Hair restoration · 2 min read
Before you send photos to a hair transplant clinic
Check who receives scalp photos, which files are needed and whether consultation images can be reused or shared.

An initial enquiry may lead to a request for scalp photographs or a health questionnaire. Before sending anything identifiable, confirm the recipient and ask how the clinic will use the files. A booking intermediary and the treating clinic may handle information differently.
Identify the recipient and purpose
Ask for the legal name of the organisation receiving the files, who will review them and what the clinic needs at this stage. Request a privacy notice you can read. Türkiye’s data protection authority explains that the notice should identify the data controller, the purpose and legal basis, potential recipients and how to exercise your rights.
Use the clinic’s confirmed channel
Verify the upload address or contact number through an official clinic channel. Ask what the clinician needs to see and whether other identifying details can be left outside the frame. Ask before forwarding an entire medical file or identity document. The treating team can explain which relevant health information it needs for an assessment.
Clarify any public use separately
Ask whether the images stay in the clinical record or may also be used for a website, social post, training or advertising. If the clinic asks for separate permission, read the wording for each use and ask about choices, retention and whom to contact if you later want to raise a concern. Health data has special protection under Turkish data protection law.
Keep the sharing details
Save the privacy notice and the contact for data requests. Ask whether an agency or outside platform receives the material, how long it is kept and how to request access or correction. If an image request arrives from an unfamiliar account, check it with the named clinic before replying.
Sources and further reading
- Turkish Personal Data Protection Authority · What a privacy notice should explain
- Turkish Personal Data Protection Authority · Special categories of personal data
- Turkish Personal Data Protection Authority · Data security obligations
Some linked sources are published in other languages.

