Privacy & Security

If You Work at a Clinic and Your Own Practice: Preventing Data Mixing

A guide for hybrid-working therapists. How to keep clinic and private practice data separate in compliance with KVKK (Turkey's data protection law, equivalent to GDPR), prevent double-booking, and maintain clear boundaries.

6 min read

A significant portion of therapists in Turkey work hybrid today. During the week at an institution, on weekends at their own private practice; or at two different clinics on alternating days. This model is financially secure and professionally flexible. But operationally, it creates a real management challenge.

When you're moving between two worlds, which client is recorded where, which calendar belongs to which practice, which client did you see where last week? These seem like small questions, but they eat up hours of your week. Worse still, this confusion poses a serious risk from a KVKK (Turkey's data protection law, equivalent to GDPR) perspective.

In this article, we'll cover how hybrid-working therapists should keep their data separate, the legal boundaries involved, and practical solutions.

Three Practical Problems of Hybrid Work

Most hybrid-working therapists encounter three common challenges.

Double-booking risk. A client was scheduled at Clinic A for Tuesday at 2:00 PM. A reminder slipped into your own practice for the same time slot. You can't be in two places at once.

Data leakage risk. The institution's clinic refers a client to you. When you want to transfer this client to your own practice, under KVKK this is not a simple copy-and-paste operation.

Mental fatigue. Your mind constantly switches between two systems, two calendars, two note structures. Burnout is built from these micro-burdens.

These three problems can be largely solved with the right system.

The legal framework is this: client data you process while working at an institution falls under the institution's data responsibility. Data you process in your own private practice falls under your data responsibility. These are two different legal entities.

This has three practical implications:

You cannot transfer a client you saw at Clinic A to your own practice — the client must give a new explicit consent for this transition.

The notes in Clinic A's system do not belong to you; copying them to your personal archive is a contract violation in most cases.

If you refer a client from your own practice to an institution, information is shared with the client's explicit consent; otherwise the transition must begin as a new registration at the institution.

Once these boundaries are clear, building the right system becomes much easier.

Solution 1: Two Completely Separate Systems

The simplest solution on the surface is this: the institution's system at the institution, your practice's system at home. Two separate applications, two separate databases.

Advantages:

Data is completely separate.

KVKK boundaries are automatically respected.

If one system goes down, the other is unaffected.

Disadvantages:

Double-booking risk is high. Two separate systems don't talk to each other.

Constantly switching between applications creates mental overhead.

Managing two applications on one device becomes complicated.

This solution is safe from a KVKK standpoint — but it's the most operationally exhausting option.

Solution 2: One System But a "Tag" Approach

Some therapists use a single personal scheduling program and distinguish clients by tagging them as "clinic" or "private practice."

This approach is operationally comfortable, but it creates two major problems:

Data separation remains artificial. A client tagged "clinic" in the same database has effectively been removed from the institution's data boundary. This means changing the data controller under KVKK — the client must give explicit consent.

Data leakage risk arises. A data breach in your personal application affects clients from both you and the institution at once. The institution may claim you bear responsibility in this situation.

Practically comfortable, but legally unsustainable.

Solution 3: Isolated Accounts Architecture

The third solution is the most sustainable: a single application with independent workspaces inside it.

In this architecture:

You have one Personal Account (your personal profile).

You have a separate Business Account for each of your practices.

Data remains separate within each account's own KVKK boundary — one cannot see the other.

Calendars communicate in the background to prevent conflicts; no double-booking occurs.

You switch with a single tap via the account selector in the top right.

With a single subscription, unlimited business accounts can be added.

This structure was first introduced in the Turkish market by Calemio. The "Isolated Accounts" feature was designed specifically for hybrid-working therapists.

How does it work in practice? On Monday morning you go to Clinic A; you open the app and switch to the Clinic A account. All clients, appointments, and notes on that screen belong only to Clinic A. On Sunday you come to your own private practice; with one tap you switch to the Private Practice account. It's the same app, but a completely different data universe.

How Is the Double-Booking Problem Solved?

The invisible but life-saving feature of the isolated accounts architecture is this: calendars communicate in the background, but content doesn't leak across.

In practice: an appointment is recorded at Clinic A for Tuesday at 2:00 PM. When you switch to your own practice, you see that time slot is "occupied" — but which client is booked, what the session is about, remains invisible. You only see it as "blocked time."

This structure preserves the KVKK boundary (institution data doesn't leak into your private practice) while eliminating the double-booking risk.

Reminder Messages and Branding

When working hybrid, each practice has a different identity. The SMS going to Clinic A's client should have the "Clinic A" brand at the top; the message going out from your private practice should say "Dr. Elif Kaya Psychology."

In the isolated accounts architecture, each business account has its own branding profile. The message header, signature, reminder text, and pre-consultation form appearance are all configured separately per account.

This detail — which may seem minor — greatly strengthens your professional image. The client immediately distinguishes "oh, that came from the clinic" versus "that came from Dr. Kaya."

Billing and Financial Separation

The financial side of hybrid work must also be managed separately.

The client at Clinic A most likely pays Clinic A; you receive a salary or share from the institution. The client at your own practice pays you directly, and you issue the receipt.

The ideal system handles separate billing and reporting for each account. At year's end, keeping your private practice revenue separate from your institution earnings is critical for tax purposes. Your financial advisor will want to see two separate reports.

In Calemio, each business account has its own revenue tracking and reporting — one doesn't bleed into the other.

Supervision and Professional Development

A topic hybrid-working therapists often overlook: supervision hours pool into a single total. Hours given to you by the institution and hours you arrange yourself both count toward the same annual CPD target.

For this reason, supervision records should be kept in your Personal Account, independent of business accounts. When it comes to license renewal, you need them — not the institution.

Conclusion: Hybrid Work Is Not a Disadvantage, It's an Architectural Choice

Running two practices side by side is actually an advantage with the right system. Institutional security + the flexibility of your own private practice — both at once.

But this advantage is only possible with the right architecture: isolated accounts, automatic conflict detection, separate branding, separate reporting, and preserved KVKK boundaries.

Calemio is the only platform in this category offering this structure. Unlimited business accounts can be added under a single subscription; data remains separate, and calendars communicate in the background. You can start a free trial.

Related articles

Share this article

Try Calemio for free

Encrypted, compliant and simple. Built for independent therapists and clinics.

Start free