Privacy & cookies

Last updated: October 10, 2026. This page explains what personal data Nose & Beyond collects, why, who handles it, and what rights you have. We try to collect as little as possible.

Who is responsible

The data controller (the party that decides how your data is used) is Nora Whitfield (Nose & Beyond). For any privacy question or request, write to hello@noseaesthetic.com.

What we collect

1. Email

The site has no contact form. If you write to hello@noseaesthetic.com, we receive your email address, your message and whatever else you include. The email stays in our inbox like any other email; we do not store it in a database on this website.

Please do not send health information (symptoms, medical history, photos, test results) by email. We do not need it, we cannot give medical advice, and the site is not designed to handle it. If you send it anyway, we will delete it where we can.

2. Measurement (planned)

We plan to use Google Analytics 4 with your consent; this page will be updated before it is enabled. Today the site sets no analytics cookies and shows no cookie banner.

3. Technical and security data

Like any website, our hosting and security providers process technical data such as your IP address, browser type and the pages requested. This is needed to deliver the site, keep it secure and block abuse.

Why we use your data, and on what basis

  • To answer your email or correct an error you report: our legitimate interest in running the site and replying to you.
  • To keep the site working and secure, and to prevent spam: our legitimate interest in security.

We do not sell personal data. We do not make automated decisions about you.

Cookies

  • Our own cookies: the site sets no cookies of its own and shows no cookie banner today. If that changes, for example when analytics or advertising is introduced, this page will be updated first.
  • Security: Cloudflare services (CDN and protection) may use limited technical data and, where needed, technical cookies to protect the site.

You can block cookies in your browser settings.

Who else handles your data

  • IHS Telekom (Türkiye) hosts the website.
  • Cloudflare provides CDN and security.
  • Our email provider handles email sent to hello@noseaesthetic.com.

These providers process data on our behalf or under their own terms. We do not share your data with clinics or doctors.

International transfers

The site is hosted in Türkiye and some providers operate worldwide, so your data may be processed outside your country. Where the law requires safeguards for such transfers, we rely on the mechanisms our providers offer for them.

How long we keep data

Emails are kept for as long as needed to reply and to keep a record of corrections, then deleted. Technical logs are kept by our providers according to their own schedules.

Your rights

EU and UK (GDPR and UK GDPR)

You have the right to: access your data; have it corrected; have it erased; restrict how it is used; receive it in a portable format; object to certain processing; and withdraw consent at any time, without affecting earlier processing. You can also complain to your local data protection authority (in the UK, the Information Commissioner's Office).

Türkiye (KVKK, Law No. 6698, Article 11)

You can apply to the data controller to: learn whether your data is processed and request information about it; learn the purpose and whether it is used accordingly; know the third parties it is transferred to at home or abroad; request correction of incomplete or incorrect data; request deletion or destruction under the conditions in Article 7; request that these actions be notified to third parties; object to a result against you arising from exclusively automated analysis; and claim compensation for damage caused by unlawful processing. The controller must reply within 30 days at the latest. If the reply is rejected, inadequate or missing, you can complain to the Personal Data Protection Board (KVKK Kurulu).

How to exercise your rights

Write to hello@noseaesthetic.com and tell us what you want. We may ask you to confirm your identity. Because we keep very little data, we may not hold anything about you.

Children

This site is for adults and is not directed at children. We do not knowingly collect data from children.

Changes

If we change this page, for example when analytics or advertising is introduced (see disclosure), we will update it, and the date at the top, before the change takes effect.