Privacy Policy
Last updated:
This policy explains how your personal data is processed when you use our website or contact us, in line with the Turkish Personal Data Protection Law (KVKK) and the EU General Data Protection Regulation (GDPR).
Data controller
Your personal data is processed by Altınsoy Hair as data controller. Our contact details are at the end of this page.
Data we process
We only process data you send us or that is necessary to provide our services:
- Identity and contact: name, phone number and information you share via WhatsApp.
- Health data: your answers about hair loss and the photos you send for assessment.
- Technical: logs created while hosting the site (e.g. IP address, browser information).
Purposes and legal bases
We process your data to carry out a preliminary assessment, send you your personal plan, organise appointments and surgery, and meet our legal obligations.
Health data is processed only on the basis of your explicit consent (GDPR Art. 9(2)(a)). Communication and appointments rely on entering into and performing a contract and on our legitimate interests.
Transfers
When you send photos and messages via WhatsApp, this data may be processed on WhatsApp (Meta) infrastructure, including servers outside your country; this transfer is based on your consent. Where legally required, data may be shared with competent authorities and, limited to the purpose, with our hosting providers.
Online analysis form
Answers, contact details and photos sent through the analysis form are stored on our servers, with access limited to authorised medical staff, and are not shared with third parties. A record of your consent (date and time) is kept with your request.
Hairline simulator
Photos you load into the simulator never leave your device; they are processed in your browser and are not sent to our servers.
Retention
Data is kept for as long as the purpose requires and for the periods set by applicable law, after which it is deleted, destroyed or anonymised.
Your rights
You have the right to:
- Know whether your data is processed and request information
- Have inaccurate or incomplete data corrected
- Request erasure of your data
- Withdraw your consent at any time
- Lodge a complaint with a supervisory authority
Making a request
You can send requests regarding your rights through the contact channels below. We respond within 30 days at the latest.