Privacy Policy

This Privacy Policy explains how AYZA Medicare ("AYZA", "we", "us", or "our") collects, uses, stores, and discloses personal data when you use our website, patient communications, and home healthcare services (collectively, the "Services").

AYZA Medicare is the data controller for the personal data processed under this Privacy Policy. You may contact us at info@ayzamedicare.com, by phone at +974 6606 6961 or +974 6606 6962, or by post at Office 27, Jera Building, The Commercial Avenue, Doha, Qatar.

Identity and profile data: name, age, date of birth, gender, national ID/passport details where required, and account profile details.

Contact data: postal address, email address, phone numbers, and emergency contact details.

Health and care data: symptoms, diagnoses, treatment plans, medication history, allergies, progress notes, clinical observations, and care preferences.

Payment and billing data: payment status, transaction references, invoices, and insurance or payer information where applicable.

Technical and usage data: IP address, browser type, device identifiers, website interaction logs, and cookie-derived analytics data.

Communications data: call records, email exchanges, messages, appointment notes, and support requests.

We collect personal data directly from you, your legal guardian, family members or authorized representatives, referring professionals, service providers acting on your instructions, and through your interactions with our website and communication channels.

We process personal data to assess care eligibility, plan and deliver home healthcare services, coordinate medical professionals, schedule appointments, maintain clinical records, process billing, and provide customer support.

We also process data to improve service quality, protect patient safety, prevent misuse, satisfy legal and regulatory obligations, and defend legal claims.

Where required, we rely on one or more lawful bases, including performance of a contract, compliance with legal obligations, protection of vital interests, public health or healthcare obligations, legitimate interests, and consent (for specific activities such as optional marketing communications).

Because we provide healthcare services, we process sensitive personal data related to health. We apply elevated safeguards, role-based access controls, need-to-know access standards, confidentiality obligations, and secure handling procedures for all health data.

Where processing is based on consent, you may withdraw consent at any time; however, withdrawal may affect our ability to provide some or all Services safely and lawfully.

We may share personal data with treating clinicians, nurses, therapists, laboratories, diagnostics providers, pharmacies, insurers/payers, payment processors, IT and hosting providers, and professional advisers where necessary for the purposes described in this policy.

We may disclose data to courts, regulators, law enforcement, public health authorities, or other governmental entities where legally required or where necessary to protect rights, safety, and legal compliance.

All third-party recipients are contractually or legally required to protect confidentiality and process personal data only for authorized purposes.

If personal data is transferred outside your jurisdiction, we implement appropriate safeguards as required by applicable law, including contractual protections, data minimization, and secure transfer controls.

We retain personal data only as long as necessary for care delivery, legal and regulatory recordkeeping, billing, audit, dispute resolution, and legitimate business purposes.

Retention periods vary by data type and legal requirements. When data is no longer needed, we delete, de-identify, or securely archive it according to applicable standards.

Our website may use cookies and similar technologies for core functionality, security, analytics, and performance improvement. You can manage cookie preferences via your browser settings; disabling some cookies may impact website functionality.

We maintain administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. Measures include encryption in transit where appropriate, access controls, secure infrastructure, monitoring, and staff confidentiality training.

No security measure is absolute; however, we continuously review and improve our controls to reduce risk and preserve patient trust.

Subject to applicable law, you may request access to your personal data, correction of inaccurate information, deletion in limited circumstances, restriction of processing, objection to certain processing activities, and portability of data where applicable.

You may also opt out of non-essential marketing communications at any time. We may need to verify identity before fulfilling rights requests.

Where services involve minors, we process data under instructions from parents, guardians, or authorized caregivers, and in accordance with applicable healthcare and child-protection obligations.

We do not make solely automated decisions that produce legal or similarly significant effects on individuals in the context of our care services.

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Material updates will be posted with a revised effective date.

For privacy questions, rights requests, or complaints, contact us at info@ayzamedicare.com. You may also lodge a complaint with the competent data protection or healthcare authority if permitted by applicable law.