Privacy Policy

1. Who is responsible for your data

The data controller is Hair in Istanbul, operating the hair transplant clinic Hair in Istanbul at Fulya, Büyükdere Cd. No:76, 34393 Şişli, Istanbul, Türkiye. You can contact us about privacy at info@hairinistanbul.com.

2. What data we collect

• Call-back form: your name, country and phone number.
• Contact form: your name, email address, country, optional phone number, the topic you choose and your message.
• Technical data: a one-way coded summary of your IP address (not the address itself), the page where you filled in the form, the page where you first arrived, the website or campaign that referred you and the language of the site.
• Consent record: the version of this notice you accepted and the time you accepted it.
• Cookies: strictly necessary cookies, and analytics or marketing cookies only if you allow them. See our Cookie Policy.

Please do not send photos of your hair, medical records or other health information through the website forms. If a medical assessment needs photos, our team will share a secure way to send them, and health information is only processed with your explicit consent.

3. Why we use your data

• To reply to your enquiry and call you back, as you requested.
• To prepare a personal assessment and quote, and to plan your treatment if you decide to go ahead.
• To keep a record of your consent and our communication with you.
• To protect the website against spam and misuse.
• To understand, in aggregate, which pages and channels bring patients to us, only where you have allowed analytics cookies.

4. Legal bases

We process your data because you asked us to contact you and to take steps before a possible treatment agreement, because you gave your consent, because we have a legitimate interest in keeping the website secure, and where the law requires us to keep certain records. Health data is processed only with your explicit consent or where the law allows it for medical care. These bases correspond to Article 5 and Article 6 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and Article 6 and Article 9 of the EU and UK General Data Protection Regulation (GDPR).

5. Who receives your data

Your data is seen only by the clinic staff who handle your enquiry. We use service providers to host the website and to send emails, who process data only on our instructions. We do not sell your personal data and we do not share it with third parties for their own marketing.

6. International transfers

Hair in Istanbul is based in Türkiye. If you contact us from another country, your data is transferred to and processed in Türkiye so that we can respond to you and plan your treatment. Where the law requires it, we rely on your explicit consent or other safeguards for this transfer.

7. How long we keep your data

We keep enquiry data for up to 24 months after our last contact with you, unless you become a patient, in which case medical records are kept for the periods required by Turkish health law. Technical security logs are kept for a shorter period. You can ask us to delete your enquiry earlier at any time.

8. Your rights

Depending on where you live, you have the right to ask whether we process your data, to receive a copy, to have it corrected or deleted, to restrict or object to processing, to withdraw your consent at any time and to receive your data in a portable format. Under KVKK Article 11 you may also ask about the purpose of processing and the recipients of your data, and claim compensation for unlawful processing.

To use any of these rights, email info@hairinistanbul.com. We reply within 30 days. You can also complain to the Turkish Personal Data Protection Authority (KVKK) or to the data protection authority in your own country.

9. Security

The website uses encrypted connections, access to enquiries is limited to authorised staff with personal accounts, and patient photos are never stored in publicly accessible folders.

10. Changes to this policy

If we change this policy, we update the date at the top of this page. Important changes are shown on the website before they take effect.

See also our KVKK Personal Data Notice and Imprint.