Privacy Policy

Last updated: 2026

Trichology.com (“we”, “our”) operates the trichologist directory at trichologists.club. This page explains what we collect, how we use it, and what rights you have.

Information we collect

  • Account data — email, name, and authentication details when you sign up.
  • Practice data — professional information you choose to publish (bio, certifications, photos, contact methods).
  • Consultation requests — patient contact details and message content submitted via our forms, delivered to the specialist you chose to contact.
  • Reviews and user-submitted content — patient reviews, replies, reports, and other content you post.
  • Usage data — anonymous, aggregate events (page views, clicks). IP addresses are hashed before storage.
  • Communications — emails you send us, and our responses.

How we use it

To operate the directory, route consultation requests to specialists, send transactional emails (account, practice, leads, moderation notices), prevent abuse, and improve the service. We do not sell personal information. We do not run third-party advertising trackers.

Legal bases (GDPR)

  • Contract — to operate your account and deliver consultation requests.
  • Legitimate interests — to keep the platform safe, prevent fraud, and improve the product.
  • Consent — for optional communications you opt into.
  • Legal obligation — to comply with applicable laws.

Your rights

Depending on where you live, you have the right to access, correct, export, restrict, or delete your personal data. Residents of California (CCPA/CPRA), the EU/UK (GDPR), and other jurisdictions with comparable laws can also object to certain processing and ask us not to sell data — we never sell it in any case.

To exercise any right, email privacy@trichologists.club with your account email. We respond within 30 days.

Data retention

  • Account and practice data — kept until you delete your account, plus 30 days for backup expiration.
  • Consultation requests — retained for 24 months for dispute resolution, then deleted.
  • Reviews — public reviews remain published unless removed by you or moderation.
  • Hashed usage logs — 13 months.
  • Email suppression lists — retained indefinitely so we don't email you again after unsubscribe.

Sub-processors

We use trusted third parties to run the service. Each is contractually bound to our privacy standards.

  • Supabase — database, authentication, file storage (US/EU regions).
  • Cloudflare — content delivery and edge compute.
  • Resend — transactional email delivery.

A current list is available on request from privacy@trichologists.club.

Cookies

We use minimal first-party cookies, primarily to keep you logged in. No advertising trackers, no cross-site tracking.

Email

We send transactional emails (account verification, password resets, consultation requests, moderation notices) and operational notices. Optional emails always include an unsubscribe link.

Children

The directory is not intended for users under 16. We do not knowingly collect information from children.

International transfers

Your data may be processed in the United States and the European Union by our sub-processors. We rely on Standard Contractual Clauses and equivalent safeguards where applicable.

Changes

We'll update this page when our practices change and revise the “Last updated” date. Material changes will be announced via email or in-app notice.

Contact

For privacy questions, requests, or our Data Protection point of contact, email privacy@trichologists.club.