Privacy Policy

Who we are

HairClinicRankings (“we”, “us”) is an independent publisher of hair transplant clinic rankings and guides, operated by a company based in California, USA. We are the data controller for the personal data described in this policy. Contact: privacy@hairclinicrankings.com.

What we collect, and why

Consultation requests (lead form)

When you ask a clinic for a consultation through our site, we collect your name, email, country, procedure of interest, and optional message. Lawful basis: consent — you tick a box agreeing that we pass these details to the specific clinic you chose so it can contact you. We share them with that clinic and no one else. We never sell your details, and we never share them with other clinics or advertisers.

Reviews and proof of treatment

When you submit a review we collect the review content, your display name and country, and proof-of-treatment documents (operation notes, receipts, or dated photos). Lawful basis: consent and our legitimate interest in publishing only verifiable reviews. Proof documents are used solely to verify your treatment, stored with restricted access, and never published. Your published review shows only the display name and country you chose.

Accounts

If you create an account we store your email and role (patient or clinic). Authentication is provided by Supabase; passwords are hashed and never visible to us.

Analytics

We use cookieless, privacy-first analytics (Plausible). It collects no personal data, stores no cookies, and does not track you across sites — which is why you don’t see a cookie banner here. Error monitoring (Sentry) processes technical error reports without request bodies or form contents.

How long we keep data

• Consultation requests: 24 months, then deleted.
• Proof-of-treatment documents: deleted after verification is complete, retained no longer than 12 months.
• Reviews: for as long as they are published; you may request removal at any time.
• Accounts: until you delete your account.

Your rights

If you are in the UK/EU (GDPR) or a jurisdiction with similar laws, you can ask us to access, correct, delete, or export your personal data, withdraw consent, or object to processing. Email privacy@hairclinicrankings.com and we will respond within 30 days. You may also complain to your local data-protection authority.

California residents (CCPA/CPRA)

As a California-based company, we extend California privacy rights to California residents. You have the right to know what personal information we collect and how we use it, to request access to or deletion of it, and to correct inaccurate information. You also have the right to opt out of the “sale” or “sharing” of personal information — and we make that easy because we do neither: we never sell your data, and we share your contact details only with the specific clinic you explicitly chose. We do not use your information for cross-context behavioral advertising, and we will never discriminate against you for exercising these rights. To make a request, email privacy@hairclinicrankings.com; authorized agents may submit requests on your behalf with proof of authorization.

International transfers

Our infrastructure providers (Vercel, Supabase, Stripe, Sentry, Plausible) may process data in the US and EU under standard contractual clauses or equivalent safeguards. When you request a consultation, your contact details are transferred to the clinic you chose, which is typically located in Turkey — this transfer happens only with your explicit consent.

What we never do

• Sell or rent your personal data.
• Share your details with any clinic you did not explicitly choose.
• Publish proof-of-treatment documents.
• Let any clinic pay to see, alter, or remove reviews or scores.

Changes

We will update this page when our practices change and adjust the date above. Material changes will be highlighted on this page. See also our Terms of Use and Medical Disclaimer.