Privacy Policy
Who we are
MedaZone is an online platform for booking medical appointments and managing visit records, operated by Client Care Solutions – CCS Global, based in Cairo, Arab Republic of Egypt. This page explains what data we collect, why, who sees it, and what you can ask us to do with it.
Our role and the clinic’s role
MedaZone is not a healthcare provider and does not practise medicine. We provide the tool you book your appointment with and your doctor writes their report in. The clinic you visit is responsible for your medical care and for your medical record held there; we store that record on its behalf and on its instructions.
What we collect
- Booking data: your name, phone or WhatsApp number, the clinic, branch and doctor, the date and time, and the visit type.
- Health data: what the doctor records during your visit — diagnosis, report, prescription, tests and imaging requested and their results, vital signs, allergies, and any files you or the clinic upload (photos of lab sheets, PDF reports).
- Date of birth, used to calculate age, because drug dosing and the reading of lab results depend on it.
- Limited financial data: amounts due and collected inside the clinic. We do not store card or bank account numbers.
- Technical data: IP address, sign-in records and operation timestamps, for security and to trace who opened your file.
Why we use it
To make and confirm your booking, to remind you of your appointment, to let your doctor follow your condition across visits, to issue prescriptions and test requests, to calculate what is due inside the clinic, and to protect accounts from compromise and misuse. The legal bases are performance of the service you asked for, your consent to the processing of your health data, and our legal obligations.
Separation between clinics — this is fundamental
Your file at each clinic is completely separate from any other clinic. Your medical data is never shared between two different clinics on the platform, and no clinic can view another clinic’s patients. This separation is enforced in the database itself, not merely by hiding screens.
Branches of the same clinic do share your file: if you visit the Maadi branch on Sunday and Nasr City on Thursday, Thursday’s doctor sees what was recorded on Sunday — this is deliberate, as it is the same care provider.
Who sees your data
- Inside your clinic: your doctor and clinic staff, each according to their role. Reception sees appointments and amounts, not diagnoses.
- WhatsApp (Meta): confirmations, reminders and verification codes travel over the WhatsApp Business service and are subject to Meta’s privacy policy. We do not put clinical detail in those messages.
- Our hosting provider: data is stored on the hosting company’s servers, currently in the United States. This means your data is processed outside Egypt.
- Authorities: only on a binding legal request.
We do not sell your data, rent it, or use it for third-party advertising.
How long we keep it
Patient files, prescriptions and medical records are kept for at least six months, and longer where the law or the clinic’s need to follow your condition requires it. Data is deleted or anonymised once its purpose has ended and the legal period has passed.
How we protect it
- All traffic to the site is encrypted (HTTPS).
- Medical files (lab photos and reports) are stored outside the site’s public path under random names, and are only served after the requester’s identity and clinic membership have been checked.
- Clinic staff sign-in requires two-step verification, with temporary lockout after failed attempts.
- Every access to a patient file is written to the activity log.
No system is perfectly secure; what we commit to is taking reasonable measures and informing you if a breach affects your data.
Your rights
Under Egypt’s Personal Data Protection Law No. 151 of 2020, you may ask to access your data, correct errors in it, delete it, object to its processing, and withdraw your consent. Some requests may conflict with a legal duty to retain the medical record, and we will explain why when that happens.
Note: the medical record belongs to your clinic, so deletion requests concerning clinical content are referred to that clinic and carried out on its instructions.
Children
An appointment for a minor is booked by their guardian, who holds the right to access, correct or delete their data.
Cookies
We use only what is necessary to run the session and remember your sign-in, display language and colour mode. We do not use advertising or tracking cookies.
Changes to this policy
We may update this page. Material changes are announced inside the platform before they take effect.
Contact
Client Care Solutions – CCS Global
37 Abdel Razak Al-Senhouri St., Cairo, Egypt
Email: management@ccs-global.net
Phone / WhatsApp: +20 105 5599 553
