Privacy Policy

1. Purpose and Scope

This Privacy Policy explains for what purposes, through which methods, and on what legal grounds your personal data is processed by Best Hair Clinic ("Platform"); with whom and under what conditions your data is shared; and how you can exercise your rights and requests regarding your data.

2. Data Controller

In accordance with the applicable data protection laws, the data controller is Best Hair Clinic.
Contact: info@besthairclinic.com.tr — Address: Istanbul, Turkey.

3. Collected Personal Data

• Identity and Contact: Name/nickname, email address (via forms, reviews, forum posts).
• Transaction Security: IP address, browser information, session data, and server logs.
• Usage Data: Pages visited, click and interaction data, referring URLs.
• Cookie Data: Strictly necessary, performance, and preference cookies (for details, see our Cookie Policy).
• Content Data: Reviews, ratings, forum threads/content, and uploaded images/texts.

4. Purposes of Processing Personal Data

• Managing membership and participation processes (forums, reviews, ratings).
• Measuring and improving service quality and user experience.
• Ensuring security, debugging, and preventing fraud and abuse.
• Fulfilling legal obligations and responding to official requests.
• Conducting statistical analysis, reporting, and monitoring system performance.

5. Legal Grounds for Processing

Your personal data may be processed based on explicit consent, the establishment or performance of a contract, compliance with legal obligations, the necessity of legitimate interests, and cases explicitly stipulated by law.

6. Data Collection Methods

Data is collected electronically through automatic or non-automatic means via web forms, cookies, server logs, analytical tools, and user-provided content.

7. Cookies and Similar Technologies

8. Data Transfer and Recipients

• Service Providers: Hosting, security, and analytics providers.
• Official Authorities: Upon request as required by law.
• Legal Advisors: For the establishment, exercise, or defense of legal claims.

International data transfers are conducted in compliance with applicable data protection laws, and necessary administrative and technical measures are taken.

9. Data Retention Periods

Data is retained for the period required by the processing purposes and the minimum/maximum periods stipulated by relevant legislation. Once the period expires, data is securely deleted, destroyed, or anonymized.

10. Data Security

• Technical and administrative measures are implemented, including encryption, access limitation, and logging.
• Contractual security clauses are required when sharing data with third-party services.
• In the event of a suspected breach, relevant individuals and authorities are notified in accordance with the law.

11. Children's Data

The Platform does not knowingly process the data of individuals under the age of 18. If such a case is detected, data deletion processes are initiated immediately.

12. Your Data Subject Rights

• Learn whether your personal data is processed and request information.
• Learn the purpose of processing and the third parties to whom data is transferred.
• Request correction of incomplete or inaccurate data.
• Request deletion, destruction, or anonymization of your data (subject to legal conditions).
• Object to the results of processing and claim compensation for damages.

For further details regarding your rights, please review our Data Protection Notice.

13. Application Procedure

14. Policy Changes

This policy may be updated from time to time to reflect operational or legal changes. The updated version becomes effective as of the date of publication.

15. Contact Us

• General Inquiries: info@besthairclinic.com.tr
• Legal Department: hukuk@besthairclinic.com.tr
• Address: Istanbul, Turkey