Privacy Policy

Last updated: 25 September 2026

This Privacy Policy explains how personal data is collected, used, shared and protected when you visit Top Hair Turkey, create an account, submit or manage a clinic listing, use our contact form or otherwise interact with tophairtransplantinturkey.com (the “Website”).

1. Who Is Responsible for Your Data?

The data controller responsible for the Website is:

[SITE OPERATOR LEGAL NAME]
[POSTAL ADDRESS]
[COUNTRY OF ESTABLISHMENT]
Email: [PRIVACY EMAIL]

These details must be completed with the actual person or legal entity that determines why and how personal data is processed before this policy is published.

2. Personal Data We Collect

Information You Provide

Depending on how you use the Website, you may provide:

  • Your name, email address and message when using the contact form;
  • Your enquiry type, such as a correction, clinic listing or privacy request;
  • Account information, including username, email address and login credentials;
  • Clinic listing information, contact details, profile content and supporting material;
  • Communications and records connected with a correction, complaint or support request.

Please do not submit medical records, scalp photographs, passport copies, payment-card information or other sensitive health or identity information through our general contact form.

Information Collected Automatically

When you access the Website, our systems and service providers may process technical information such as:

  • IP address;
  • Browser type, device type and operating system;
  • Date and time of access;
  • Pages requested, referring page and links followed;
  • Language and general location derived from technical data;
  • Security events, error logs and diagnostic information;
  • Cookie identifiers and consent choices, where applicable.

Information From Third Parties or Public Sources

For clinic profiles, we may receive information from a clinic representative or obtain professional and business information from clinic websites, public registers and other publicly available sources. A clinic should not submit personal data about staff members unless it is authorised and lawful to do so.

3. How We Use Personal Data

We may use personal data to:

  • Operate, secure and maintain the Website;
  • Respond to messages and support requests;
  • Review corrections and resolve disputes about published information;
  • Create and administer user accounts;
  • Accept, review, publish and manage clinic listings;
  • Prevent spam, fraud, abuse and unauthorised access;
  • Measure Website performance and understand how content is used;
  • Maintain referral attribution where applicable;
  • Comply with legal obligations and establish, exercise or defend legal claims;
  • Improve our content, directory and user experience.

4. Legal Bases for Processing

Where the GDPR, UK GDPR or similar law applies, we rely on one or more of the following legal bases:

  • Contract or steps requested before a contract: for account administration or services requested by a clinic representative;
  • Legitimate interests: to answer enquiries, operate and secure the Website, prevent abuse, maintain accurate content and improve our services, provided those interests are not overridden by your rights;
  • Consent: where required for non-essential cookies, optional marketing communications or another clearly identified purpose;
  • Legal obligation: where processing is necessary to comply with applicable law;
  • Legal claims: where necessary to establish, exercise or defend a claim.

Where Turkish data-protection law applies, personal data is processed on an applicable legal ground and with the transparency required by Law No. 6698 on the Protection of Personal Data (KVKK).

5. Contact Forms and Email

When you contact us, we use the information you submit to review and respond to your request, keep appropriate correspondence records and protect the Website from misuse.

Our general contact form is not intended for medical consultations. We do not automatically forward general Website enquiries to a clinic unless you have specifically requested that action and we have an appropriate basis to do so.

6. Accounts and Clinic Listings

Clinic representatives may be required to create an account to submit, claim or edit a listing. We process account and activity data to authenticate users, provide dashboard functions, record significant changes and protect listings from unauthorised editing.

Some information submitted for a clinic profile is intended to be public, including business contact details, services, languages and professional team information. Do not submit private contact details or personal data that should not be displayed publicly.

7. Cookies and Similar Technologies

The Website may use cookies and similar technologies for the following purposes:

  • Strictly necessary: security, login, session management, load balancing and recording privacy choices;
  • Preferences: remembering settings such as language or display choices;
  • Analytics: understanding traffic, page performance and general usage patterns;
  • Advertising or referral measurement: measuring campaigns or attributing a referral where enabled.

Where consent is legally required, non-essential cookies and similar technologies will not be activated until you make a choice through our consent tool. You can withdraw or change your choice using the cookie settings available on the Website. Blocking some cookies may affect certain functions.

The exact cookies and retention periods should be shown in the cookie consent tool or cookie details presented on the Website.

8. Analytics, Embedded Content and External Links

We may use analytics services to understand Website use. When enabled, these services may process information about your device, approximate location, referral source and interactions, subject to our consent configuration and the provider’s terms.

Pages may contain embedded maps, videos or other third-party content. These providers may collect data or set cookies when content is loaded. Where required, such content should remain blocked until the appropriate consent is given.

The Website also links to clinic and third-party websites. Their privacy practices are governed by their own policies, not this Privacy Policy.

9. Affiliate and Referral Information

Some outbound links may contain a referral identifier. A clinic or partner may use that identifier to recognise that an enquiry originated from Top Hair Turkey. We may receive a commission or referral fee as described in our Affiliate Disclosure.

Referral tracking does not authorise a clinic to receive information submitted to our general contact form unless this is separately explained and requested.

10. Who We Share Personal Data With

We may share limited personal data with service providers that help us operate the Website, such as:

  • Website hosting, database and content-delivery providers;
  • Security, backup and spam-prevention providers;
  • Email and form-delivery providers;
  • Analytics and consent-management providers;
  • Professional advisers where reasonably necessary;
  • Public authorities or other parties where disclosure is legally required.

Service providers should receive only the information reasonably necessary for their role and process it subject to appropriate contractual or legal safeguards.

We do not sell personal data in the ordinary meaning of selling a customer database for money. Certain advertising or tracking practices may be treated as a “sale” or “sharing” under some laws; where applicable, we will provide the notices and choices required by those laws.

11. International Transfers

Some service providers may process data in countries other than the country where you live. Where required, we use an appropriate transfer mechanism or rely on another lawful safeguard, such as an adequacy decision or approved contractual clauses.

12. How Long We Keep Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute-resolution requirements.

Unless a longer period is justified:

  • General contact correspondence may be retained for up to 24 months after the enquiry is closed;
  • Account data may be retained while the account is active and for up to 24 months after closure, subject to security and legal needs;
  • Clinic submission and correction records may be retained while the relevant listing is published and for a reasonable period afterwards;
  • Routine security and server logs are generally retained for a shorter operational period, which may vary according to risk and hosting configuration;
  • Cookie and analytics retention depends on the relevant tool and the choices shown in our consent settings.

Data may be deleted earlier when it is no longer needed or retained longer where required by law, necessary for security or relevant to a dispute.

13. Data Security

We use reasonable technical and organisational measures intended to protect personal data from unauthorised access, alteration, disclosure or loss. No internet transmission or storage system is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping your account password confidential and for notifying us if you suspect unauthorised use of your account.

14. Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

  • Request access to personal data we hold about you;
  • Request correction of inaccurate or incomplete data;
  • Request deletion of data in certain circumstances;
  • Restrict or object to certain processing;
  • Receive certain data in a portable format;
  • Withdraw consent at any time where processing relies on consent;
  • Complain to an appropriate data-protection authority.

These rights are not absolute and may be subject to legal conditions and exceptions. To make a request, email [PRIVACY EMAIL]. We may need to verify your identity before acting on a request.

15. Children’s Privacy

The Website is intended for adults researching elective medical treatment and related services. It is not directed to children, and we do not knowingly seek to collect personal data from children through the general contact form.

16. Changes to This Policy

We may update this Privacy Policy to reflect changes in the Website, service providers, legal requirements or our processing practices. The “Last updated” date at the top of the page will identify the current version. Material changes may also be highlighted where appropriate.

17. Contact Us

For privacy questions or requests, contact:

[SITE OPERATOR LEGAL NAME]
Email: [PRIVACY EMAIL]
Address: [POSTAL ADDRESS]