Privacy Policy

1Who we are

The Q Clinic clinic-management platform is provided by Q Tech Solutions, 6th of October City, Giza Governorate, Egypt (“we” or “the provider” in this policy).

2Who is responsible for what

• The clinic (the subscribing doctor) is responsible for its patients’ data and decides how it is used: it enters the data and sets its purpose.
• We process that data on the clinic’s behalf and only on its instructions, to run the platform for it, and we use it for nothing else.
• We are responsible for the doctor and staff account data needed for the subscription and for signing in.

3Data processed on the platform

• Account data: the doctor’s or staff member’s name, username, phone number, email, and profile photo if any. Passwords are stored in an encrypted form that cannot be recovered and that no one can read.
• Patient data entered by the clinic: name, phone number, date of birth, appointments, examinations and diagnoses, prescriptions, dental chart, medical files and images, and payments.
• Operational data: a log of actions on the platform (who did what, and when), the IP address at sign-in and for some actions to protect accounts from break-in attempts, and notification subscriptions on devices.
• Prescription links: when a prescription is sent to a patient as a link, we record only how many times the link was opened and when it was last opened, so the doctor knows the patient received it.

4Why the data is used

Data is used only to provide the service to the clinic: scheduling, keeping the medical record, printing and sending prescriptions, accounts and reports, notifications, backups and technical support.

We do not sell any data, we do not use medical data for advertising or marketing, and we look at patient data only when the clinic asks us to solve a technical problem.

5Cookies

We use only the cookies needed to run the platform: the sign-in session, “remember me”, language, appearance (light or dark) and the hide-amounts choice. We use no advertising cookies, tracking tools or third-party analytics.

6Who the data is shared with

• Hosting provider: the data is kept on the servers of a hosting provider we contract with to run the platform.
• Google Drive: the clinic’s files and images, and a daily backup of its data, are kept in a folder of the clinic’s own that is shared with the doctor.
• WhatsApp: booking and prescription messages are sent from the clinic’s own phone through the WhatsApp app, when a clinic staff member or the doctor presses send. We send no messages ourselves and cannot see the conversations.
• Notifications: alerts reach the clinic users’ devices through the browser’s notification service, and through Telegram if the doctor turns it on. Alerts carry brief information only.
• Authorities: when a competent authority requires the data under the law or a court order.

We share the data with no one else.

7How the data is protected

• Encrypted connections (HTTPS) between devices and the platform.
• Permissions set by the doctor for each staff member, and a log of important actions.
• Protection against password-guessing attempts.
• A daily backup.
• Prescription links are digitally signed, expire after seven days, and can be stopped by the doctor at any time.

Still, no online system is one hundred per cent secure. If an incident affects the data, we notify the clinic concerned and the competent authorities as the law requires.

8How long the data is kept

We keep the data for as long as the subscription lasts. If the subscription ends without renewal:

• The first seven days: the account becomes read-only, and the clinic can export its data.
• The next seven days: the account is suspended.
• After that: we may delete all the account’s data from our servers for good; it cannot be recovered once deleted.

We therefore advise the clinic to export its data and keep a copy before the subscription ends. If the clinic asks to end the contract, we let it export its data and then delete it, unless the law requires us to keep it longer.

9Patients’ rights

Patients have the right to know about, see, correct and update their data, and the other rights the law gives them. Because the clinic decides on its patients’ data, a patient should send the request to the clinic directly, and we help the clinic carry it out.

10Children’s data

Data of patients under age is recorded by the clinic with the knowledge of a parent or guardian.

11Changes to this policy

If we change this policy in any important way, we notify the doctor inside the platform and ask for acceptance of the new version before use continues. The date of the last update is shown at the top of this page.

12Contact us

Q Tech Solutions — 6th of October City, Giza Governorate, Egypt.
For privacy questions: the support tickets inside the platform. If you are a patient, please contact your clinic directly.