en
TR 
SK 
ITA 
FR 
DE 
ES 
BG Privacy Policy
- Last updated: 21 August 2026
- Scope: This policy covers the personal data of website visitors, prospective patients and patients, contact-form users, and recipients of commercial communications.
1) Data controller and website operator
Healthcare provider — controller of patient and health data
Company name: Hoi Sağlık Hizmetleri Turizm İnşaat Sanayi ve Ticaret A.Ş
Health institution licence: Certificate of Compliance (Uygunluk Belgesi) No. 08/09/2010-37, Istanbul Provincial Health Directorate
Address: Ataköy 2–5–6. Kısım Mah. Rauf Orbay Cad. No:4 Yalı Ataköy C Blok Daire: 36, Bakırköy / İstanbul, Türkiye
MERSİS / company no.: 0463093931200001
Email: info@hairofistanbul.com · KEP: hoiturizm@hs01.kep.tr
Phone: +90 532 650 51 51
Website operator
Company name: Hair of Istanbul Tourism L.L.C
Licence no.: 1142311, Dubai Department of Economy and Tourism
Commercial register no.: 2172769
Legal form: Limited Liability Company (L.L.C), Dubai, United Arab Emirates
The Dubai office provides consultation and follow-up only. All surgical procedures are performed at the Istanbul clinic.
At Hair of Istanbul we value your privacy. This Privacy Policy explains what personal data we collect when you use our website, for which purposes and on which legal bases we process it, with whom we may share it, how long we retain it, and what rights you have.
2) Categories of data we collect
- Identity: name, surname, year or date of birth, country.
- Contact: email address, telephone and WhatsApp number, postal address.
- Transaction security: IP address, session details, server logs, device and browser information.
- Marketing and profile: preferences and interests derived from cookies and pixels.
- Health data: hair-loss status, suitability for a procedure, photographs — processed only with your explicit consent.
- Visual and audio: photographs, video, call recordings.
3) Purposes of processing and legal bases
| Purpose | Example activities | Legal basis (KVKK) |
|---|---|---|
| Enquiry and appointment management | Contact forms, WhatsApp and email correspondence | Art. 5/2-c, 5/2-f |
| Treatment planning and delivery | Medical assessment, procedure records, aftercare | Art. 6/3 (by authorised health professionals) |
| Billing and financial records | Invoicing, payment, statutory bookkeeping | Art. 5/2-a, 5/2-ç |
| Analytics and retargeting | Cookies, pixels, campaign reporting | Art. 5/1 (explicit consent) |
| Publishing before/after visuals | Website and social media publication | Art. 5/1 and 6/2 (explicit consent) |
Note: Health data is never processed for marketing purposes. It is used only with explicit consent, and in anonymised form where publication is involved.
4) How we collect data
- Website forms, email, telephone, WhatsApp and live chat.
- Cookies, pixels and analytics tools (subject to your cookie choices).
- Documents you provide during your clinic application, in physical or electronic form.
5) Disclosures and transfers
- Service providers: hosting, CRM, call centre, marketing, analytics and security suppliers, under written data-processing terms.
- Group companies: HOI Holding and its affiliates, including Hair of Istanbul Tourism L.L.C as the website operator.
- Authorities: where disclosure is required by law.
- International transfers: under Art. 9 KVKK, to countries with adequate protection, on the basis of a standard contract, or with your explicit consent.
6) How long we keep data
- Contracts and financial records: up to 10 years.
- Medical records: for the period required by health legislation.
- Marketing data: until you withdraw consent.
- Server and security logs: for a reasonable period proportionate to the security purpose.
At the end of the retention period, data is deleted, destroyed or anonymised.
7) Your rights
Under Article 11 of Law No. 6698 you have the right:
- to learn whether your personal data is being processed;
- to request information about the processing;
- to learn to whom your data has been disclosed, in Türkiye or abroad;
- to request correction, deletion or destruction of your data;
- to object to a result produced solely by automated analysis;
- to claim compensation for damage caused by unlawful processing.
To exercise these rights, use the application channels set out in the KVKK Information Notice.
8) Third-party links
Our website contains links to external sites. We are not responsible for the content or privacy practices of those sites; please read their own privacy notices.
9) Security
We protect your data with technical and administrative measures, including transport encryption, access control on a need-to-know basis, logging, and regular staff training on confidentiality and data protection.
10) Children
Our services are directed at adults. We do not knowingly collect personal data from anyone under 18 through this website. Where a treatment enquiry concerns a minor, it is handled through the parent or legal guardian.
11) Changes to this policy
We may update this Privacy Policy. The version published here, with the date shown at the top, is the version in force.
12) Contact
For privacy questions: info@hairofistanbul.com · KEP: hoiturizm@hs01.kep.tr · +90 532 650 51 51.
