SaçUzmanı

Privacy Policy

Last updated: June 17, 2026  |  Effective date: June 17, 2026

This Privacy Policy explains how SaçUzmanı.com ("Platform", "we", "us", "our") collects, processes, stores, and protects personal data of visitors, clinic owners, and other users ("you"). We are committed to complying with all applicable data protection laws, including Turkey's Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for your personal data is the operator of SaçUzmanı.com.

2. Personal Data We Collect

Depending on how you use our Platform, we may process the following personal data:

2.1 Account and Registration Data

  • Full name and business name
  • Email address
  • Phone number
  • Address and city
  • Encrypted password

2.2 Contact Form Data

  • Full name
  • Email address
  • Phone number (optional)
  • Message content

2.3 Usage and Technical Data

  • IP address (anonymised)
  • Browser type and version
  • Operating system
  • Pages visited and navigation path
  • Time spent on pages
  • Referring URL

2.4 Cookie Data

Data collected via cookies is described in detail in Section 7.

3. Purposes and Legal Bases for Processing

Purpose Legal Basis
Account creation and management Performance of a contract
Provision of Platform services Performance of a contract
Customer support Legitimate interest / contract performance
Security and fraud prevention Legitimate interest / legal obligation
Compliance with legal obligations Legal obligation
Platform improvement and analytics Legitimate interest
Marketing communications Explicit consent

4. Data Retention

We retain personal data only for as long as necessary for the stated purposes and as required by law:

Data Category Retention Period
Account and registration data Duration of account + 3 years after deletion
Contact form data 2 years from last interaction
Invoices and commercial records 10 years (Turkish Commercial Code)
Technical log records 2 years (Law No. 5651)
Cookie data Varies by cookie type (see Section 7)

Data that has exceeded its retention period is securely deleted, destroyed, or anonymised.

5. Sharing of Personal Data

5.1 Third-Party Sharing

We do not share your personal data with third parties except in the following circumstances:

  • Service providers: Hosting, email delivery, analytics, and payment infrastructure providers who process data strictly on our behalf and are bound by confidentiality obligations.
  • Legal requirements: When required by court order, prosecutorial demand, or applicable law.
  • With your explicit consent: Any sharing beyond the above requires your prior consent.

5.2 No Sale of Data

Your personal data is never sold, rented, or commercially transferred to third parties under any circumstances.

6. International Data Transfers

We may use global infrastructure services (cloud hosting, CDN, analytics tools) whose servers are located outside Turkey. International transfers are carried out only where at least one of the following safeguards is in place:

  • Transfer to a country recognised as providing adequate protection under KVKK Article 9
  • Binding commitments between data controllers ensuring adequate protection
  • Your explicit consent

7. Cookies and Tracking Technologies

Our Platform uses the following categories of cookies:

Strictly Necessary Cookies

Required for core platform functionality (session management, security tokens). These cannot be disabled and do not require consent.

Preference Cookies

Remember your language selection and interface preferences. Retention: 1 year.

Analytics Cookies

Used to understand page usage patterns and improve the Platform. Data is anonymised. Retention: 26 months.

Managing Your Cookie Preferences

You may disable non-essential cookies at any time via your browser settings or the cookie preference panel displayed on your first visit. Some features may function in a limited capacity if certain cookies are disabled.

8. Data Security

We implement technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

  • All data in transit is protected by HTTPS/TLS encryption
  • Passwords are stored using industry-standard one-way hashing (bcrypt); plain-text passwords are never retained
  • Database access is controlled through role-based authorisation
  • Security patches are applied on a regular schedule
  • In the event of a data breach, we will notify the Personal Data Protection Authority within 72 hours as required by KVKK Article 12, and will promptly inform affected individuals

9. Your Rights

You have the following rights regarding your personal data:

  • Right to information: Learn whether your personal data is being processed
  • Right of access: Request information about the data we hold about you
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion or destruction of data where there is no legal obligation to retain it
  • Right to object: Object to processing based on legitimate interests
  • Right to restriction: Request that processing be restricted under certain conditions
  • Right to data portability: Receive your data in a structured, machine-readable format
  • Right to contest automated decisions: Challenge decisions made solely through automated processing
  • Right to compensation: Claim damages resulting from unlawful processing of your personal data

10. How to Exercise Your Rights

To exercise any of the above rights, please contact us through:

Please include your full name, contact details, and a clear description of your request. Upon verifying your identity, we will respond within 30 days. If the nature of your request requires more time, we will notify you with the reason for the extension.

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Authority (KVKK) at www.kvkk.gov.tr.

11. Children's Privacy

Our Platform is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please notify us at info@sacuzmani.com and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be announced on our homepage and/or notified to your registered email address. The current version is always available at this page. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

13. Contact Us