Kurdistan Doctors ("we", "us", or "our") operates the Kurdistan Doctors platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform.

We take your privacy seriously. Please read this Privacy Policy carefully. If you disagree with its terms, please discontinue use of the platform.

By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

We collect several types of information in connection with our Service:

✓Account Information: When you register, we collect your name, email address, and password (stored as a secure hash).

✓Profile Data (Practitioners): Doctors registering on the platform provide their specialty, license number, clinic address, working hours, phone number, and photo.

✓Usage Data: We automatically collect information about how you use the platform, including pages visited, search queries, filters applied, and time spent on the platform.

✓Device & Technical Data: IP address, browser type and version, operating system, device identifiers, and referral URLs.

✓Favorites & Preferences: If you are a registered user, we store which doctors you have saved to your favorites.

✓Communications: If you contact us via WhatsApp or email, we retain those communications for support purposes.

We use the collected information for the following purposes:

✓To provide, operate, and maintain the platform and its features

✓To create and manage your user account

✓To verify and display medical professional credentials

✓To personalise your experience and remember your preferences

✓To process and display your saved favorites

✓To monitor and analyse platform usage and trends to improve our Service

✓To send administrative emails regarding your account or changes to our policies

✓To respond to your comments, questions, and support requests

✓To detect, prevent, and address technical issues, fraud, or abuse

✓To comply with applicable legal obligations

We process your personal data under the following legal bases:

✓Contractual Necessity: Processing required to deliver the Service you have requested (e.g., account management, displaying your saved doctors).

✓Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our platform, preventing fraud, and ensuring platform security.

✓Legal Obligation: Processing required to comply with applicable laws and regulations in the Kurdistan Region and Iraq.

✓Consent: Where you have given us explicit consent to process your data for a specific purpose, such as receiving marketing communications.

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

✓Service Providers: We may share data with trusted third-party vendors who assist us in operating the platform (e.g., hosting providers, analytics services). These parties are contractually bound to keep your data confidential.

✓Medical Professionals (Public Profile Data): Information submitted by practitioners for their public profile (name, specialty, clinic location, phone number, working hours) is visible to all platform users.

✓Legal Requirements: We may disclose your information if required by law, court order, or governmental authority.

✓Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

✓With Your Consent: We may share your data with third parties when you have explicitly consented to such sharing.

Medical professionals who register or are listed on our platform should be aware that the following information is publicly visible to all platform users:

✓Full name and professional title

✓Medical specialty and sub-specialty

✓Clinic name(s) and address(es)

✓Working schedule and clinic hours

✓Professional photo (if provided and subscription tier permits)

✓Phone number and contact details

✓Verification badge status

Practitioners may contact us to update or remove their publicly visible information at any time.

We use cookies and similar tracking technologies to enhance your experience on our platform.

✓Essential Cookies: Required for the platform to function correctly, such as maintaining your login session.

✓Analytics Cookies: Help us understand how users interact with the platform so we can improve the experience.

✓Preference Cookies: Remember your settings such as selected language and city filters.

You can control or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of the platform.

We do not use advertising or third-party tracking cookies.

We retain your personal information for as long as necessary to provide the Service and fulfil the purposes outlined in this Privacy Policy.

✓Account data is retained for the duration of your account and for up to 12 months after account deletion, to comply with legal obligations.

✓Usage and analytics data is retained in anonymised form for up to 24 months.

✓Communications with our support team are retained for up to 36 months.

You may request deletion of your account and associated data at any time by contacting us.

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

✓Passwords are hashed using industry-standard algorithms and are never stored in plain text.

✓All data transmission between your device and our servers is encrypted using TLS/HTTPS.

✓Access to personal data is restricted to authorised personnel on a need-to-know basis.

✓We conduct regular security reviews and vulnerability assessments.

IMPORTANT: Despite our best efforts, no security system is impenetrable. We cannot guarantee absolute security of your data transmitted over the internet.

You have the following rights regarding your personal data:

✓Right of Access: Request a copy of the personal data we hold about you.

✓Right to Rectification: Request correction of inaccurate or incomplete personal data.

✓Right to Erasure: Request deletion of your personal data ("right to be forgotten"), subject to legal obligations.

✓Right to Restriction: Request that we limit the processing of your personal data.

✓Right to Data Portability: Request your personal data in a structured, machine-readable format.

✓Right to Object: Object to our processing of your personal data for certain purposes.

✓Right to Withdraw Consent: Where processing is based on consent, withdraw consent at any time.

To exercise any of these rights, please contact us using the details in the Contact section below.

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to delete such information from our systems.

If we become aware that we have collected personal data from a child under 18 without verification of parental consent, we will delete that information as quickly as possible.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons.

We will notify you of any material changes by posting the updated Privacy Policy on this page with a new "Last updated" date.

For significant changes, we may also notify registered users via email or a prominent notice on the platform.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:

We aim to respond to all privacy-related inquiries within 5 business days.