Privacy Policy and Your Data

1. Who We Are

Foxpare ("Foxpare", "we", "us", "our") operates the website foxpare.com — a free, independent search and matching tool that helps users find hair transplant clinics in Turkey that match their criteria. We are not a medical provider and do not perform or arrange medical procedures.

For any privacy-related queries, contact us at: info@foxpare.com

2. Information We Collect

We collect the following categories of personal data:

2.1 Information you provide directly

Email address — only when you contact us. We do not ask for your email address in the clinic search, matching or chat.
Name — when you contact us.
Search and chat answers — the answers you give in the clinic finder and the text you type into the Fox chat. They are used only to show matching clinics and to reply to you. They are not linked to your name or email address and are never sent to clinics.
Messages and enquiries — content of any messages you send us.

What we do not collect: Foxpare does not collect photos of any kind. We do not collect patient contact details (name, email address or phone number) through the clinic search, matching or chat. We never send any patient information to clinics — if you want to contact a clinic, you do so directly through the clinic's own website.

Visitors cannot and do not create accounts on foxpare.com. We have no registration, login or newsletter for visitors.

2.2 Information collected automatically

Device and browser information — your IP address is used to derive a country code for anonymous page view counting and is then discarded. It is stored only for Fox chat rate limiting (90 days, see below). Browser type and operating system are processed by Google Analytics and Microsoft Clarity only if you consent.
Usage data (pages visited, time spent, links clicked, referring URL).
Cookie data — as described in our Cookie Policy.

2.3 Fox chat: abuse prevention

When you use the Fox chat, we store your IP address, a random conversation code, the time of each request and the number of requests.

Why: to prevent abuse and excessive use (rate limiting).
Legal basis: our legitimate interest in keeping the service secure and available.
How long: 90 days, after which the records are deleted automatically.
What we do not store: the content of your conversation. Your messages and Fox's replies are not saved.
Where your messages go: to answer you, your messages are sent to the AI service that generates Fox's replies. We do not store them, and we do not use them for any other purpose.
Your rights: you can request deletion, and you can object to this processing, by writing to info@foxpare.com.

2.4 Information from third parties

We display clinic data sourced from publicly available information. We do not receive personal data from clinics unless they contact us directly to request or manage a listing.

3. How We Use Your Information

We use your personal data for the following purposes:

To provide and improve the Foxpare platform and its features.
To respond to enquiries and support requests.
To analyse how users interact with the Website (analytics) and improve the user experience.
To comply with our legal obligations.
To detect and prevent fraud, abuse, or security incidents.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing

Where applicable under GDPR or UK GDPR, we process your personal data on the following legal bases:

Consent — for non-essential cookies.
Legitimate interests — for analytics, improving the platform, and fraud prevention, where your interests do not override ours.
Legal obligation — where processing is required by law.
Contract — where processing is necessary to fulfil a request you have made.

5. Sharing Your Information

We do not sell, rent, or trade your personal data to third parties. We share data only as follows:

Clinics — we never send any patient information to clinics.
Service providers — hosting, email delivery, and analytics providers (Google Analytics 4 and Microsoft Clarity) acting as our processors.
AI chat provider — to generate Fox's reply, your message is sent to our AI provider, Google (Gemini model), through our hosting provider's AI service. We do not store the content, and it is not used to identify you. Photos cannot be sent.
Legal authorities — where required by law, court order, or to protect our rights.

All third-party service providers are contractually required to handle your data securely and only for the purposes we specify.

Microsoft Clarity

With your consent, we use Microsoft Clarity to understand how visitors use Foxpare. Clarity captures anonymised interaction data — mouse movement, clicks, scrolling and pages visited — and presents it as session replays and aggregated heatmaps. Text entered into input fields is masked. We use this only to identify usability problems and improve the site. Microsoft acts as a processor and may transfer data outside Türkiye and the EEA. You can withdraw consent at any time via "Cookie settings" in the footer.

Neither Google Analytics nor Microsoft Clarity is loaded until you actively opt in to that category. If you reject or ignore the cookie banner, these scripts are never loaded and set no cookies.

We do not collect patient contact details through the clinic search flow, and our clinic click tracking is anonymous and aggregate only — no IP address, no session identifier and no user identifier is stored.

Anonymous page view counting

Separately from Google Analytics and Microsoft Clarity, we count page views ourselves, anonymously and in aggregate. For each page view we store only the page path, the referring website's domain (for example "google.com"), a two-letter country code, whether the device is a phone, tablet or desktop, and which language version of the page was viewed (English, German, French, Spanish or Italian).

We also record, in the same anonymous way, how long a page was open while the tab was visible (in seconds, up to 30 minutes) and how far down it was scrolled (as a percentage), and — when you open a clinic's own website from any Foxpare page — which clinic it was, on which page and in which part of the page the link was. A clinic-link click is linked only to the anonymous page view on which it happened; nothing identifies you.

How we measure the clinic finder. When you answer a question in the clinic finder, we record anonymously which question it was and which option you chose — for example "Istanbul" or "up to $3,000" — so we can see where people leave the finder and what they are looking for. One answer is deliberately excluded: what you tell us about how much hair loss you have is never recorded. We also count how many clinics a search returned, whether it returned none, which extra filters were used, and — when you open a clinic's own website from Foxpare — which clinic it was. These records contain no cookie, no IP address, no session identifier and no user identifier; they cannot be linked to you, to your search, or to one another. The one exception: a clinic-link click is linked to the single anonymous page view on which it happened — never to other pages or visits.

For page view counting, we store no cookies, no IP addresses, no browser or device fingerprints, no session identifiers and no user identifiers of any kind. For this counting, your IP address is used only momentarily, at the time of the request, to derive the country code, and is then discarded — it is not stored. (The Fox chat is different: see "Fox chat: abuse prevention" in section 2.) The resulting records cannot be linked to you or to each other, so they are not personal data and this counting therefore runs without consent. Google Analytics 4 and Microsoft Clarity remain fully consent-gated and are not loaded unless you opt in.

6. International Data Transfers

Foxpare is based in Turkey. If you are located in the EEA or UK, your data may be transferred to and processed in Turkey or by providers located in countries outside the EEA/UK, including the United States (e.g. Google Analytics 4 and Microsoft Clarity).

Where we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or equivalent mechanisms.

7. Data Retention & Auto-Deletion

We retain your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by law. Specifically:

Search and chat answers — your search and your chat are not kept as a record attached to you. The clinic finder's answers feed only the anonymous counters described above, which carry no identifier. Fox chat message content is not stored by us (see "Fox chat: abuse prevention" in section 2).
Enquiry/contact data — retained for up to 2 years from the date of contact.
Analytics data — Google Analytics 4 up to 14 months; Microsoft Clarity up to 12 months.
Fox chat abuse-prevention records (IP address, conversation code, timestamps, request count) — 90 days, deleted automatically.

8. Your Rights (GDPR & KVKK)

Depending on your location, you have rights under the EU/UK General Data Protection Regulation (GDPR) and/or the Turkish Personal Data Protection Law no. 6698 (KVKK):

Access — request a copy of the personal data we hold about you.
Rectification — request correction of inaccurate or incomplete data.
Erasure / deletion — request deletion of your personal data, subject to legal obligations.
Restriction — request that we restrict processing in certain circumstances.
Portability — receive your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interests.
Withdraw consent — at any time, where processing is based on consent (e.g. analytics cookies).
KVKK-specific — to learn whether your data is processed, the purposes of processing, the third parties to whom it is transferred, and to object to outcomes produced solely by automated analysis, as set out in Article 11 of the KVKK. See our KVKK Aydınlatma Metni for details.

To exercise any of these rights, contact us at info@foxpare.com. We respond within 30 days. You also have the right to lodge a complaint with your local data protection authority, or with the Turkish Personal Data Protection Authority (KVKK Kurulu).

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. However, no method of internet transmission or electronic storage is 100% secure. Access to Foxpare's internal tools is limited to Foxpare staff accounts. Visitors cannot and do not create accounts on Foxpare.

10. Children's Privacy

Foxpare is not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at info@foxpare.com and we will delete it promptly.

11. Links to Third-Party Websites

Our Website contains links to clinic websites and other third-party services. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this document will be revised accordingly. Where changes are material, we will notify you via a prominent notice on our Website or by email where appropriate.

13. Contact Us

For any questions about this Privacy Policy or how we handle your personal data, please contact: info@foxpare.com. We aim to respond to all enquiries within 5 business days.