Privacy Policy

We respect every user’s right to the protection of personal data and process information in accordance with applicable data protection laws, including Regulation (EU) 2016/679 (GDPR) for users from the European Union, as well as applicable UAE data protection legislation. Depending on which clinic or legal entity you interact with, local laws of the relevant jurisdiction may also apply to the processing of your data.

1. Who is the data controller

The data controller is the legal entity within the group of clinics with which you communicate, book a consultation or treatment, or to which you submit medical information.

2. What data we may collect

We may process the following categories of data:

first and last name;
phone number, email address, messengers;
country, city, and preferred clinic;
data you provide in booking forms, questionnaires, or messages;
information about symptoms, disease stage, examination results, photos, medical records, and other data you voluntarily provide;
technical data about website visits: IP address, device type, browser, cookies, and similar technologies;
data necessary for organizing consultation, treatment, logistics, and communication.

If you submit medical documents or describe your health condition, such information may belong to special categories of personal data requiring enhanced protection. GDPR specifically regulates the processing of such data.

3. Purposes of data processing

We process personal data for the following purposes:

Responding to your request
If you submit a request, contact us, call, or send documents, we use your data to respond, communicate with you, and organize a consultation.

Assessment of consultation or treatment options
We may analyze the information you provide, including medical documents, to preliminarily assess the clinical situation and determine the appropriate clinic, doctor, consultation format, or treatment.

Organization of consultation, treatment, and support
Including appointment confirmation, communication before and after the visit, travel organization, and coordination between clinics and specialists if necessary.

Performance of a contract or steps prior to entering into a contract
If you book a consultation or treatment, your data may be used for administrative and organizational purposes.

Compliance with legal obligations
For example, when data storage or disclosure is required by law for accounting, medical, migration, or other applicable legal requirements.

Protection of rights and legitimate interests
Including preventing misuse, protecting the website, maintaining internal records, handling claims, and defending legal rights.

Marketing and informational communications
Only where permitted by law and/or with your consent, where such consent is required.

GDPR requires informing the data subject about the purposes of processing, categories of data, recipients, retention periods, rights, and legal basis. These elements are included in this policy.

4. Legal basis for processing

Depending on the situation, we rely on one or more of the following legal bases:

your consent — for example, when you voluntarily submit medical documents, fill out forms, consent to the processing of health data, or subscribe to communications;
necessity for the performance or conclusion of a contract — for booking, consultation, or treatment organization;
compliance with a legal obligation — where processing is required by law;
legitimate interest of the controller — such as website administration, fraud prevention, service improvement, communication, and legal protection;
provision of medical care / organization of medical services, where permitted by applicable law;
establishment, exercise, or defense of legal claims, where necessary.

8. Data retention

We retain personal data no longer than necessary for the purposes for which it was collected, unless a longer retention period is required by law.

Approximate retention periods:

website inquiries and correspondence — up to [6/12/24] months after the last contact if no consultation or treatment took place;
medical records and data related to consultation/treatment — in accordance with applicable laws and internal clinic policies;
data required for accounting, reporting, and legal protection — as required by law or until expiration of limitation periods;
marketing data — until consent is withdrawn or the legal basis for communication ceases.

9. Your rights

If GDPR applies, you have the right to:

access your data;
request correction of your data;
request deletion of your data;
request restriction of processing;
object to processing in cases provided by law;
receive your data in a portable format where applicable;
withdraw consent at any time where processing is based on consent;
lodge a complaint with a supervisory authority.

10. Cookies and similar technologies

The website may use cookies and similar technologies for:

ensuring proper website functionality;
remembering user preferences;
analytics and website improvement;
protecting the website from misuse;
evaluating the effectiveness of advertising and informational campaigns, where applicable.

Detailed information about cookies, their retention periods, and consent settings is provided in a separate Cookie Policy.

11. Data security

We apply reasonable organizational and technical measures to protect data, including:

access control;
use of secure communication channels where possible;
protection of email and administrative systems;
restricted access to medical information;
internal control and confidentiality measures.

However, no method of data transmission over the internet can be guaranteed to be completely secure, therefore when sending sensitive information through the website, we recommend using only the designated secure channels.

12. Links to third-party services

The website may contain links to third-party websites, messenger services, maps, video hosting platforms, payment or analytics tools. We do not control their content or data processing practices. We recommend reviewing their privacy policies before using such services.

13. Children’s data

The website and services are not intended for independent use by minors without the involvement of a parent, legal guardian, or authorized adult, unless otherwise permitted by applicable law.

14. Changes to the policy

We may periodically update this Privacy Policy. The current version is always published on the website with the date of the latest update.