1. Introduction
Ummet Clinic ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ummet-clinic.kz or use our medical services.
Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.
2. Information We Collect
2.1 Personal Information
We may collect personal information that you provide directly to us, including:
- Full name
- Phone number
- Email address
- Date of birth
- Medical history and health information
- Insurance information
- Payment information
2.2 Automatically Collected Information
When you visit our website, we may automatically collect:
- IP address
- Browser type and version
- Device information
- Pages visited and time spent
- Referring website
- Geographic location
2.3 Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our website. You can control cookies through your browser settings.
3. How We Use Your Information
We use the collected information for the following purposes:
- Providing medical services and patient care
- Scheduling and managing appointments
- Processing payments and insurance claims
- Communicating with you about your treatment
- Sending appointment reminders and follow-up care information
- Improving our services and patient experience
- Complying with legal and regulatory requirements
- Marketing and promotional communications (with your consent)
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you have given explicit consent for processing
- Contract: To fulfill our contractual obligations for medical services
- Legal Obligation: To comply with healthcare regulations and laws
- Vital Interests: To protect your vital interests or those of another person
- Legitimate Interests: For our legitimate business interests that do not override your rights
5. Data Sharing and Disclosure
We may share your information with:
- Healthcare professionals involved in your treatment
- Insurance companies for claims processing
- Laboratory and diagnostic service providers
- Legal authorities when required by law
- Third-party service providers who assist in our operations
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
6. Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption of sensitive data
- Secure servers and databases
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
7. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
Medical records are retained in accordance with Kazakhstan healthcare regulations, typically for a minimum of 10 years.
8. Your Rights
Under applicable data protection laws, you have the following rights:
- Access: Request access to your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data (subject to legal obligations)
- Restriction: Request restriction of processing
- Portability: Request transfer of your data
- Objection: Object to certain processing activities
- Withdraw Consent: Withdraw consent at any time
To exercise these rights, please contact us using the information below.
9. Children's Privacy
Our services may involve treatment of children. We collect children's information only with parental or guardian consent and in compliance with applicable laws protecting children's privacy.
10. International Data Transfers
Your information may be transferred to and processed in countries other than Kazakhstan. We ensure appropriate safeguards are in place for such transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
12. Contact Information
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
13. Compliance with Laws
This Privacy Policy is designed to comply with:
- The Law of the Republic of Kazakhstan "On Personal Data and Its Protection"
- Healthcare regulations of the Republic of Kazakhstan
- International data protection standards