Data Protection and GDPR Rights

Last updated: 6 September 2026

This page explains how to exercise rights under the Kenya Data Protection Act 2019 and, where applicable, the EU or UK GDPR. Read it with our Privacy Policy.

Your rights

• Be informed about collection and use.
• Request access to data held about you.
• Correct inaccurate or incomplete information.
• Request deletion where no lawful reason requires retention.
• Request restriction of processing.
• Object to certain uses and direct marketing.
• Withdraw consent for future consent-based processing.
• Request portable data where legally applicable.
• Ask for human review of a significant solely automated decision. We do not make final clinical decisions solely by automation.

Sensitive health information

Hair-loss history, health answers and identifiable photographs may be sensitive health data. We request an explicit, specific opt-in before upload and restrict clinical-review access.

Make a request

Email info@turkishhairexperts.com with the subject “Data Rights Request” and include your assessment or booking reference where available. Do not send new medical photographs in ordinary email unless securely requested. We may verify identity and will respond within the legally required period.

Complaints

Please contact us first so we can investigate. You may also complain to Kenya’s Office of the Data Protection Commissioner or the applicable authority where you live.