This Cookie Policy explains which cookies and similar tools the website sercanaslanturkey.com (the "Site") uses, why, and how you can control them. The Site is run by Sercan Aslan Turkey (the "Clinic"), the data controller. For how we handle personal data in general, see the Privacy Policy and the KVKK Notice.
1. What cookies are
Cookies are small files that a website stores in your browser. Similar tools work in a similar way, for example "local storage" in your browser, tracking pixels and scripts that send data to another company. In this policy we call all of them "cookies".
2. The cookie banner and your choices
On your first visit the cookie banner asks for your choice. It has three buttons: "Accept all", "Reject all" and "Customize". In "Customize" you can switch each of these categories on or off: Analytics, Marketing and Personalization. Necessary cookies are always on because the Site cannot work without them. The two short-lived tools listed under "Only during your visit" are also always on. All other categories stay off until you switch them on.
Your choice is stored only in your browser, in the cookie "sa_consent", together with the date of your choice. We do not keep a copy of it on our server. After about 6 months, or if you delete your cookies, the banner asks you again. You can change your choice at any time with the "Cookie settings" link at the bottom of every page.
3. What the cookie banner does not control
The banner is only about cookies in your browser. When you send a form, what happens to the details you type in, including sharing them in coded (hashed) form with Meta to measure our ads, is decided by the consent box in that form and not by the banner. The Privacy Policy explains this.
4. Google Consent Mode
We use Google Tag Manager with Google's "Consent Mode". Google's tags load on every page. Before you choose, and if you reject, they are told not to use cookies. They can still send Google basic signals without cookies, for example that a page was viewed, the page address (including any campaign codes in it), the time, your IP address and your browser type. Google uses these signals to estimate visits and ad results. When you accept a category, the matching Google tags may also use cookies.
5. The cookies we use
Necessary (always on)
- sa_consent (our Site): stores your cookie choice, for about 6 months.
- NEXT_LOCALE (our Site): remembers the language you picked in the language menu, for 1 year.
- wc_ms (our Site): lets you see the photos you sent in the chat. It is deleted when you close your browser.
- Chat storage (our Site, local storage in your browser: sercan_webchat_token, sercan_webchat_lead, sercan_webchat_open, sercan_webchat_nudge_off): keeps your conversation with the chat assistant on this device. Kept until you clear your browser data.
- Hair analysis progress (our Site, local storage: haw_progress_v2; an older haw_progress_v1 is removed): lets you continue the analysis where you stopped. Deleted when you finish it.
- Staff login cookies (our Site): used only by Clinic staff in the admin area.
- Cloudflare Turnstile (Cloudflare): a security check on our forms that stops bots. It uses technical data from your browser and may store its own data on Cloudflare's domain.
Only during your visit (always on)
- Visit source (our Site, session storage: sa_attr_v1): remembers how you reached the Site during this visit, for example campaign codes such as utm codes and ad click IDs, the first page you opened and the website that sent you. It stays in your browser and reaches us only together with a form you send. It is deleted when you close the tab.
- Hair analysis pre-selection (our Site, session storage: haw_preselect_v1): carries the choice you made on the home page or a campaign page into the hair analysis. It is deleted when you close the tab and is ignored after 30 minutes.
Analytics (only if you accept)
- Google Analytics 4 (Google): shows us which pages, steps and treatments people view. Cookies such as _ga and _ga_ followed by an ID, for up to 2 years. They hold a random ID. If you later send a form, this ID is saved with your request so we can see which visit led to it.
- Microsoft Clarity (Microsoft): records how pages are scrolled and clicked (session recordings and heatmaps) so we can find and fix problems. Cookies such as _clck (up to 1 year) and _clsk (1 day).
Marketing (only if you accept)
- Meta Pixel (Meta): measures our ads on Facebook and Instagram and can be used to show you our ads. Cookies such as _fbp and _fbc, for about 90 days.
- Google Ads (Google): measures which Google ads lead to requests and can be used to show you our ads. Cookies such as _gcl_au (about 90 days) and Google's own cookies on Google's domains.
Personalization (only if you accept)
This choice is passed to Google's tags as the "functionality" and "personalization" storage signals. Our own Site does not set any extra cookie for this category at the moment.
The names and lifetimes of other companies' cookies are set by those companies and can change. See their policies: Google (policies.google.com/technologies/cookies), Meta (facebook.com/policies/cookies), Microsoft (privacy.microsoft.com) and Cloudflare (cloudflare.com/privacypolicy).
6. Legal basis and transfers abroad
Necessary cookies are used because the Site cannot work without them (KVKK Art. 5(2)(c) and (f); GDPR Art. 6(1)(b) and (f)). The two tools under "Only during your visit" stay in your browser; the visit source reaches us only with a form you send, under the consent box of that form. All other cookies are used only with your consent in the banner (KVKK Art. 5(1); GDPR Art. 6(1)(a) and the EU ePrivacy rules). Google, Meta, Microsoft and Cloudflare may process this data in the USA and other countries. These transfers are made under Article 9 of the KVKK and Chapter V of the GDPR.
7. Withdrawing consent and browser settings
Use the "Cookie settings" link at the bottom of every page to change or withdraw your choice. Withdrawing is as easy as giving consent and does not affect what happened before. After you withdraw, the related tools no longer run from the next page you open. Cookies that were already set stay in your browser until they expire or until you delete them in your browser settings.
You can also block or delete cookies in your browser settings. If you block necessary cookies, some parts of the Site, such as the chat, may not work.
8. Your rights and contact
You have the rights described in the Privacy Policy and the KVKK Notice. Write to hello@sercanaslanturkey.com; we answer within 30 days at the latest.
9. Changes
If we start using a new tool that needs your consent, we will update this policy and ask for your choice again. The date of the last update is shown on this page.