Privacy Policy

1. Introduction

Dr. Maher Mahmoud is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how information is collected, used, stored, protected, and deleted when you use our website, patient portal, appointment booking services, and online consultation services.

By using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

Depending on the services you use, we may collect:

• Full name
• Mobile phone number
• Email address
• Country and country calling code
• Patient account credentials, including securely stored password information
• Account verification information
• Appointment and booking details
• Selected clinic branch, service, appointment date, and shift
• Online appointment requests
• Selected online payment method
• Payment verification information and payment proof submitted for online appointments
• Online consultation scheduling information
• Communication and support information you provide to us

3. How We Use Your Information

Your information may be used to:

• Create and maintain your patient account
• Verify your identity and account
• Schedule and manage clinic appointments
• Process follow-up bookings
• Process and review online appointment requests
• Verify submitted payment information
• Send appointment confirmations, reminders, verification codes, and other necessary notifications
• Provide online consultation services and related scheduling information
• Respond to patient inquiries and support requests
• Protect the security and integrity of our services
• Prevent fraud, abuse, and unauthorized access

4. Patient Accounts

Creating a patient account allows you to securely access your patient portal, manage appointments, and use services that require authentication.

Authentication sessions are maintained using secure session mechanisms. Authentication credentials are not intentionally stored in plain text.

5. Appointment Information

When you book an appointment, we may store information necessary to identify and manage the booking, including your name, contact information, service, price, branch, appointment date, shift, and booking reference.

Certain historical booking information may need to be retained in anonymized or otherwise limited form for operational, security, accounting, legal, or medical record purposes where applicable.

6. Online Appointments

Online appointment requests may require additional information, including:

• Patient account information
• Selected payment method
• Payment amount and currency
• Payment verification or proof
• Appointment scheduling information
• Online meeting information when an appointment is approved

This information is used to review, approve, manage, and deliver online consultation services.

7. Cookies & Local Storage

We use essential browser storage technologies to provide core functionality, maintain secure authentication sessions, and remember certain non-sensitive preferences.

Your authentication session is maintained using a secure session cookie. The website may also use limited browser storage to remember that a browser has previously used a patient account so that returning users can be offered a sign-in option instead of account creation.

With your consent, we also use Google Analytics cookies (such as _ga) to understand how visitors use the website so we can improve it. Analytics cookies are not set if you choose "Essential only", and you can change your choice at any time.

Sign-in and sign-up forms are protected by Google reCAPTCHA, which may use its own cookies to tell people and automated programs apart.

8. Data Protection

We use appropriate technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, loss, or misuse.

No method of electronic storage or transmission can be guaranteed to be completely secure. We therefore cannot guarantee absolute security of information transmitted through the internet.

9. Third-Party Services

We may use trusted third-party service providers to operate parts of the platform, including:

• Resend for email delivery where enabled
• CEQUENS for SMS and verification messaging
• PostgreSQL database services for application data storage
• Google for optional website analytics (Google Analytics, only with your consent), spam protection on sign-in and sign-up forms (reCAPTCHA), and signing in with a Google account

Third-party providers may process information only to the extent reasonably necessary to provide their respective services.

10. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing services, maintaining security, resolving disputes, complying with legal obligations, and maintaining required medical or operational records.

Retention periods may vary depending on the type of information and the purpose for which it is retained.

11. Delete Your Data

You may request deletion of removable personal data associated with your patient account while keeping the account itself.

Our data deletion process may remove online appointment requests, password-reset records, active sessions, and other information that can be deleted.

Historical booking information may instead be anonymized or retained where it is necessary for legitimate operational, security, accounting, legal, or medical record purposes.

You can request deletion of your data here:

12. Delete Your Account

You may also request permanent deletion of your patient account. Account deletion removes the account itself and associated account data, subject to information that we are required or legitimately permitted to retain.

Certain historical records may be retained in anonymized or otherwise limited form when necessary for legal, security, accounting, operational, or medical record purposes.

You can request permanent account deletion here:

13. Your Rights

Depending on applicable law, you may have rights to:

• Request access to personal information
• Request correction of inaccurate information
• Request deletion of eligible personal information
• Request deletion of your patient account
• Request information about how your data is processed

These rights may be subject to applicable legal, medical record, security, and operational requirements.

14. Children

Our services are intended to be used with appropriate involvement of a parent or legal guardian where required by applicable law.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements, or privacy practices.

When changes are made, the updated version will be published on this page with a revised "Last updated" date.

16. Contact

If you have questions about this Privacy Policy, your personal data, data deletion, or your patient account, please contact Dr. Maher Mahmoud through the official clinic contact information provided on this website.