drcemalhaci.co.uk · Last updated: 16 September 2026
This policy explains how Dr Cemal Hacı and his clinical team (“we”, “us”) collect and use your personal information when you visit this website, contact us through the enquiry form, WhatsApp, Instagram or Facebook, or become a patient. It is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Turkish Personal Data Protection Law (KVKK, Law No. 6698).
Dr Cemal Hacı is an ENT surgeon, European Board certified in Facial Plastic Surgery (EBFPRS), practising in Istanbul, Türkiye.
Data controller: Dr Cemal Hacı
Clinic address: Cemal Hacı Muayenehanesi, 19 Mayıs Mahallesi, 19 Mayıs Caddesi No:3, İç Kapı No:4, 34363 Şişli, Istanbul, Türkiye
Email: drcemal@drcemalhaci.co.uk
When you contact us (enquiry form, email, WhatsApp, Instagram or Facebook messages):
• Your name, email address and phone number
• Your Instagram or Facebook username if you message us there
• The procedure you are interested in and anything you tell us in your message
• Photographs of your face or nose that you choose to send us
• Information about your health that you choose to share (for example previous surgery, medical conditions, medication)
When you become a patient:
• Passport or ID details needed for hospital admission, hotel booking and transfers
• Travel dates and flight details
• Medical history, examination findings, test results, operation records, clinical photographs and follow-up notes
• Payment information (we do not store card numbers)
When you browse the website:
• Technical data such as your IP address, browser and device type
• Cookie and analytics data as described in section 8
Photographs and health information are “special category” data under UK GDPR and “sensitive personal data” under KVKK. We only collect them with your explicit consent and only to assess and provide your treatment.
Responding to your enquiry and giving an initial opinion on suitability — Your consent (given when you send photos or tick the consent box).
Arranging your consultation, surgery, hospital stay, hotel and transfers — Performance of a contract with you; explicit consent for health data.
Providing medical care and follow-up for 12 months after surgery — Provision of health care; explicit consent.
Keeping medical records — Legal obligation under Turkish health regulations.
Answering questions and sending appointment reminders — Legitimate interests / contract.
Website analytics and, with your consent, advertising measurement — Consent (cookies).
We do not use your photographs or clinical information for marketing, before-and-after galleries or social media unless you give separate, specific written consent, which you can withdraw at any time.
If you message us on Instagram or Facebook, your first replies may come from an automated assistant that answers common questions, explains our process and collects the information needed to arrange a consultation. The assistant does not give medical advice and does not decide whether you are suitable for surgery. Every enquiry is reviewed by Dr Hacı or his patient coordinator, and you can ask to speak to a person at any time by writing “human” or “coordinator”.
Messages and photos you send through Instagram or Facebook are also processed by Meta under their own privacy policy.
We share only what is needed with: the hospital in Istanbul where your surgery takes place (medical and identity details); the anaesthesia team and laboratory (medical details); the hotel and transfer company (name, dates, flight details — never medical information); our partner clinicians in the United Kingdom, only if you need in-person care after returning home and only with your agreement; and service providers that host our website, email and forms (Framer, Google Workspace) and, if you contact us there, Meta (Instagram/Facebook) and WhatsApp.
We never sell your information and we do not share it with agencies or third parties for their own marketing.
We are based in Türkiye. If you contact us from the UK, your information is transferred to Türkiye for the purposes above. Türkiye is not covered by a UK adequacy decision, so we protect your data through your explicit consent to the transfer (for the purpose of arranging and receiving treatment) and through contractual and security safeguards with our providers. Some of our providers (Google, Meta, Framer) may process data in the EU or United States under their own approved safeguards.
Enquiries that do not lead to treatment: 12 months from your last message, then deleted.
Patient records: retained as required by Turkish health law (currently a minimum of 20 years for medical records).
Photographs sent for assessment only: deleted with the enquiry.
Website and form data: 12 months.
This website uses essential cookies needed for the site to work; analytics (Framer Analytics) to understand how the site is used; and Meta Pixel, only if you accept it in the cookie banner, to measure whether our Instagram and Facebook adverts reach people who are genuinely interested. We do not send health or procedure information to Meta.
You can change your choice at any time via the cookie settings link in the footer or your browser settings.
Under UK GDPR and KVKK you have the right to ask what information we hold about you and receive a copy; ask us to correct or delete it; withdraw consent at any time (this does not affect care already given or records we must keep by law); object to, or ask us to restrict, certain processing; receive your data in a portable format; and complain to a supervisory authority: the Information Commissioner’s Office (ICO) in the UK (ico.org.uk) or the Personal Data Protection Authority (KVKK) in Türkiye (kvkk.gov.tr).
To exercise any of these rights, email drcemal@drcemalhaci.co.uk. We will respond within 30 days.
Photographs and medical information are stored on access-controlled systems and shared only over encrypted channels. We ask that you do not send medical information or photographs by unencrypted email; WhatsApp, the website form and Instagram direct messages are the channels we use.
We do not accept enquiries from, or provide cosmetic surgery to, anyone under 18.
We may update this policy from time to time. The date at the top shows when it was last changed.
Dr Cemal Hacı
Cemal Hacı Muayenehanesi, 19 Mayıs Mahallesi, 19 Mayıs Caddesi No:3, İç Kapı No:4, 34363 Şişli Istanbul, Türkiye
drcemal@drcemalhaci.co.uk