Privacy Policy
Last updated: 6 September 2026
Turkish Hair Experts respects every client’s confidentiality. This notice explains how we collect, use, protect and share personal data through our website, assessments, bookings and communications.
1. Who controls your information
Turkish Hair Experts is responsible for personal data collected through this website and its Nairobi and Kampala service operations. Privacy enquiries may be sent to info@turkishhairexperts.com or +254 747 163 321.
2. Information we collect
We may collect identity and contact details; clinic and consultation preferences; hair-loss history and relevant health, medication, smoking, alcohol or substance information; scalp, face, beard, eyebrow and donor-area photographs; communications, consent records and security logs.
3. Why we use it
We use information to respond, review suitability, arrange consultations, provide requested services, communicate instructions and follow-up, maintain secure records, prevent abuse, comply with law and improve service. We do not make a final diagnosis or treatment decision solely by automation.
4. Lawful basis and sensitive data
Processing may be needed to take requested pre-service steps, deliver services, meet legal obligations or support legitimate operational and security interests. Because photographs and health history may reveal sensitive health data, we request separate explicit consent before upload and specialist review. Consent can be withdrawn for future processing, but this may prevent completion of the assessment.
5. Who receives information
Access is limited to authorised coordinators, reviewers and clinical personnel. Carefully selected hosting, email, security, booking and communication providers may process limited data under appropriate duties. If you choose WhatsApp, Google or a social platform, that provider applies its own privacy terms. We do not sell personal data.
6. International transfers
Our clinics, specialists or providers may operate in different countries. We apply legally required safeguards and limit access to the stated purpose.
7. Retention
We keep data only as long as reasonably needed. Inactive online-assessment photographs are scheduled for review and secure deletion after 12 months unless earlier deletion is requested or they become part of continuing clinical care. Booking enquiries are normally reviewed for deletion after 24 months. Clinical records may require longer statutory retention. Backups expire through controlled rotation.
8. Security
We use access controls, private storage, limited permissions, secure transport and operational safeguards. No internet system is risk-free; contact us immediately if you suspect exposure.
9. Your rights
Subject to applicable law, you may ask to access, correct, erase, restrict or receive data, object to certain processing, withdraw consent, and complain to the relevant authority, including Kenya’s Office of the Data Protection Commissioner. Identity verification may be required.
10. Children and updates
Online assessments are for adults aged 18 or above. Material changes will be published with a revised date and fresh consent requested where required.