This notice explains how personal information is handled when you use our website, request information or contact Hair Center of Turkey about a hair assessment or treatment journey.
Last updated: 5 September 2026. This notice provides information; reading it, browsing the website or requesting a consultation is not blanket consent to marketing, publication of photographs or unrelated processing.
Hair Center of Turkey is the health-tourism coordination brand behind this website. For the website and enquiry-handling activities described here, the company operating under this brand is the data controller; its registered company details are available on request from the contact address below.
Branch Office and correspondence contact: Selenium Retro, Ataköy 7-8-9-10. Kısım, D-100 Güney Yanyolu No:18/A, 34158 Bakırköy / Istanbul, Türkiye. Email: sales@haircenterofturkey.com. Telephone: +90 551 353 08 34.
Medical Center: Halıcıoğlu, Piri Paşa, Kumbarahane Cd. No:46, 34445 Beyoğlu / Istanbul, Türkiye. The treating healthcare institution is responsible for its own clinical records and provides its applicable patient privacy information. This website notice does not replace that information or medical informed consent.
- 01
Enquiries and correspondence
We receive the name, email address, telephone number, language preference and messages you provide through a form, email, telephone or WhatsApp. We use them to answer your request, arrange an assessment and keep track of the conversation and your communication preferences.
- 02
Assessment photographs and health information
If you request an assessment, you may provide scalp photographs, hair-loss information, relevant medical history or medication details. These can reveal health information and require additional protection. Share only what is relevant; please do not send unrelated medical documents or identity documents in an initial enquiry.
- 03
Planning and service records
When you proceed, correspondence may include appointment details, travel arrangements, your written quote, service preferences and follow-up information. We use these details to coordinate the services you request, administer the relationship and address questions or complaints.
- 04
Website and technical information
Our systems can receive the page and landing-page address, referring page, campaign parameters, advertising click identifiers, submission time, browser information and network information. Forms store an IP-derived hash for security checks. These records support site operation, abuse prevention and enquiry-source reporting.
Under Türkiye’s Personal Data Protection Law No. 6698 (KVKK), ordinary contact and service information may be processed where necessary to enter into or perform a contract, comply with a legal obligation, establish or defend a right, or pursue a legitimate interest that does not override your fundamental rights. Answering your requested enquiry and securing our systems are distinct purposes; only the information needed for the relevant purpose should be used.
Health information requires a condition permitted by Article 6 of the KVKK. For optional pre-treatment coordination, separate explicit consent is required where no other applicable condition permits that activity. A healthcare institution may have a different legal basis for diagnosis, treatment or healthcare administration. Merely submitting a general enquiry does not authorise every subsequent use of health information.
Consent for optional marketing or publication of identifiable photographs must be separate from your request for assessment or treatment. You may decline optional uses and withdraw consent for future processing by contacting us. Withdrawal does not retrospectively invalidate processing that was lawful before withdrawal, or override a separate legal retention obligation.
Relevant information may be accessed by authorised enquiry and coordination staff, the healthcare professionals or institution involved in your requested assessment, and service providers supporting hosting, security, communications, forms and record management. Where travel services are requested, necessary booking details may be shared with accommodation or transfer providers; this does not require sharing your full health history. Information may also be disclosed to competent authorities where legally required, or to professional advisers where necessary to establish or defend rights.
Zoho Forms can transmit form submissions to our enquiry-management system. If you choose WhatsApp, that service processes communications under its own privacy terms. Opening external maps or other third-party links takes you to services with separate privacy practices. Using those channels may involve processing outside Türkiye, depending on the provider and its configuration.
International transfers must meet the applicable conditions in Article 9 of the KVKK, and any other law applicable to the particular activity. This notice is not consent to international transfer and does not itself establish a transfer safeguard. Contact us for information about the recipients, countries and transfer mechanism relevant to your enquiry, or to discuss another way to provide information.
- 01
First-party enquiry-source tracking
The website currently stores a randomly generated identifier named hct_attribution_id_v1 in your browser’s local storage and sends it with page, referring-page and campaign information to our first-party reporting endpoint. Local storage has no built-in expiry and remains until cleared by you or the browser. The current implementation starts this tracking on page load, without a separate consent prompt. You can clear or block site storage in your browser; doing so does not erase records already received by us. Contact us about those records. This disclosure does not replace any consent that applicable law requires.
- 02
Enquiry retention
The enquiry system currently assigns a five-year retention date to a new record. This is a system setting, not a claim that every enquiry must legally be kept for five years, and the date does not by itself perform automatic deletion. Retention must be assessed against the purpose, the status of your enquiry and any applicable legal or claims-related requirement. You can request review or erasure using the contact details below.
- 03
Clinical records and backups
Clinical records maintained by the treating institution can be subject to separate healthcare record-keeping rules. Restricted backups may retain previous copies for recovery purposes; a request concerning deletion should therefore distinguish active systems, legally required records and backup copies. We will explain any applicable retention exception in our response.
- 04
Security
Access controls and technical safeguards are used to restrict access to enquiry information. No website or communication channel can guarantee absolute security. Please avoid sending unnecessary sensitive information through public comments or unsecured channels, and contact us if you suspect that your information has been disclosed incorrectly.
Subject to the applicable legal conditions, you may ask whether your personal data is processed, request information about that processing and its purpose, learn the recipients in Türkiye or abroad, request correction of incomplete or inaccurate information, and request erasure or destruction when the grounds for processing no longer exist. You may also request that relevant recipients are informed of correction or erasure, object to an adverse result produced solely by automated analysis, and seek compensation for damage caused by unlawful processing.
Send an initial request to sales@haircenterofturkey.com with the subject “Personal data request”, or contact the Branch Office address above. State your name, the contact details used in your enquiry and what you are requesting. Do not attach a passport or medical file unless a necessary and proportionate verification step has been explained to you. Formal KVKK applications must use a method permitted by the applicable application rules; we can explain the process if an initial email does not meet those requirements.
Requests under the KVKK are addressed as soon as possible and within the applicable 30-day period. If a request cannot be fulfilled in full, the response should explain the reason and any available complaint route. You may contact the Turkish Personal Data Protection Authority (KVKK); other rights and supervisory-authority complaint routes may also apply where relevant data protection legislation, including the GDPR, applies to the activity.
The website is intended for adults seeking information. Please contact us before providing information about a child or another person so that authority, necessity and the appropriate process can be checked.
We may update this notice when the website, services or processing arrangements change. The date at the top identifies the current version. A change to this notice does not replace a new notice or separate consent where one is required. The current published version is in English; contact us if you need an explanation in another language.