This is a working draft based on the current website. Organisational details and actual practices are subject to review by legal counsel.
Scope and principles
Personal data handled through the Istanbul Stella Hair website and service processes should be used for specified, explicit and legitimate purposes, and limited to what is relevant and necessary. Website enquiries and healthcare services involve different data categories.
Data categories and purposes
The website form processes name, phone number, email, service preference and message. Healthcare services may also create identity, appointment, health and service records. The purpose and legal ground for each activity should be stated in the relevant notice.
Access, security and disclosure
Access should be limited by role and need. Administration-panel access, record protection, backups and changes to permissions should be reviewed regularly. Recipient groups and any international transfers must be explained after actual service providers have been confirmed.
Retention, erasure and rights
Data should not be held longer than required for its purpose and legal obligations. The Data Retention and Erasure Policy describes the framework. Individuals may contact info@istanbulstellahair.com about their rights under Article 11 of Turkish Law No. 6698.
