Personal Data Notice (KVKK)
Last updated: 19 October 2026
This notice is provided by ScalpIQ as data controller under Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK") and the related Communiqué on the duty to inform. This is a courtesy translation; the Turkish version prevails.
1. Data controller
- Legal name
- ScalpIQ
- [email protected]
2. Data processed, purposes and legal bases
| Data category | Purpose | Legal basis (KVKK Art. 5/2) |
|---|---|---|
| Identity and contact (name, clinic, email, phone, country) | Responding to quote requests, communication | (c) necessary to enter into a contract; (f) legitimate interest |
| Customer transaction and finance (company name, address, tax details, order and invoice records) | Sales, invoicing, accounting | (c) performance of contract; (ç) legal obligation |
| Transaction security (IP address, device and browser details, login logs) | Account and information security, preventing misuse | (ç) legal obligation incl. Law No. 5651; (f) legitimate interest |
| Marketing and measurement (cookie data, page interactions) | Measuring site usage and ad performance | Explicit consent (KVKK Art. 5/1) |
Card details entered at checkout are processed directly by the payment institution; ScalpIQ has no access to them.
About patient data
For patient photos and health data uploaded to ScalpIQ by clinics, the relevant clinic is the data controller. ScalpIQ processes this data as a data processor under KVKK Art. 3, only on the clinic's instructions and to provide the service. Patients should exercise their rights primarily against the clinic treating them.
3. Collection method
Personal data is collected by automated or partly automated means through website forms, the checkout page, email correspondence, the ScalpIQ dashboard and mobile apps, and cookies.
4. Transfers
Within the purposes above, personal data may be transferred to our hosting, email delivery and analytics providers, payment institutions and banks, accountants and auditors, and to authorised public bodies on request. Transfers to providers with servers abroad are made under KVKK Art. 9 with appropriate safeguards (standard contracts) or based on your explicit consent.
5. Your rights (KVKK Art. 11)
- to learn whether your personal data is processed and request information about it;
- to learn the purpose of processing and whether it is used accordingly;
- to know the third parties in Turkey or abroad to whom it is transferred;
- to request correction of incomplete or inaccurate data;
- to request deletion or destruction under KVKK Art. 7;
- to request that corrections and deletions be notified to third parties who received the data;
- to object to an outcome against you resulting solely from automated analysis;
- to claim compensation for damage caused by unlawful processing.
6. How to apply
Send your request with information verifying your identity to [email protected]. Requests are concluded free of charge within 30 days.