DATA WE COLLECT (SUMMARY)
• Patients: full name, phone number, email address • Healthcare professionals: identity and credential verification documents • For certain services where available, such as assisted Blood Tests, patients may optionally upload a prescription or related document; it is stored privately for service operations and is not public profile or provider-discovery data • Sohhtak does NOT store or monitor phone calls or WhatsApp messages
1. Commitment and Scope
SOHHTAK ("we" or "the Platform") is committed to protecting the personal data of patients, family representatives, and independent healthcare professionals. This policy covers all data collected through our mobile application and verification processes. By using SOHHTAK, your personal data is processed in accordance with this policy and Lebanese Law No. 81/2018.
2. Data Controller
SOHHTAK acts as the Data Controller for personal data processed through the Platform, within the jurisdiction of the Republic of Lebanon. We act strictly as a technology intermediary to facilitate access to independent, verified healthcare professionals.
3. Categories of Personal Data Collected
SOHHTAK collects only the minimum data necessary to provide its services:
- Patient Data: Full name, phone number, and email address. For certain services where available, such as assisted Blood Tests, a patient may optionally upload a prescription or related document. SOHHTAK does not otherwise collect general medical records, diagnostic reports, medical images, precise GPS location, or payment information through this flow.
- Healthcare Professional Data: Healthcare professionals must provide verification documents including identification, professional license, diplomas, and curriculum vitae (CV). These documents are collected solely for credential verification and platform safety. They are not publicly displayed to patients and are stored securely.
- Booking Data: Service type, scheduled date and time, and booking status. No medical or clinical details are collected through the booking process.
4. Purpose and Use of Data
Data is used solely to facilitate the following:
- Verification: Identity and professional license checks for healthcare professionals.
- Operations: Account creation, booking, and scheduling.
- Optional Service Assistance: For certain services where available, preparing and coordinating a patient's request when the patient chooses to upload a prescription or related document.
- Governance: Dispute handling, platform safety, and legal compliance.
5. Communications
SOHHTAK does not provide in-app messaging between patients and healthcare professionals.
After booking confirmation, patients and healthcare professionals may communicate using external tools such as phone calls or WhatsApp. These communications occur outside the SOHHTAK platform and are not monitored, recorded, or stored by SOHHTAK.
Users share their contact details voluntarily for the purpose of coordinating healthcare services.
6. Data Sharing
- No Sale of Data: We do not sell or rent personal data to any third party.
- Limited Sharing: Data is shared only with verified parties directly involved in a booking (e.g., the assigned healthcare professional receives the patient name and phone number), or with legal authorities if required by law.
Data may be shared with secure infrastructure providers required to operate the platform (such as cloud hosting or authentication services). These providers only process data necessary for platform functionality and security.
7. Data Security and Retention
- Security Measures: We use technical and organizational measures, including encryption for sensitive documents and secure servers with controlled access, to protect your data.
- Retention: Personal data is retained only for as long as needed for the purposes described in this policy or as required by applicable law. When it is no longer needed, it is securely deleted or anonymized.
Verification documents are stored in Sohhtak-managed storage for credential verification and platform operations. They are not shown in patient-facing profiles.
For certain services where available, such as assisted Blood Tests, optional prescription or related-document uploads are stored in private Sohhtak-managed storage with restricted access and are used only for the relevant request and related operations. They are not shown in public profiles or provider discovery.
8. User Rights
Under Law No. 81/2018, users with an account on the platform have the right to:
- Access and Correction: View and request updates to inaccurate data.
- Deletion: Where in-app deletion is available, eligible account holders can delete their account directly in Account or Profile settings. Deletion of the old account is permanent and cannot be reversed. If registration is later permitted using the same email address, it creates a new account identity and does not restore the deleted account, verification or provider status, subscriptions, services, private documents, patient identity, booking or review ownership, previous access, or old sessions.
- Deletion Processing: When account deletion completes, access to the deleted account ends and active profile details are sanitized. Account deletion does not necessarily remove all historical booking records.
- Retained Records: Some historical records may be retained after account deletion, including booking history, transaction records, and system logs and audit records. Some retained records may still contain personal information or remain linked to the former account and may allow identification of the user. Deleting an account does not, by itself, make those records anonymous. For verified healthcare providers, certain provider account or compliance records may also be retained where required for platform safety, operational continuity, fraud prevention, or legal compliance.
- Legal Retention: Financial and accounting records may be retained as required by applicable laws.
- Deletion Assistance: If the user cannot access their account, they may contact support@sohhtak.com or use the public account deletion page to request deletion assistance.
- Withdraw Consent: Where processing is based on user consent.
Account deletion does not necessarily remove all historical booking records. Some retained records may still identify the user. For verified healthcare providers, uploaded verification documents including ID, CV, and professional certificates are permanently deleted from our systems. Notifications associated with the account are permanently deleted.
Where optional prescription or related-document upload is available, completing patient account deletion through the supported deletion process deletes the private uploaded file. The retained service-request record is cleared of its private-file reference, note, and personal contact snapshot.
To delete your account, visit our account deletion page.
SOHHTAK will respond to valid privacy requests in accordance with applicable law.
9. Contact and Governing Law
- Requests: For privacy inquiries, users may contact privacy@sohhtak.com. If a user cannot access their account and needs deletion assistance, they may contact support@sohhtak.com or use official in-app support channels.
- Law: This policy is governed by the laws of the Republic of Lebanon.