Privacy policy
Short and in plain language: which data we process, why, for how long, and what your rights are.
Who is responsible
Haarkliniek Brugge, Sint-Claradreef 77, 8000 Brugge, Belgium. Questions about your data: info@haarkliniekbrugge.be or +32 50 68 10 60.
Which data we process and why
Contact form and phone. Name, email address, phone number, your preference for a conversation and what you write to us. We use these to answer you and schedule an appointment. Legal basis: your request (pre-contractual steps). Retention: until your request is handled, or for as long as you're a patient.
Medical data. From your first consultation we create a patient file: examination data, photos, treatment plan, reports. This is legally required and necessary for your treatment. Legal basis: provision of care and legal obligation. Retention: 30 years after the last contact, as prescribed by Belgian law on patient records. Only the medical team has access; we share nothing with third parties without your consent, except where the law requires it.
Free hair analysis. The two photos you upload are sent encrypted to our processor to estimate your Norwood stage. They are not stored: not by us, not by the processor. No account is created, no email address is requested and nothing is linked to your identity. Legal basis: your consent, which you give by starting the analysis.
Website visits. Our hosting provider processes technical log data (IP address, browser, time) to make the site work and keep it secure. We use no advertising cookies and no third-party tracking. The site's fonts are loaded via Google Fonts and the map on the contact page via Google Maps; Google receives your IP address in the process.
Who we pass data to
To processors that help us run the site and the analysis (hosting, email, the AI processor for the hair analysis), under a data processing agreement and only for that purpose. To other healthcare providers only with your consent, for example for a referral. Never for commercial purposes.
Your rights
You can access your data, have it corrected or deleted (insofar as the legal retention obligation allows), have processing restricted, object and withdraw your consent. Email the address above; we reply within a month. If you're not satisfied, you can contact the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, dataprotectionauthority.be.
Changes
If we update this policy, the new version will appear here. Latest version: September 2026.