Health-data privacy notice
This notice explains how we handle health data created during an online consultation. It adds to our general privacy page, and the health data it covers is treated with special care under Oman's Personal Data Protection Law.
Draft, pending legal review
This document is an in-house draft, prepared for review by legal counsel in Oman. It is not legal advice, is not yet in force, and may change.
What health data we hold
- The consultation note written by your doctor.
- The visit summary, sick-leave certificate, or prescription the doctor issues to you.
- Any report or photo you or the doctor share during the consultation.
- Booking details: the time, the mode, and the fee.
The live video and audio of the consultation are never recorded and never stored.
Why we hold it, and your consent
Health data is a special category of personal data. We process it to let the doctor deliver and document your care, and to give you your own record. Before a consultation we ask for your explicit consent, and we record that consent with the time and the exact version of the document you accepted.
Where it is stored
We are building the service so that health data is stored on servers inside the Gulf. For health data, we do not rely on your consent alone to move it outside the region. The live consultation runs over an encrypted connection, and its video and audio are never stored anywhere.
Who can see it
A consultation note is visible to the treating doctor and to you only. A clinic owner or manager sees counts and revenue, never the content of a note. Under Oman's medical practice law a doctor may not disclose your information without your written consent, except in the narrow cases the law names. Sharing a record for a referral takes a separate, recorded consent from you.
How long we keep it, and your rights
We keep health data only as long as we need it, as set out in our data-retention schedule. You can ask to see your data, to correct it, or to raise a concern about how it is handled. If a data breach ever affects you, we act on it under our breach-response procedure.
This document is published in Arabic and English. If the two versions ever differ, the Arabic version is the one that applies.