This notice explains how Cyprus Hair Center handles personal data on this website. It is written to satisfy the personal data protection legislation of the Turkish Republic of Northern Cyprus and, for visitors in the United Kingdom and the European Union, the GDPR.
Who is responsible
Cyprus Hair Center is the data controller. Nazım Hikmet Cad. Aydemet Mah. Blok No:44, Kat:1, CYCLINICS — Omag Intense, Metehan, Lefkoşa, North Cyprus. You can reach us at info@cyprushaircenter.com or on +90 (533) 876 60 73.
What we collect, and only that
When you submit the consultation or contact form we receive the name, e-mail address and telephone number you type, plus the message if you write one, and the language of the page you sent it from. Nothing else is collected from the form.
To stop automated abuse, our server briefly keeps a one-way cryptographic hash of your IP address — not the address itself — for one hour, purely to count submissions. It is never linked to your message.
If you send us photographs for an assessment, those photographs and anything you tell us about your hair loss are health-related personal data and are treated with the additional care that category requires.
Why we hold it, and on what basis
We use your details for one purpose: to answer your enquiry and, if you ask for one, to prepare a medical assessment and quotation. We do not use them for anything else, we do not build marketing profiles, and we do not sell or rent them to anyone.
The legal basis is your consent, given by ticking the box on the form. For health-related information, including photographs, that consent is explicit consent to process special-category data. You may withdraw it at any time, and withdrawing it does not affect anything done before you did.
Where your form goes
Submissions are delivered as e-mail to our own mailbox on our own hosting. They are not written to any database or log file on the website. In practice this means your enquiry lives in our inbox and nowhere else on our systems.
Third parties that can see something
The website sets no advertising or analytics cookies until you allow it. Google Analytics, Google Ads and the Meta (Facebook and Instagram) Pixel run only after you press Accept on the cookie bar shown on your first visit; if you decline, or do not answer, none of them runs and no such cookie is set. Whatever you choose, these third parties are involved:
- Google Fonts serves the typefaces. Loading them sends your IP address to Google.
- Google Maps provides the map on our contact section. Opening a page containing it sends your IP address to Google and Google may set its own cookies in your browser. Those cookies are Google’s, not ours, and are governed by Google’s own privacy policy.
- YouTube hosts the clinic video. The page shows a still image and loads nothing from YouTube until you press play, so until then no request reaches Google and no YouTube cookie is set. Once you press play, YouTube’s own terms and privacy policy apply.
- Our hosting provider stores the site files and delivers the e-mail from the form.
What the trackers see, once allowed. Google Analytics tells us which pages are read, in which language and from which country, and whether a form was sent. Google Ads and the Meta Pixel let us measure whether our advertising brought you here and show our advertisements to people who have visited this site. They receive the page address and technical details of your browser, and they set their own cookies, governed by Google’s and Meta’s privacy policies. They never receive what you type into a form: not your name, e-mail address, telephone number, message or photographs.
Your choice is stored in your browser. You can change it at any time, and clearing this site’s data in your browser removes it as well.
The WhatsApp, Instagram and Facebook buttons are ordinary links. Nothing is shared with those companies unless you click, at which point their own terms apply.
What the site stores in your browser
One item, and it never leaves your device: a flag remembering that the WhatsApp chat card has already opened once, so it does not reopen on every page. It is cleared when you close the browser and is not readable by us.
How long we keep it
Enquiry correspondence is kept only as long as needed to answer you and, where treatment follows, for the period our medical record-keeping obligations require. Photographs sent for assessment are deleted on request at any time.
Patient photographs on this website
Before-and-after photographs published on this site are used with the written permission of the patients shown. If you are a patient and you want your photographs removed, write to us and we will take them down; you do not have to give a reason.
Your rights
You can ask us what we hold about you, to correct it, to delete it, to restrict what we do with it, or to receive a copy. You can withdraw consent at any time and object to processing. Write to info@cyprushaircenter.com and we will respond within thirty days. If you are not satisfied with our answer, you may complain to the data protection authority in your own country.
Changes
If this notice changes materially we will update the date below. Substantive changes are not applied retroactively to data already collected under an earlier version.
Last updated 2 September 2026.
