Privacy Policy

[LEGAL TEXT REQUIRED] — Legal entity name, trade registry number, registered address and the identity of the data controller.

[LEGAL TEXT REQUIRED] — Enumerate every field the assessment form gathers (name, email, phone, country, hair loss stage, areas of concern, free-text message) and, separately, the uploaded photographs. Photographs of an identifiable person processed for a medical assessment are special-category health data under GDPR Art. 9 and KVKK Art. 6 — the lawful basis must be stated explicitly.

[LEGAL TEXT REQUIRED] — Purpose and lawful basis for each category. Explicit consent is the basis relied on by the form; marketing consent is collected separately and is not pre-ticked.

[LEGAL TEXT REQUIRED] — Named internal roles, and every third party the data reaches: hosting provider, CRM, email delivery, and WhatsApp (Meta) when the patient chooses that channel.

[LEGAL TEXT REQUIRED] — WhatsApp routes messages through Meta infrastructure outside Türkiye. The transfer mechanism and safeguards must be described.

[LEGAL TEXT REQUIRED] — Retention period for enquiries that do not become patients, and for medical records once treatment begins — the latter is set by Ministry of Health regulation.

[LEGAL TEXT REQUIRED] — Confirm that patient photographs are stored privately, are never published or used in marketing without separate written consent, and are not served from a public URL.

[LEGAL TEXT REQUIRED] — Access, rectification, erasure, restriction, objection and portability — with the contact route and statutory response deadline for each.

[LEGAL TEXT REQUIRED] — Every cookie and tracking script the site sets, its purpose and its lifetime.

[LEGAL TEXT REQUIRED] — Email address and postal address for data protection enquiries, plus the supervisory authority a complaint can be raised with (KVKK in Türkiye).