Data Protection and GDPR Rights

Last updated: 1 October 2026

This page explains how to exercise rights under the Kenya Data Protection Act 2019, South Africa’s Protection of Personal Information Act (POPIA) and, where applicable, the EU or UK GDPR. Read it with our Privacy Policy.

Your rights

• Be informed about collection and use.
• Request access to data held about you.
• Correct inaccurate or incomplete information.
• Request deletion where no lawful reason requires retention.
• Request restriction of processing.
• Object to certain uses and direct marketing.
• Withdraw consent for future consent-based processing.
• Request portable data where legally applicable.
• Ask for human review of a significant solely automated decision. We do not make final clinical decisions solely by automation.

Sensitive health information

Hair-loss history, health answers and identifiable photographs may be sensitive health data. We request an explicit, specific opt-in before upload and restrict clinical-review access.

Make a request

Email info@turkishhairexperts.com with the subject “Data Rights Request” and include your assessment or booking reference where available. Do not send new medical photographs in ordinary email unless securely requested. We may verify identity and will respond within the legally required period.

Complaints

Please contact us first so we can investigate. You may also complain to Kenya’s Office of the Data Protection Commissioner, South Africa’s Information Regulator, or the applicable authority where you live.