1. Who this notice covers

AlAnees Health is responsible for the information it collects to operate Anees Health and coordinate your care. This notice covers patients, people arranging care, authorised caregivers, website visitors, and people contacting us.

A hospital, laboratory, clinician, payment provider, or messaging service may also have its own responsibilities and privacy notice for the information it processes. This notice does not replace those notices.

2. Information we collect

The information needed depends on the service you request. We collect information you provide, information created during care, and relevant information supplied by authorised caregivers or healthcare professionals.

• Identity and contact details: name, age or date of birth, telephone, email, home-visit address, and emergency contacts; identity or authority documents where needed to verify a patient or representative.
• Care information: the reason for a visit, medical history, allergies, medicines, clinical notes, observations, care plans, referrals, test results, and documents you or your care team provide.
• Service and payment information: appointments, package selection, quotations, invoices, payment references and status, and correspondence about bookings or complaints.
• Technical information: IP address, browser and device information, security logs, cookies, pages viewed, and interactions with our website. Location details may be used to arrange a home visit; permission-based device location is separate from the address you provide.

3. Why we use information

We use relevant information to respond to enquiries, assess service suitability, arrange and deliver care, coordinate the treating team, maintain a shared medical profile, communicate with authorised caregivers, process payments, and handle service issues.

We also use information to protect accounts, investigate misuse, maintain system reliability, meet applicable record-keeping duties, and establish or defend legal claims. Public website measurement and advertising technologies are described separately below.

Egypt’s Personal Data Protection Law No. 151 of 2020 and Executive Regulations No. 816 of 2025 govern applicable electronic personal-data processing. Processing must have an applicable legal basis; sensitive health information requires the additional protections, permissions, and consent required by law. Accepting website terms is not blanket consent to unrelated medical-data uses.

4. Your care team and caregivers

Anees coordinates care around a shared medical profile. Relevant records may be available to assigned doctors, nurses, therapists, care managers, and staff who need them for their responsibilities. Referrals and diagnostic requests may require sharing relevant information with a hospital, laboratory, or imaging provider.

A person paying for care or booking a visit does not automatically have unrestricted access to the patient’s records. Access and updates depend on the patient’s authorisation, verified representative authority, and applicable law. Tell us promptly if a caregiver’s authority changes.

For children or patients unable to act for themselves, we may need evidence of a parent’s, guardian’s, or other lawful representative’s authority. The patient’s interests and applicable consent requirements remain central.

5. Service providers and other disclosures

We use providers for website hosting, clinical-record software, secure file storage, communications, payment processing, and technical support. Relevant information may be processed by these providers to perform their services. Access should be limited to the purpose of that service.

Online payments are processed through the payment options presented at checkout, including Kashier where offered. We receive transaction references and payment status. Do not send us card security codes, passwords, or one-time payment codes.

We may disclose information where required by a lawful request, to meet applicable duties, or where legally permitted to protect a person’s safety or address fraud. Medical information is not offered for sale. Advertising and analytics disclosures on the public website are described below.

6. Cookies, analytics and advertising

The website uses necessary technologies for authentication, security, language preferences, and booking functions. Blocking these may prevent parts of the service from working.

The public website also uses Microsoft Clarity for usage analytics and session replay, Meta Pixel for advertising measurement, and Google Ads tags where configured. These providers may receive identifiers, IP and device information, page URLs, and interaction events, and may process information under their own privacy terms.

Browser settings can block or delete cookies and limit some tracking, but may not prevent every technical request. Contact us to object to marketing or withdraw consent. We do not describe this notice itself as your consent to advertising cookies or sensitive-data processing.

Please avoid entering medical details into general website search or marketing enquiry fields. Share clinical documents through the care team’s designated channel.

7. Messages, calls and external services

When you contact us by phone, email, or WhatsApp, we use your contact details and message to respond and coordinate the requested service. WhatsApp and email providers process communications under their own terms; avoid sending unnecessary sensitive details through them.

A messaging provider’s systems are separate from Anees’s patient-record system. Deleting a message or record from Anees does not necessarily remove a copy held by a recipient or external provider.

We do not rely on this notice as permission to record a consultation. Any proposed recording requires a separate explanation of its purpose, access, retention, and the consent or other authority required by law.

8. Storage location and security

Anees patient records are stored in Egypt. This statement concerns the patient-record system; it does not mean every provider involved in website analytics, payment, email, or WhatsApp processes all information in Egypt.

Our platform uses account authentication, role-based access controls, audit logging, and protected communication channels to help protect information. Security also depends on operational controls and the providers involved. No website, network, or storage system can be guaranteed completely secure.

Any transfer of personal information outside Egypt must be assessed against applicable Egyptian requirements, including required permissions and safeguards. Using an international provider does not remove these obligations.

Report suspected unauthorised access promptly. Where an incident triggers notification duties, notifications must be made to the relevant authority and affected people as required by law.

9. How long information is kept

Retention depends on the record’s purpose, the care relationship, medical and accounting obligations, and the need to resolve complaints or legal claims. Clinical records, payment records, and technical logs need not have the same retention period.

A request to close an account does not automatically erase clinical or financial records that must be retained. Where a record cannot be deleted, we will explain the applicable reason when responding to your request. Backup copies may remain until the relevant backup cycle expires, subject to necessary safeguards.

You can ask us which retention requirements apply to your information and how a deletion request would be handled.

10. Your choices and rights

Depending on applicable law and the circumstances, you may request access to your information, a copy, correction of inaccurate or incomplete details, deletion, restriction of particular uses, or withdrawal of consent. You may also object to direct marketing and complain to the Personal Data Protection Center.

We may need to verify your identity and authority before releasing or changing records. A request may be limited by clinical record integrity, another person’s privacy, or a legal retention obligation. Corrections to clinical records may be recorded as amendments rather than erasing the original entry.

Consent withdrawal applies to future consent-based processing. It does not undo processing already lawfully performed, and necessary medical or legal record-keeping may continue. We will explain any effect on services that require the information and respond within applicable legal time limits.

11. Updates to this notice

The date above identifies this version. Material changes will be explained through an appropriate website notice or direct communication where required. A new policy does not itself authorise a new use of sensitive data; fresh consent or another valid legal basis must be obtained where required.

English and Arabic versions are provided for accessibility. Contact us if you notice a difference; neither version limits protections required by applicable law.