Privacy notice
This is a draft the clinic has not approved yet; it may change before it is final.
Booking requests
The booking form asks for your name, your mobile number, the treatment you are interested in, a preferred day and time, and an optional note. It asks for no medical details.
When you send it, we keep a record of the request: those details, the page's language, the page you came from, the time, and a one-way scrambled code of your internet address that is used only to limit repeated requests. WhatsApp then opens with the message ready; you send it from your own number, and that conversation follows WhatsApp's own terms.
Reception can read booking requests so they can get back to you.
Patient records and the patient portal
When you become a patient, reception records:
- your name in Arabic and English, your mobile number and your file number
- your date of birth, gender and email, if you give them
- your treatment plans and sessions, their dates and their status
- internal notes written by the clinic's team
If reception gives you a portal login, or you open one yourself on the website, you sign in with your mobile number and password to see your own sessions, and you can change your password from your profile. When you sign up on the website, we record your name in Arabic and English and your mobile number in a new file, and reception checks them at your first visit. Your password is stored encrypted: nobody can read it, the clinic's team included. You see only your own record; the clinic's team sees patients' records so they can follow their care.
When a wrong password is typed, we keep a one-way scrambled code of the number or email and of the internet address for one day only, to stop anyone guessing passwords.
Before-and-after photos
A before-and-after photo or video appears on the site only with the patient's full consent to publication. The photos and videos are stored privately and can be seen only while they are published. The women's health department never shows before-and-after photos.
To withdraw your consent, speak to reception and the photos will be taken off the site.
Where the information is kept
The database, the logins and the files are kept with Supabase in Frankfurt, Germany. The website runs on Vercel; the part that receives forms and sign-ins runs in Frankfurt too.
The confirmation code you receive on WhatsApp when you open an account on the website is sent by Wevlix, which receives your mobile number and the code. Emails (confirming an address) are sent by Resend, which receives the email address.
Cookies
We use no advertising, tracking or visitor-statistics cookies.
- signing in sets cookies that keep you signed in until you sign out
- the portal remembers the language you chose for a year
The contact page shows a map from OpenStreetMap; when it loads, the map service receives your internet address. Fonts, images and video are served from our own site.
How long information is kept
The clinic has not yet set how long booking requests and patient records are kept.
Questions about your information
To ask about the information we hold about you, or to correct it, contact reception:
- +963 945 983 003
- cureandcaremc@gmail.com
- Abu Rummaneh, opposite the Saudi Embassy, next to the International Bank, Damascus
