Privacy Policy
Last update: August 30, 2026
This policy nanohairturkey.com It explains how the personal data you share through is processed. When you fill out the forms on the site, you will find here what information we receive, where it is kept, when it is deleted and what rights you have over your data.
1. Data controller
The data controller is NanoHair. Our clinics Barbaros Mah. Mor Sümbül Sokak No:12, Ataşehir, İstanbul and Şenlikköy Mah. It is located at Florya Caddesi No:42, Florya / Bakırköy, Istanbul. On all matters related to data processing info@nanohairturkey.com You can contact us at.
2. What data do we collect
We only collect information that you enter into the forms yourself. No secret profiling or tracking is done on the site.
| Data | Where does it come from | Is it mandatory? |
|---|---|---|
| Name and surname, phone, e-mail | Analysis and appointment forms | Yes |
| Your preferred branch | Analysis form | Yes |
| Your degree of hair loss, the package you are interested in, your message | Analysis form and interactive calculator | No |
| Photos of your hair condition (maximum 5) | Loading field in the analysis form | No |
| Page language and the section where the form comes from | Automatic | - |
| Which campaign link you came to the site with (UTM information) | Parameters in the connection address | - |
Photos are special quality health data. Uploading is completely optional and is processed only with your express consent. You can send the form and request a preliminary evaluation without uploading a photo. Your photos for advertising, promotions, social media or website images under no circumstances not used; It is transmitted only so that the physician can make a preliminary evaluation.
3. For what purposes do we process data?
- To respond to your request and send you the preliminary evaluation result
- Our physicians can make a preliminary examination based on photographs
- Scheduling an appointment and sharing necessary preparation information
- Confirming that your application has been received by us by e-mail
- Preventing automatic bot traffic in form submissions
This data automatic decision making or profiling It is not used for. The analytics calculator on the site is an estimator that runs in your browser; The result is not a medical diagnosis and the evaluation provided to you is always made by a physician.
4. Where is your data kept
The site and form infrastructure runs on Cloudflare and the data is processed on servers outside Türkiye. The service providers we use are:
| service provider | Why | What data does it access? |
|---|---|---|
| cloudflare | Hosting, database, photo storage, bot protection | Form data, photos, IP address |
| Resend | Sending notification and confirmation e-mails | Name, phone, email, form content, photo attachments |
| cal.com | appointment calendar | The name and email you entered for the appointment |
| Google Fonts, jsDelivr, flagcdn | Font, phone field and flag images | IP address only (tech request record) |
Cloudflare Turnstile is used for bot protection; During this check, your IP address is transmitted to Cloudflare. Turnstile does not track visitors across sites.
5. How long do we keep it?
- Photos: It is written to a private access storage, read once to be attached to an email to the clinic, and as soon as the email is delivered deleted instantly. In cases where delivery fails, automatic cleaning will perform the deletion within 7 days at the latest.
- Form information: It is stored for 180 days to track your application. After this period, your name, phone number, e-mail and form content will be automatically anonymised; What remains is a record that cannot be linked to your identity.
- Campaign sessions: It does not contain any personally identifiable information and is deleted 7 days after completion or expiration.
If you start treatment at the clinic, your patient file will be stored separately in the clinic records for the periods stipulated by the health legislation. This policy only covers data collected through the website.
6. Cookies
The site uses a small number of cookies that are necessary for it to work:
- Preference record that remembers when you turn off cookie notification
- Signed, browser-unreadable (HttpOnly) session cookie that stores the status of the campaign offer
- Cloudflare Turnstile cookies for bot protection to work
Measurement and advertising cookies is off by default and it only works if you consent (Google Consent Mode v2). You can change your consent at any time via the cookie notification.
7. Your rights
Under Article 11 of the KVKK and Articles 15–22 of the GDPR, you have the following rights:
- Find out whether your data is being processed and request a copy
- Request correction of incorrect or incomplete data
- Request deletion or destruction of your data
- Withdrawing your express consent at any time
- Object to processing and request restriction of processing
- Move your data in a structured format
- Making a complaint to the supervisory authority
your request info@nanohairturkey.com When you send your message to , we will respond free of charge within 30 days at the latest. If you want your photos to be deleted before their due date, simply request it from the same address.
8. Security
Site and form traffic is encrypted end-to-end with TLS. Photos are kept in a non-public repository, accessible only by the server, and are not shared via direct link. Form submissions are protected by rate limiting and bot verification.
9. Changes
When we make changes to this policy, we will update the update date at the top of the page. In case of a comprehensive change, we will also inform you in the application forms.