Last updated: 20 May 2026
This Privacy Policy explains how Alpha Clinic Turkey collects, uses, stores, and protects the personal information you share with us when you enquire about a hair transplant, prepare for treatment, or use this website. Hair restoration is a medical service, so much of what you tell us is health information — we treat it with the confidentiality that demands.
We have written this policy to be read, not skimmed. If anything is unclear, contact us at [email protected] and we will explain it plainly.
Who we are
Alpha Clinic Turkey is a hair restoration practice operating from a hospital in Şişli, Istanbul, Turkey. For the purposes of data protection law, the clinic is the data controller for the information described in this policy.
- Registered legal entity and address: [legal entity name and registered address to be confirmed by the clinic before publication]
- Contact for privacy matters: [email protected]
Because we treat patients from across the world, we apply both the Turkish Personal Data Protection Law (KVKK — Law No. 6698) and, where it applies to you, the EU/UK General Data Protection Regulation (GDPR).
What information we collect
We only collect what we need to answer your questions, plan your treatment, and care for you afterwards.
- Contact details — your name, email address, phone number, country of residence, and preferred language.
- Medical information you choose to share — photographs of your scalp, hairline, or donor area; your hair-loss history; relevant health conditions, allergies, and medication. This is special-category (health) data and receives the strongest protection under this policy.
- Communication records — the messages you send us through WhatsApp, the enquiry form, or email, and our replies.
- Technical data — when you visit this website we may collect your IP address, browser and device type, approximate location, and the pages you view, through cookies and similar technologies (see Cookies and analytics below).
You decide how much medical detail to send and when. We never require you to disclose health information through an unsecured channel.
How we use your information
We use your information to:
- respond to your enquiry and answer your questions;
- assess your suitability for treatment and prepare a personalised treatment plan and quote;
- coordinate your travel, accommodation, surgery, and aftercare;
- send the follow-up messages and recovery guidance you have asked for;
- keep the medical records we are legally required to maintain;
- and understand how this website is used so we can improve it.
We do not use your medical photographs or health information for marketing, and we will never publish a patient case without that patient’s separate, explicit, written consent.
Legal bases for processing
Under the GDPR (Articles 6 and 9) and the KVKK (Articles 5 and 6), we rely on:
- Your consent — for processing your health data and for sending you any marketing communication. You can withdraw consent at any time.
- Steps taken at your request before entering a contract — preparing a treatment plan and quote.
- Performance of a contract — delivering and coordinating the treatment you have booked.
- Legal obligation — retaining medical records as required by Turkish healthcare law.
- Legitimate interests — running and securing this website, provided your rights do not override those interests.
Special-category (health) data
Photographs of your scalp and any details about your health are special-category data. We process them only on the basis of your explicit consent and only to assess, plan, and deliver your treatment. Access is limited to the medical and coordination team directly involved in your care.
Please share health information and photographs only when you are comfortable doing so. If you would prefer a more secure channel than a messaging app, tell us and we will arrange one.
Who we share your information with
We do not sell your data and we never share it for advertising. We share it only with:
- The treating medical team and the hospital delivering your procedure.
- Service providers who help us operate — for example our website hosting and content-delivery provider, and the messaging platform (WhatsApp, operated by Meta) you use to contact us. These providers act on our instructions.
- Travel and accommodation partners, where it is necessary to arrange your trip and only with the details required.
- Authorities or regulators, where we are legally obliged to disclose information.
International data transfers
The clinic operates in Turkey, so if you contact us from another country your information will be transferred to and processed in Turkey. Some of our service providers — including the messaging platform, website hosting, and analytics — may process data in other countries, including outside the European Economic Area.
Where data leaves your country, we rely on appropriate safeguards, such as an adequacy decision or standard contractual clauses, so that your information remains protected to a comparable standard.
How long we keep your information
- Enquiries that do not lead to treatment are kept only as long as needed to answer you, then deleted.
- Medical records are retained for the minimum period required by Turkish healthcare regulations.
- Marketing consent records are kept until you withdraw consent.
When information is no longer needed, we securely delete or anonymise it.
How we protect your information
Your records are handled within a hospital environment subject to medical confidentiality and access controls, so that only staff involved in your care can see your health information. Communications and stored data are protected with technical and organisational measures appropriate to their sensitivity.
No method of transmission over the internet is completely secure. For that reason we ask you not to send sensitive health information through unsecured channels unless you have chosen to do so knowingly.
Your rights
Depending on where you live, you have the right to:
- access the personal information we hold about you;
- ask us to correct inaccurate information;
- ask us to erase your information;
- restrict or object to how we use it;
- request a portable copy of information you provided;
- withdraw consent at any time, without affecting processing carried out before withdrawal;
- and lodge a complaint with a data protection authority.
To exercise any of these rights, email [email protected]. If you are not satisfied with our response, you may complain to your local data protection authority or, in Turkey, to the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).
Cookies and analytics
This website uses cookies and similar technologies for two purposes:
- Essential cookies that are required for the site to function and cannot be switched off.
- Analytics cookies that help us understand how visitors use the site — which pages are read and where people arrive from — so we can improve it. These are used only in aggregate and are not used to identify you personally.
Embedded third-party services, such as the WhatsApp chat, may set their own cookies when you interact with them, governed by that provider’s own privacy policy.
You can block or delete cookies through your browser settings. Disabling essential cookies may stop parts of the site from working.
Children’s privacy
Our services are intended for adults. This website is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with information, contact us and we will delete it.
Changes to this policy
We may update this policy as our practices, services, or legal obligations change. When we do, we will revise the “Last updated” date at the top of this page. Significant changes will be communicated to you directly where appropriate.
Contact us
For any question about this policy, or to exercise your privacy rights, reach us at:
- Email: [email protected]
- Phone / WhatsApp: +90 543 257 4202
- Location: Şişli, Istanbul, Turkey
We aim to respond to every privacy request promptly and within the timeframes required by applicable law.