Privacy Policy
This policy explains how Clinic Elia collects, uses and protects your personal data, including special-category health data, in line with the EU General Data Protection Regulation (GDPR) and UK GDPR.
Data controller
Clinic Elia, Istanbul, Türkiye, is the controller of the personal data described in this policy. For any question about this policy, about how your data is handled, or to exercise any of the rights below, write to [email protected] and we will respond.
What data we collect
- Identity and contact details (name, email, phone/WhatsApp, country).
- Health information you choose to share (e.g. photos of your scalp, medical history) so we can assess suitability. This is “special-category” data.
- Messages you send us and technical data (e.g. cookies — see below).
Why and on what legal basis
- To respond to your enquiry and assess suitability — your explicit consent (GDPR Art. 9(2)(a)) for health data, and legitimate interests / steps prior to a contract for contact data.
- To provide care if you proceed — provision of healthcare (Art. 9(2)(h)) under our medical team.
- To improve our website — analytics cookies, only with your consent.
Sharing and processors
We share data only as needed with our clinical team and service providers (e.g. messaging via WhatsApp, hosting, email, and website analytics). We do not sell your data.
International transfers
As we are based in Türkiye and may serve patients in the EU/UK, your data may be processed outside the EEA/UK. We apply appropriate safeguards for such transfers.
Retention
We keep personal data only as long as necessary for the purposes above and any legal/medical record obligations.
Your rights
You have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise these rights, contact [email protected]. You may also complain to your local data protection authority — in the United Kingdom, the Information Commissioner’s Office (ICO).
Cookies and analytics
We use essential cookies to run the site. With your consent, we also use Google Analytics 4 to understand how the site is used — for example which pages people read and whether they go on to contact us. You can manage or withdraw your consent at any time through our cookie banner.
Until you accept analytics cookies, no analytics cookie is written and no identifier is stored on your device. We never send analytics any information you type into our forms, and we never send your treatment interest or any health information to analytics.
Google Analytics is provided by Google Ireland Limited, which may process data outside the EEA/UK under the safeguards described above. Google’s own privacy information is at policies.google.com/privacy.
Last updated: 29 October 2026