This Privacy Policy explains how Lilian Health ("Lilian Health", "we", "us" or "our") collects, uses, shares and protects your personal data when you visit lilianhealth.com (the "Website"), contact us, or use our services. It also describes your rights under the EU/UK General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK).
By using our Website or submitting your information to us, you acknowledge that you have read and understood this Privacy Policy.
1. Who we are
This Website is operated by Lilian Health Turizm ve Seyahat Acentesi Ticaret Limited Şirketi ("Lilian Health", "we", "us" or "our"), a company registered in Istanbul, Turkey (Mersis No: 0608157896900001; Tax ID / VKN: 6081578969), trading as "Lilian Health". For the purposes of the GDPR and the Turkish Personal Data Protection Law No. 6698 (KVKK), Lilian Health Turizm ve Seyahat Acentesi Ticaret Limited Şirketi is the data controller of your personal data.
- Address: Kozyatağı Mah., Gülbahar Sk., Ar Plaza C Blok, No: 13/3, İç Kapı No: 4, 34742 Kadıköy, İstanbul, Türkiye
- Email: info@lilianhealth.com
- WhatsApp / Phone: +90 549 178 18 00
2. What information we collect
Information you provide to us
When you complete a form on our Website (free hair analysis, consultation request, or quote request) or contact us via email or WhatsApp, we may collect:
- Your name, email address and phone number;
- Your responses to our hair-analysis questionnaire (for example, your gender, age range, duration and pattern of hair loss, hair colour, and whether you have had a previous procedure);
- Any photographs you choose to send us for assessment of your hair loss;
- Your preferred consultation date and time, and any other information you include in your messages to us.
Some of this information may relate to your health. Where it does, we treat it as a special category of personal data and only process it with your explicit consent and for the purpose of assessing your enquiry and providing you with information about our services.
Information we collect automatically
When you visit the Website, we and our service providers may automatically collect certain technical and usage information through cookies and similar technologies, including your IP address, device and browser type, pages viewed, time spent on the site, and how you arrived at our Website (for example, from an advertisement or search engine).
3. How we use your information
We use your personal data to:
- Respond to your enquiries and provide the information, consultation or quote you request;
- Assess your suitability for treatment and communicate with you about our services;
- Arrange and coordinate consultations and procedures;
- Operate, analyse and improve our Website and understand how visitors use it;
- Measure the performance of our advertising and, where permitted, show you relevant ads;
- Comply with our legal obligations.
4. Legal bases for processing
Under the GDPR, we rely on the following legal bases:
- Consent — for processing health-related information you provide, for non-essential cookies, and for marketing communications;
- Performance of a contract or steps taken at your request — to respond to your enquiry and provide our services;
- Legitimate interests — to operate and improve our Website and understand our audience, in a way that does not override your rights.
Where KVKK applies, we process your data based on your explicit consent and the other legal grounds permitted under Article 5 and Article 6 of the KVKK.
5. Cookies and tracking technologies
Our Website uses cookies and similar technologies, including Google Analytics 4 and Google Tag Manager, to measure traffic and understand how the site is used, and tools such as Google Ads to measure and improve our advertising. These technologies may set cookies on your device.
You can control or delete cookies through your browser settings, and you can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on and manage ad personalisation in your Google Ad Settings.
6. How we share your information
We do not sell your personal data. We share it only as necessary with:
- Service providers who help us operate the Website and our business — for example, our hosting provider (Cloudflare), analytics and advertising providers (Google), our form and email delivery provider, and the messaging platform we use to communicate with you (WhatsApp / Meta);
- Our clinical and coordination team, so they can assess your enquiry and assist you;
- Authorities or third parties where required by law or to protect our legal rights.
7. International data transfers
Lilian Health is based in Turkey, which is outside the European Economic Area (EEA) and the United Kingdom. If you contact us from the EEA, the UK or elsewhere, your personal data will be transferred to and processed in Turkey, and may also be processed by our service providers in other countries. Where we transfer your data internationally, we take steps to ensure it is protected in line with applicable law, and by submitting your information you consent to this transfer.
8. How long we keep your data
We keep your personal data only for as long as necessary for the purposes described in this Policy — for example, to respond to and follow up on your enquiry, to provide our services, and to meet any legal or record-keeping obligations. When your data is no longer needed, we delete or anonymise it.
9. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request deletion of your data ("right to be forgotten");
- Restrict or object to certain processing;
- Request a copy of your data in a portable format;
- Withdraw your consent at any time, without affecting processing already carried out.
To exercise any of these rights, contact us at info@lilianhealth.com. You also have the right to lodge a complaint with your local data protection authority (in Turkey, the Personal Data Protection Authority — KVKK Kurumu).
10. Data security
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
11. Children
Our Website and services are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can remove it.
12. Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically.
13. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
- Email: info@lilianhealth.com
- WhatsApp / Phone: +90 549 178 18 00
- Address: Kozyatağı Mah., Gülbahar Sk., Ar Plaza C Blok, No: 13/3, İç Kapı No: 4, 34742 Kadıköy, İstanbul, Türkiye