Privacy Notice (KVKK)

Last updated: 13 October 2026

This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) to inform you about the personal data processed through turkeyhairbank.com and our contact channels. This notice is not a declaration of consent and you do not need to confirm it.

1. Data controller

Turkey Hairbank, Karlıtepe Mahallesi, Çeşme Üstü Ara Sokak No: 2-6, Daire: 9, Gaziosmanpaşa / Istanbul, Turkey. Email: info@turkeyhairbank.com. Phone/WhatsApp: +90 537 688 02 12.

2. Personal data we process and how we collect it

1. Information request and contact forms: name, phone number, email address and your message; when a form is sent, your IP address and the date of submission. The data is collected automatically through the form on our website.
2. WhatsApp, phone and email: the name, phone number, email address and message content you share when you contact us through these channels. The data is collected when you send it.
3. Use of the website: technical data such as IP address, browser and device information and the pages visited. This data may be collected automatically through server logs and cookie-like technologies.

About health data: We do not request health data, photos or videos through the forms on our website. Please do not enter this kind of information in the forms. Health data is processed separately when the procedure stage is reached, under separate information and explicit consent texts prepared for that data, at the time it is collected.

3. Purposes of processing

1. To receive and answer your information request and to contact you.
2. To answer your questions about the hair transplant process.
3. To coordinate contact with the partner health facility for assessment and planning of the procedure, at your request.
4. To keep the website secure and working.
5. To meet our legal obligations and to protect our rights in any dispute.

4. Legal bases

• Receiving and answering your request and contact: KVKK Article 5(2)(c) (steps taken at your request that are directly related to forming a contract) and Article 5(2)(f) (legitimate interests).
• Website security and operation: KVKK Article 5(2)(f) (legitimate interests).
• Legal obligations: KVKK Article 5(2)(ç) (compliance with a legal obligation).
• Protection of our rights in disputes: KVKK Article 5(2)(e) (establishment, exercise or protection of a legal right).

5. Who we share your data with

We do not sell your data or share it with third parties for marketing. It may be passed to the following groups of recipients for the purposes stated:

• Partner health facility: to plan assessment and the procedure, at your request.
• Hosting and infrastructure providers: to run the website and forms.
• Email service providers (e.g. Google): to receive and answer requests.
• WhatsApp (Meta): for the messaging infrastructure when you contact us through WhatsApp.
• Competent authorities: when a legal obligation requires it.

6. Transfers abroad

The servers of some email and messaging providers may be located abroad. In that case your data is transferred in line with the KVKK provisions on transfers abroad.

7. Retention period

Information you share through forms and contact channels is kept for up to 1 year from the date of last contact. After that it is deleted, destroyed or anonymised. If a legal obligation or the protection of a right requires longer retention, it is kept only for as long as needed.

8. Your rights under Article 11 KVKK

1. Learn whether your personal data is processed,
2. Request information if it has been processed,
3. Learn the purpose of processing and whether it is used accordingly,
4. Know the third parties your data is transferred to, in Turkey or abroad,
5. Request correction of incomplete or inaccurate data,
6. Request deletion or destruction under the conditions set by law,
7. Request that correction, deletion and destruction are notified to the third parties your data was transferred to,
8. Object to a result against you arising from analysis of your data exclusively by automated systems,
9. Claim compensation if you suffer damage from unlawful processing.

9. How to apply

To exercise your rights, send your request in writing to info@turkeyhairbank.com or to the postal address above. We conclude requests within thirty days at the latest, depending on their nature. If you find our reply inadequate, you keep the right to complain to the Personal Data Protection Board. If you live in the European Economic Area, additional rights may apply under applicable data protection law.