Privacy Policy

What we collect

We collect two kinds of data:

Parent data: name, mobile number (WhatsApp), email address, and the payment details, which are processed by the payment gateway and not by us.
The child's medical data: name, date of birth, weight, previous operations or catheterizations, current medications, and the files you upload, such as echocardiogram reports, imaging scans, and video clips.

A child's medical data is sensitive data, and we treat it on that basis.

Why we collect it

We use this data for one purpose: to enable the doctor to read your child's condition and issue a consultant's opinion, and to manage your request (payment, notifications, follow-up questions, and booking the video call if you request one). We do not use your child's medical data for marketing and we do not sell it to anyone.

Where it is stored

The files are stored in a private folder on the site's server at the hosting company Hostinger, shielded from direct access over the internet. A file cannot be opened until it has been verified that you are the owner of the request, or that the person asking is the doctor.

Backups of the medical files remain on the hosting company's servers and are not uploaded to any external cloud storage service.

The site is blocked from search engines during the setup period, and order and file pages do not appear in search results in any case.

How long we keep it

Medical files are deleted automatically after 24 months from the date of the consultation. We send you an email notice fourteen days before deletion so that you can download your copy.

You can ask for deletion at any time before that. The accounting data for the order (order number, amount, payment date) is kept for the period Egyptian law requires for commercial records.

Who sees it, and who we share it with

Access to your child's files is limited to the doctor. No other party sees them except to the extent needed to run the service, and only the following:

Paymob: processing card, wallet, and Fawry payments inside Egypt. It receives the payment data, not the medical files.
PayPal: processing dollar payments from outside Egypt. It receives the payment data, not the medical files.
Daily.co: running the video call room, if you request that service. The call is neither recorded nor stored.
The email provider: sending the order and reply notifications.
Google Analytics: anonymous visit statistics, which do not run until you have consented to analytics cookies.
WhatsApp: only if you choose to message us there.

We may disclose data where Egyptian law obliges us to, on an official request from a competent authority.

Your rights

Under Egyptian Personal Data Protection Law No. 151 of 2020 and its executive regulations, you, as the data subject or the guardian of the data subject, have the right to:

Know what data we hold about you and your child, and to access it.
Correct data that is inaccurate, or complete data that is incomplete.
Request erasure of the data, within the limits the law allows.
Withdraw your consent to the processing of the data.
Object to the processing, or restrict it.
Lodge a complaint with the authority competent for personal data protection in Egypt.

To exercise any of these rights, write to us from the “Contact” page or over WhatsApp, and we will reply within the period the law sets.

Cookies

We use as few cookies as we can:

ekshef_currency: stores the currency you are browsing in (pounds or dollars).
ekshef_lang: stores the display language.
Session and login cookies: needed for the cart and the account to work, and cannot be switched off.
Analytics cookies: not switched on until you consent, and you can withdraw that consent at any time.

Getting in touch about privacy

For any question about your data or your child's, write to us from the “Contact” page or on WhatsApp. We treat privacy requests as a priority.