Privacy Policy

Who is responsible for your data

Azrak Hair Clinic, Istanbul, Türkiye, is the data controller for personal data collected through this website under the Law on the Protection of Personal Data No. 6698 (KVKK, Turkish Personal Data Protection Law). You can reach us via Instagram (@azrak_hair).

What we collect

When you submit the consultation form, we collect:

• Your name, email address, phone number and the province or country you are in
• The procedure you selected and your pattern stage, based on your own assessment
• The timing you indicated and any notes you choose to write
• The page you submitted the form from and any campaign parameters in the address
• A one-way hash of your IP address, used only for abuse prevention and rate limiting

Health information

Anything you write in the notes field, and any photos you choose to send through other channels, may count as special category personal data (health data) under KVKK. You are never required to provide these to receive an assessment; send only as much as you are comfortable sharing.

Health information you send us is used only to assess your request and, if you proceed, to plan your care. It is not used for marketing, and under no circumstances is it sold or shared with advertisers.

Why we process it, and on what legal basis

We process your information to respond to your request, to provide the assessment you asked for and — if you become a patient — to deliver and document your care. The legal basis is your explicit consent for the request itself; our legitimate interest in operating and securing the website; and, for patient records, our legal obligations as a healthcare provider. For health data, your explicit consent is obtained in accordance with Article 6 of KVKK.

Where it is stored and who can see it

Inquiry data is stored in a hosted database and forwarded to the clinic by email. Our hosting and email providers process data on our behalf under contract and may store it in the European Union; transfers abroad are carried out within the framework of Article 9 of KVKK.

Within the clinic, access is limited to the clinical and coordination team handling your request. We do not sell personal data or share it with third parties for their own marketing.

How long we keep it

Inquiries that do not become a patient record are deleted within 24 months. Once you become a patient, clinical records are kept for as long as the applicable healthcare legislation requires.

Security

This website is served over an encrypted connection. Inquiry data submitted through the assessment form is transmitted over that encrypted connection and stored by our processors, with access limited to the clinical and administrative staff who need it to reply to you.

No transmission over the internet is perfectly secure, which is why this site asks you not to send full medical records, identity documents or payment details through a web form or messaging app. Anything of that kind is collected through a secure route once you are a patient.

Children

This website is not directed at children, and we do not knowingly collect information from anyone under 18. The assessment form asks you to confirm that you are at least 18 years old. If you believe a child has sent us information, contact us and it will be deleted.

Photos you send us

Photos are never required to receive a reply. If you choose to send them, they are processed as health data: stored with your request, used to prepare a reply and seen only by clinical staff.

Photos are never published anywhere without separate, specific, written consent for that publication. Consent to treatment is not consent to publication, and consent to publication can be withdrawn.

Changes to this policy

If this policy changes materially — a new processor, a new purpose, or the addition of any analytics or advertising technology — the date at the top of this page changes with it, and the change is explained here rather than made silently.

Your rights

Under Article 11 of KVKK, you can ask for a copy of the information we hold about you, ask for it to be corrected, or ask for it to be deleted where we are not legally required to keep it. You can withdraw your consent to being contacted at any time, and every marketing email includes an unsubscribe link.

To exercise these rights, write to us via Instagram (@azrak_hair). We reply within 30 days. If your application is not resolved, you retain the right to lodge a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

Depending on where you live, you may have additional rights under the EU/UK General Data Protection Regulation (GDPR). We honor those rights regardless of whether we are strictly legally required to.

Cookies and analytics

This website does not use its own advertising or tracking cookies. Session and local storage are used only to remember that you have already seen a pop-up or submitted the form, so that it is not shown to you again.