Contact & Identity Information
- Name
- Phone or WhatsApp number
- Email address
- Country
Privacy & Personal Information
Privacy Policy
This policy explains how Henesis Clinic collects, uses, stores, and shares personal information when you use our website, contact our team, request an assessment, or communicate with us about treatment.
- Effective date
- 22 August 2026
- Last updated
- 5 September 2026
- Privacy contact
- info@henesisclinic.com
Data responsibility
Who We Are
Henesis Sağlık Turizmi ve Danışmanlık Limited Şirketi, trading as Henesis Clinic, acts as the data controller, or equivalent responsible organization where applicable, for personal information submitted through this website and its patient communication channels for enquiry, assessment, appointment, and patient-support purposes.
Henesis Sağlık Turizmi ve Danışmanlık Limited Şirketi Trading name: Henesis Clinic Esentepe, Büyükdere Cd. 102/1 34394 Şişli/Istanbul, Türkiye info@henesisclinic.com +90 540 436 37 47Information categories
What Information We Collect
Enquiry & Communication Information
- Enquiry details and selected topic
- Appointment information
- Communication history
- Visit or support requests
Health & Assessment Information
- Hair and donor-area photographs
- Treatment-related concerns
- Health information supplied voluntarily
- Medication or medical-history details where requested
Technical Website Information
- IP address and server request data
- Browser and device information
- Cookie preferences where available
- Analytics identifiers only where analytics tools are enabled
Collection channels
How We Collect Information
- Contact and assessment forms
- WhatsApp and other approved messaging channels
- Phone and email communications
- Information provided during a clinic visit
- Website server logs and cookie preferences
- Third-party platforms used by you to contact the clinic
Purpose limitation
Why We Use Personal Information
Respond to enquiries
Support the initial assessment workflow
Arrange appointments and clinic visits
Communicate before and after treatment
Provide requested treatment or visit information
Maintain relevant contact or patient records
Improve website and patient communications
Protect systems and prevent misuse
Meet applicable legal or regulatory obligations
Sensitive information
Health Information and Assessment Images
Hair and donor-area photographs, medical history, medication information, or other health-related details may be requested or voluntarily provided as part of an assessment. Health information may constitute special-category personal data under applicable data-protection law and is handled with additional safeguards where required. Such information is used only for relevant assessment, treatment-planning, patient-support, or clinical-record purposes. Access is limited to personnel and clinicians who require it for the relevant purpose.
Providing photographs or health information for assessment or treatment does not by itself authorize Henesis to publish those materials for marketing, social-media, testimonial or before-and-after purposes. Where such use requires separate permission, it is requested separately.
Processing grounds
Legal Basis for Processing
The applicable processing condition depends on the specific information and purpose. Henesis identifies the relevant processing ground for each collection workflow, including assessment forms and clinical processes, rather than relying on one legal basis for all information.
- Consent
- Where you choose to provide information or images for a defined purpose and consent is the appropriate basis.
- Requested pre-service steps
- Where processing is necessary to respond to an assessment, appointment, or service request.
- Healthcare and clinical record processing
- Where processing is appropriate and permitted for assessment, treatment, or clinical-record purposes.
- Legitimate interests
- Where necessary for proportionate communication, service administration, security, or improvement activities.
- Legal obligations
- Where records, disclosures, or other processing are required by applicable law or regulation.
Cross-border processing
International Data Transfers
Henesis works with international patients and may use service providers that process or store information in another country. Data-protection rules in those locations may differ from those in your country.
The providers, processing locations and applicable transfer conditions must be confirmed for each production workflow. Before production processing begins, Henesis maps relevant transfers and implements an applicable legally recognized transfer mechanism and related technical and organizational measures where Turkish data-protection law requires them.
Retention
How Long We Keep Information
Retention periods depend on the type of information, purpose of processing, legal requirements, and whether the information forms part of a medical or patient record.
A general website enquiry and a clinical record may therefore be kept for different periods. Information should not be retained for longer than needed for its applicable purpose or legal requirement.
Protection
Data Security
Henesis applies reasonable technical and organizational measures appropriate to the information and processing context.
- Role-based or limited authorized access
- Access controls for relevant systems
- Appropriate storage and communication practices
- Operational procedures for handling personal information
Your information
Your Privacy Rights
Your rights and the conditions that apply may differ according to your location, the applicable law, and the type of information involved.
- Request access to your personal information
- Request information about the purposes of processing and relevant recipients in Türkiye or abroad where applicable
- Request correction of inaccurate information
- Request deletion where applicable
- Request restriction of processing where applicable
- Object to certain processing
- Withdraw consent where processing relies on consent
- Request data portability where applicable
- Object to a materially adverse result based solely on automated processing where applicable
- Complain to the relevant data-protection authority
Henesis does not make final treatment-suitability decisions solely through automated processing. Clinical suitability requires human and clinical assessment.
Website technologies
Cookies & Analytics
Henesis uses strictly necessary technologies to operate this website, keep it secure, and remember your privacy choices.
Google Analytics may be used, through Google Tag Manager, to measure website performance. Where a consent choice is requested, analytics remains off until you allow it. In other cases analytics may start according to the site’s regional default. You can allow or disable Analytics at any time through Cookie Settings in the footer.
Advertising personalization is not currently enabled through this consent system. Henesis does not use this banner to turn on remarketing or user-provided advertising data.
Henesis does not intentionally send names, email addresses, telephone or WhatsApp numbers, patient photographs, medical history, diagnoses, HIV status, treatment details, or free-form consultation text to Google Analytics or Google Tag Manager.
Henesis also records selected first-party operational events, such as WhatsApp button clicks, on Henesis systems. Those records are used for clinic operations and are not sold. Browsers that send a Do Not Track signal are not included in those first-party operational records.
External platforms
Third-Party Services
Services such as WhatsApp, Google Maps links and hosting infrastructure may process information under their own privacy terms when you use them. Henesis does not control every independent processing activity carried out by those providers.
If you choose to send health information or photographs through a third-party messaging service, that provider may also process technical or communication data under its own terms.
Children
Our website and hair restoration services are not directed at children submitting personal or health information independently. If an enquiry concerns a person under the applicable age of consent, additional parent or guardian involvement may be required.
Changes to This Policy
This policy may be updated when our website, forms, communication channels, service providers, or legal requirements change. The effective and last-updated dates indicate the current published version.
Privacy contact
Privacy Questions and Requests
Contact Henesis if you have a privacy question, wish to exercise an applicable right, or have a concern about information submitted through the website.
