On this page 10 sections
Last updated: September 4, 2026
This policy explains what we collect when you use this website or contact us, why, and what you can do about it. It is written to describe what actually happens rather than to cover every theoretical possibility.
Who we are
This site is operated by , Küçükbakkalköy, Dilek Sabancı Cd. No:4, 34750 Ataşehir/Istanbul, Turkey. Contact: info@afrohairclinicturkey.com.
What we collect
When you contact us
Through the contact form: your name, email address, subject and message. Through WhatsApp: your phone number, your messages, and anything you choose to send us.
Photographs of your hair and scalp
If you send photos for an assessment, those images — and what you tell us about your hair loss, medical history or medication — are health data. Under EU/UK data protection law this is a special category requiring your explicit consent, and we treat it that way. Sending us photos is your consent to us assessing them for that purpose. You can withdraw it at any time by asking us to delete them.
What we count, and what we do not
This site counts events, and we would rather tell you that here than have you find the request in your browser’s network tab. What gets recorded is a row of counts: which event happened — a page view, a scroll depth, a click on a WhatsApp button — the path of the page it happened on, what type of page that is, where on the page the control sat, whether the device was a phone, tablet or desktop, and the time.
What is not recorded: no IP address, no browser or device fingerprint, no cookie, no session or visitor identifier, no referrer, no query string, and nothing you type into any form — not a name, not a phone number, not a message, not a symptom. The hair pattern assessment runs entirely in your browser; we record that one was started or finished, never a single answer to it.
The cost of that is ours and it is real. With no identifier we cannot tell whether two events came from the same person. We can see that a pricing page was opened forty times and a WhatsApp button clicked six times, and we cannot join those together, build a funnel, or count unique visitors. That is enough to tell whether a change made the site better or worse, and not enough to build a picture of anybody. We think that trade is the right way round for a site whose visitors are researching a medical procedure.
A tracking script we did not add
Our hosting provider injects its own script into every page on this site — tccl.min.js, served from wsimg.com. We did not put it there, we do not control it, and it cannot be removed from inside WordPress. We are not able to tell you what it collects, because it is not ours; the host’s own terms govern it. Switching it off is a change at the hosting-account level and it is on our list. Until it is gone, this paragraph stays here, because saying we run no third-party scripts while that one loads would be false.
A review widget we did add
The home page shows the star rating left on our Google Business Profile, displayed by a company called Trustindex. Unlike the script above, this one is our decision, so it is ours to explain.
When you load the home page your browser fetches about 24 KB from cdn.trustindex.io (94 KB once your browser unpacks it), and the reviewer profile pictures from Google’s image servers. Those requests tell Trustindex and Google that a browser loaded that page. We do not receive anything about you from it, we cannot see who viewed it, and nothing you do with the widget is reported back to us.
This sits awkwardly beside the rest of the site and we would rather say so than have you notice. Videos on this site load nothing from YouTube until you press play, specifically so that reading a page sends no request to anyone. The review widget does not work that way. It was a deliberate choice, and if you would rather not load it, the ratings are on our Google profile where they are counted anyway.
What we do not run
No Google Analytics or any analytics of our own, first-party or third-party, beyond the event counting described above. No advertising pixels, no remarketing tags, no Meta pixel. Apart from the review widget and the host’s script named above, nothing else on this site is loaded from a third party. We are not building a profile of your browsing, we do not sell what we count, and we do not share it with advertisers. WordPress and our host may also write technical cookies needed for the site to work, and keep standard server logs including IP address, for security. If any of this changes, this page changes with it.
Why we use it, and on what basis
- To answer you and assess your case — your consent, and steps taken at your request before entering a contract.
- Health data specifically — your explicit consent, for the purpose of medical assessment and planning.
- Security and site integrity — our legitimate interest in keeping the site working and unattacked.
We do not sell your data. We do not share it with advertisers.
WhatsApp is the main way patients reach us, and it is operated by Meta, not by us. Anything you send through it is also handled under Meta’s own privacy terms and their infrastructure. If you would rather not use it, email works and so does the contact form.
Where your data goes
Our clinic is in Turkey, so if you contact us from the United States, the United Kingdom or the EU, your information is transferred to and processed in Turkey. Turkey is outside the UK/EEA and its data protection regime differs from GDPR. By contacting us you are sending your information there deliberately. If you want the safeguards applying to that transfer set out in writing before you send anything sensitive, ask and we will provide them.
How long we keep it
Enquiries that do not lead to treatment are kept only as long as needed to deal with them and are then deleted on request. If you become a patient, medical records are retained for the period Turkish healthcare law requires. Ask us and we will tell you what applies to your case.
Your rights
You can ask us to: show you what we hold about you; correct anything wrong; delete it; stop using it; or send it to you in a portable format. You can withdraw consent at any time, including for photographs already sent. Email info@afrohairclinicturkey.com and we will respond.
If you are in the EU or UK and think we have handled your data badly, you can complain to your national data protection authority. We would rather you told us first so we can fix it.
Publishing anything about you
We never publish your photographs, your words or your case on this site without separate written consent, given specifically for that purpose. Writing us a review or sending photos for assessment is not permission to publish them. Consent can be withdrawn later and we will take the material down.
Children
This site is not directed at anyone under 18 and we do not knowingly collect their data.
Changes
If this policy changes materially, the date at the top changes with it.