Privacy and Data Protection Policy
Last updated: September 2, 2026
This Policy explains how personal data is handled through the Dr Sara Clinic website and its related booking and payment services. Dr Sara Tarek Abdelhalim, as the sole proprietor trading as Dr Sara Clinic, is responsible for the personal data for which the Clinic determines the purposes and methods of use, within the limits of applicable laws and professional standards.
1. Scope of this Policy
Use of the website.
Contact and booking forms.
Appointment management and related messages.
Electronic payments and invoices.
Information submitted by users through the website.
2. Personal Data We May Collect
Depending on the service requested, the Clinic may collect only the data it needs, including:
Name, age and date of birth.
Telephone number and email address.
Country and place of residence.
Booking details, type of service and appointment time.
Messages related to a booking.
Information submitted through contact or assessment forms.
Invoice details and payment confirmation data.
Technical data needed to operate and secure the website, such as the IP address, device type and browser type.
3. Health and Psychological Information
The Clinic treats health and psychological information provided by a client for assessment, treatment or follow-up as confidential and handles it in accordance with applicable professional and legal standards.
4. How We May Use Personal Data
Personal data may be used to:
Create and manage a booking.
Communicate about an appointment or service.
Verify identity when necessary.
Provide assessment, treatment and follow-up services.
Process payments and issue invoices.
Handle refunds and payment disputes.
Operate and secure the website and prevent misuse.
Meet professional, legal or regulatory requirements.
Establish, exercise or defend legal rights.
Protect the safety of the client or others where the law requires or permits this.
5. Limits on the Use of Personal Data
The Clinic uses personal data only for purposes connected with bookings, requested services, transaction management and applicable professional or legal requirements. Data is used only to the extent appropriate for the service. It is not used for unrelated purposes unless this is permitted under the applicable rules.
6. Electronic Payments and Paymob
Electronic payments are processed through Paymob, an external payment service provider. The Clinic may send Paymob the information needed to complete a transaction, such as:
The client’s name and necessary contact details.
The transaction amount, number and date.
Technical and financial information required to process the payment.
Information needed to verify the transaction or prevent fraud.
Information needed to process a refund or payment dispute. When a client enters card details directly on a Paymob payment page, the Clinic does not normally receive the full card number, security code or PIN. This depends on the technical payment setup used. The Clinic does not intentionally include a diagnosis, mental health condition, session content, clinical notes, treatment plan or medication details in payment transaction data. The Clinic uses general transaction descriptions, such as “Dr Sara Clinic Consultation” or “Appointment Service”. Information collected directly by Paymob is governed by Paymob’s own privacy policy and its legal and contractual obligations.
7. Processing Outside Egypt
Some service providers may use systems or technical infrastructure located outside the Arab Republic of Egypt. Any processing or access outside Egypt is subject to the applicable requirements and safeguards. Payment transaction data sent by the Clinic to a payment provider does not include treatment records or clinical notes.
8. Confidentiality of Medical and Psychological Information
Medical and psychological information is treated as sensitive and confidential. It is disclosed only:
With the data subject’s consent.
When there is a legal obligation or an order from a competent authority.
When disclosure is required or permitted to protect the safety of the client or others.
When it is necessary to share the minimum information with a healthcare provider involved in the client’s treatment, in accordance with professional and legal standards. Any disclosure is limited to the information necessary for the relevant purpose.
9. Sharing Data with Service Providers
The Clinic may use service providers for website hosting, booking, payments, communications or technical support. Only the data needed to provide the relevant service is shared, and only within the permitted limits. Data may also be shared with an accountant, legal adviser, official authority or regulator when necessary or required.
10. Data Protection
The Clinic uses appropriate measures to protect personal data and keep it confidential as far as reasonably possible. These measures include:
Restricting access to personal data.
Protecting accounts and login details.
Using suitable systems to store data.
Limiting unauthorised access or use.
Handling any data-security incident in accordance with the procedures in place.
11. How Long We Keep Personal Data
Personal data is kept for as long as needed for the purpose for which it was collected, while taking into account medical, professional, financial, tax and legal record-keeping requirements. Some records may be kept after the service ends when this is required or necessary to establish, exercise or defend a legal right. After the purpose and required retention period have ended, the data is deleted or anonymised using an appropriate method whenever this is possible and required.
12. Your Data Rights
After identity verification, and within the limits of the applicable rules, a data subject may ask to:
Know what personal data the Clinic holds about them.
Access their data or receive a copy where available.
Correct or update inaccurate data.
Request deletion of data where there is no reason to keep it. The Clinic may be unable to fulfil a request if it conflicts with a professional or legal obligation, affects the rights of others, or if the data must be kept to establish, exercise or defend a legal right.
13. Children’s Data
Children’s data is processed only when necessary and after consent has been obtained from a parent or legal guardian, whose authority may be verified as appropriate. Anyone providing information on behalf of a child confirms that they have the legal authority to do so and that the information provided is accurate. A child’s data is treated confidentially and with proper regard for the child’s interests and safety.
14. Cookies
The website may use essential cookies to:
Operate the website.
Secure booking and payment services.
Save basic settings.
Improve technical performance. Users can control cookies through their browser settings. Disabling essential cookies may affect some website functions.
15. Other Websites and Services
Some website links may take users to another service, such as a payment page or a communication platform. Information submitted directly to those services is governed by their own privacy policies.
16. Updates to this Policy
This Policy may be updated to reflect changes in services, the way data is used, or applicable requirements. The date of the latest update will be shown on this page.
17. Contact Us
For privacy questions or to make a request relating to personal data, please contact:
Dr Sara Clinic – Dr Sara Tarek Abdelhalim
Email: info@dr-saraclinic.com
Telephone: 00201008064949
Address: 14 Faculty of Medicine Street, opposite the Catholic Church, First Floor, Raml Station, Alexandria, Egypt
Website: www.dr-saraclinic.com
Requests are reviewed after the requester’s identity has been verified and are handled in accordance with the applicable rules and procedures.
