    Your rights

    The rights set out in section 8 also apply to data collected through cookies and similar technologies. You can object to the processing described in this section at any time by withdrawing your consent via the cookie settings.

    10. Use of AI

    We may use anonymized or pseudonymized appointment and behavior data to train machine learning models. These models help predict trends such as likely no-shows or optimal scheduling windows, without exposing or using directly identifiable personal data.

    Important clarification for Google Workspace API users: We do not use any data obtained through Google Workspace APIs (including Gmail, Calendar, Drive, or Contacts) to develop, improve, or train generalized AI and/or ML models. Such data is only used to enable the features explicitly requested by the user (e.g., calendar synchronization) and never for broader AI training purposes.

    11. Changes to This Policy

    This policy may be revised over time. The latest version is always available on our website.

    12. Contact

    Questions or concerns? Get in touch:
    privacy@turnup.be
    TurnUp BV, Foreestelaan 1, 9000 Gent, Belgium