PRIVACY POLICY

Last updated: 5 August 2026

1. About this Privacy Policy

This Privacy Policy explains how WorldMed-Clinic collects, uses, stores, shares and protects personal data when visitors, patients, doctors, clinics, hospitals, pharmacies and other healthcare providers access or use the WorldMed-Clinic website, user accounts, professional profiles, appointment-booking functions, communication tools and related services.

WorldMed-Clinic is an international online platform designed to help users find healthcare professionals and medical organisations, communicate with them and arrange online or in-person healthcare services.

Intended platform operator: Alvion LLC
Registration number: [to be added after registration]
Registered address: [to be added after registration]
Privacy and support contact: info@worldmed-clinic.com

This Policy applies to:

worldmed-clinic.com;
patient and healthcare-professional accounts;
doctor and clinic profiles;
appointment-booking services;
online and in-person consultation arrangements;
patient dashboards;
professional dashboards;
document-upload and communication functions;
related services operated under the WorldMed-Clinic name.

2. The role of WorldMed-Clinic

WorldMed-Clinic operates as an international healthcare marketplace and technology platform.

WorldMed-Clinic does not replace a doctor, clinic, hospital, pharmacy or other licensed healthcare provider. Medical professionals and medical organisations remain responsible for their own professional activities, clinical decisions, diagnoses, prescriptions, treatment recommendations, medical records and compliance with the laws applicable to them.

Depending on the type of processing, WorldMed-Clinic may act as:

a data controller for platform accounts, security, bookings, professional profiles, communications, support and platform administration;
a service provider or processor when clinical information is stored or transmitted on behalf of a doctor, clinic or hospital;
a technical intermediary connecting patients with independent healthcare providers.

3. Healthcare professionals as independent controllers

Doctors, clinics, hospitals and other healthcare providers generally act as independent data controllers for clinical activities and medical records.

This may include:

symptoms and medical history;
consultation content;
diagnoses;
prescriptions;
medical certificates;
treatment recommendations;
clinical notes;
laboratory results;
scans and medical images;
documents uploaded by a patient;
documents uploaded by a healthcare professional;
medical correspondence;
follow-up information.

Healthcare professionals determine the legal basis, purpose and retention period for their clinical processing according to the laws and professional obligations applicable to them.

Requests concerning clinical records should normally be addressed directly to the relevant doctor, clinic or hospital. Where technically possible, WorldMed-Clinic may assist in forwarding or processing such requests.

4. WorldMed-Clinic as data controller

WorldMed-Clinic may act as the data controller for processing required to operate and protect the platform, including:

account registration and authentication;
user profile administration;
professional onboarding;
doctor and clinic profile publication;
booking and appointment management;
platform notifications;
customer support;
fraud prevention;
security monitoring;
technical logs;
platform improvement;
consent management;
reviews and ratings;
payment-status information;
dispute and complaint handling;
legal and regulatory compliance.

5. WorldMed-Clinic as a processor or service provider

WorldMed-Clinic may process clinical information on behalf of a healthcare professional or medical organisation when the platform is used to host or transmit:

patient questionnaires;
symptoms and medical history;
documents uploaded for a consultation;
consultation summaries;
prescriptions;
medical certificates;
treatment recommendations;
attachments exchanged between a patient and healthcare professional;
messages containing clinical information.

In these situations, WorldMed-Clinic processes the information only to provide the requested technical service and does not use clinical content for advertising, profiling or unrelated commercial purposes.

6. Personal data collected from patients

Depending on the services used, WorldMed-Clinic may collect:

6.1 Account and identity information

first name and surname;
email address;
telephone number;
country of residence;
preferred language;
time zone;
date of birth;
gender or sex, where relevant;
profile photograph;
authentication information;
account preferences;
communication preferences.

6.2 Appointment information

selected healthcare professional;
selected clinic or hospital;
appointment date and time;
online or in-person appointment type;
requested medical specialty;
appointment status;
cancellation and rescheduling information;
booking history.

6.3 Health and clinical information

Where a patient voluntarily provides such information for a consultation, this may include:

symptoms;
medical history;
allergies;
medications;
pregnancy information;
previous diagnoses;
treatment history;
laboratory results;
medical images;
referral documents;
prescriptions;
consultation reason;
free-text information;
documents and attachments.

Health information is treated as sensitive personal data and is subject to enhanced protections.

6.4 Communication information

messages sent through the platform;
support requests;
attachments;
correspondence with doctors, clinics or hospitals;
complaint information;
technical-support communications.

Users should avoid sending unnecessary medical information to general customer support.

7. Personal data collected from doctors and healthcare providers

WorldMed-Clinic may collect:

name and surname;
professional email address;
telephone number;
country;
professional title;
medical specialty;
languages spoken;
education;
qualifications;
medical licence number;
licence jurisdiction;
professional registration details;
clinic or hospital affiliation;
work address;
consultation types;
consultation prices;
availability;
profile photograph;
biography;
professional experience;
diplomas and supporting documents;
identity-verification information;
payment and subscription status;
public profile content;
account and security information.

WorldMed-Clinic may review submitted information to assess eligibility and platform trust and safety. Such review does not constitute a guarantee of medical competence, treatment quality or professional performance.

8. Clinics, hospitals and partner organisations

For clinics, hospitals and partner organisations, WorldMed-Clinic may collect:

organisation name;
legal and contact details;
address;
authorised representative details;
partner code;
account administrators;
affiliated healthcare professionals;
subscription information;
professional documentation;
service information;
billing and transaction information;
technical-access records.

9. Pharmacies and medicine-related services

Where pharmacy functionality is available, WorldMed-Clinic may process:

pharmacy identification and registration information;
authorised representative details;
product listings;
order information;
delivery information;
transaction status;
customer-service correspondence;
licence or authorisation information.

A pharmacy remains responsible for product legality, professional obligations, fulfilment, delivery, prescription requirements and compliance with applicable pharmaceutical laws.

10. Online consultations

Where the platform enables online consultations, WorldMed-Clinic may process the technical information required to arrange the consultation, including:

participant identifiers;
appointment time;
time zone;
meeting link;
connection status;
technical logs.

Unless explicitly stated otherwise, WorldMed-Clinic does not record or store the audio or video content of consultations.

A doctor or clinic must inform the patient separately if any consultation is recorded outside the platform.

11. In-person consultations

For in-person appointments, WorldMed-Clinic may process:

appointment date and time;
healthcare-provider address;
booking confirmation;
cancellation or rescheduling details;
limited operational information needed to manage the appointment.

WorldMed-Clinic is not responsible for the healthcare provider’s premises, clinical conduct or treatment outcome.

12. Messaging and document exchange

Where messaging or document exchange is available:

message content may be stored or transmitted to provide the service;
attachments may contain personal or health information;
healthcare professionals remain responsible for clinical use of the information;
WorldMed-Clinic does not use clinical messages for advertising;
access is restricted to authorised users and service personnel where necessary.

13. Reviews and ratings

Patients may be allowed to submit reviews about healthcare professionals or services.

Reviews must not contain:

confidential medical information;
personal data of third parties;
unlawful content;
discriminatory statements;
threats;
false or misleading claims;
information violating another person’s rights.

WorldMed-Clinic may moderate, reject, remove or anonymise reviews where necessary.

14. Payments

Payments may be processed by independent payment service providers such as Stripe or PayPal.

WorldMed-Clinic does not normally store full payment-card numbers, security codes or online-banking credentials.

WorldMed-Clinic may receive limited transaction information, including:

transaction identifier;
payment status;
payment date;
amount;
currency;
refund status;
dispute or chargeback status;
payer and recipient identifiers where necessary.

Payment providers process payment information under their own privacy notices and legal obligations.

15. Social login and authentication

Where users choose to register or sign in through services such as Google or Facebook, WorldMed-Clinic may receive limited account information authorised by the user, such as:

name;
email address;
account identifier;
profile image.

Healthcare professionals using social login may still be required to complete professional registration, identity verification and approval before their professional account becomes active.

16. Technical and usage data

WorldMed-Clinic may automatically collect:

IP address;
browser type;
device type;
operating system;
language;
time zone;
referring page;
pages visited;
session duration;
error information;
login history;
security events;
cookie preferences;
approximate location derived from IP address;
interaction and performance data.

This information is used for security, troubleshooting, service delivery and platform improvement.

17. Cookies and similar technologies

WorldMed-Clinic uses cookies and similar technologies for:

authentication;
security;
session management;
appointment booking;
language and time-zone preferences;
consent management;
platform performance;
analytics, where consent is required;
marketing measurement, where consent is required.

More information is available in the WorldMed-Clinic Cookie Policy.

18. Purposes of processing

WorldMed-Clinic may process personal data to:

create and manage accounts;
authenticate users;
verify healthcare professionals;
publish professional profiles;
facilitate appointments;
connect patients with healthcare providers;
enable communication and document exchange;
process subscriptions and payment-status information;
provide support;
maintain security;
prevent fraud and misuse;
investigate complaints;
improve platform performance;
comply with legal obligations;
establish, exercise or defend legal claims;
obtain and manage cookie consent;
send service-related communications;
send marketing communications where consent has been obtained.

19. Legal bases

Depending on the user’s location and the type of processing, WorldMed-Clinic may rely on:

performance of a contract;
steps taken before entering into a contract;
compliance with legal obligations;
legitimate interests;
consent;
protection of vital interests where applicable;
establishment, exercise or defence of legal claims;
healthcare-related legal grounds used by independent healthcare professionals.

Where consent is the legal basis, it may be withdrawn at any time. Withdrawal does not affect processing already carried out lawfully before withdrawal.

20. Special-category health data

Health data receives enhanced protection.

WorldMed-Clinic does not use clinical content for targeted advertising or to build advertising profiles.

Clinical information is processed only where necessary to:

provide a consultation-related service;
transmit information to the selected healthcare provider;
store information on behalf of a healthcare provider;
protect the user’s vital interests where legally permitted;
comply with applicable law;
establish, exercise or defend legal claims;
support healthcare services under the responsibility of a qualified professional.

21. Data sharing

WorldMed-Clinic may share personal data with:

doctors;
clinics;
hospitals;
pharmacies;
laboratories or other healthcare providers selected by the user;
hosting providers;
email and communication providers;
payment providers;
video-consultation providers;
authentication providers;
security and fraud-prevention providers;
analytics providers where consent has been obtained;
professional advisers;
auditors;
insurers;
regulators;
courts;
law-enforcement authorities where legally required.

WorldMed-Clinic does not sell personal data.

22. Service providers and processors

Third-party providers may process personal data only to the extent required to provide their services.

WorldMed-Clinic seeks to use contractual, organisational and technical safeguards, including:

confidentiality obligations;
access limitations;
data-processing agreements;
encryption;
security reviews;
international-transfer safeguards;
data minimisation;
retention controls.

23. International data transfers

WorldMed-Clinic is designed as a global platform. Personal data may therefore be processed in countries other than the user’s country of residence.

Where required, WorldMed-Clinic will use appropriate safeguards, which may include:

adequacy decisions;
standard contractual clauses;
data-processing agreements;
contractual confidentiality obligations;
encryption;
access controls;
data minimisation;
transfer-risk assessments.

Independent healthcare providers and payment providers remain responsible for their own international data transfers.

24. Data retention

Personal data is retained only for as long as necessary for the relevant purpose.

Indicative retention periods may include:

active account data: while the account remains active;
account administration records: up to three years after account closure;
customer-support records: up to twenty-four months;
technical and security logs: generally up to ninety days;
payment-status and dispute records: up to twenty-four months after resolution;
professional-verification records: while the professional account is active and up to three years afterwards;
consent records: up to twelve months or longer where legally necessary;
reviews: while published and for a limited moderation period afterwards;
clinical documents: according to the healthcare provider’s instructions and applicable healthcare law.

Where immediate deletion from backups is not technically possible, data may remain protected in backup systems until the normal backup-retention cycle expires.

25. Security

WorldMed-Clinic uses reasonable technical and organisational measures designed to protect personal data, including:

role-based access;
password and authentication controls;
multi-factor authentication where available;
encryption in transit;
restricted administrative access;
security logging;
backups;
vulnerability management;
staff or contractor confidentiality obligations;
controlled development and deployment procedures;
incident-response procedures;
data minimisation;
secure deletion where appropriate.

No online service can guarantee absolute security. Users are responsible for protecting their login information and notifying WorldMed-Clinic of suspected unauthorised access.

26. Data breaches

Where required by law, WorldMed-Clinic will assess personal-data incidents and notify the competent authority and affected individuals within the legally required period.

Where a doctor, clinic or hospital is the data controller, WorldMed-Clinic may assist that provider in investigating and responding to the incident.

27. User rights

Depending on applicable law, users may have the right to:

receive information about processing;
access their personal data;
request correction;
request deletion;
restrict processing;
object to processing;
withdraw consent;
receive data in a portable format;
request transfer to another controller where applicable;
lodge a complaint with a supervisory authority;
request human review of certain automated decisions where applicable.

Rights may be subject to legal limitations, healthcare-record obligations and the rights of other persons.

28. Clinical-record requests

Doctors, clinics and hospitals generally control clinical records.

Requests concerning:

diagnoses;
prescriptions;
medical notes;
treatment records;
consultation content;
medical certificates;
clinical attachments;

should normally be addressed to the relevant healthcare provider.

WorldMed-Clinic may assist in forwarding the request where feasible.

29. How to submit a privacy request

Privacy requests may be sent to:

info@worldmed-clinic.com

The request should explain:

the user’s name;
the relevant account email;
the right being exercised;
the information or account concerned.

WorldMed-Clinic may request reasonable identity verification to prevent unauthorised disclosure.

30. Account deletion

Users may request account deletion through available account settings or by contacting:

info@worldmed-clinic.com

Deletion may be limited where data must be retained for:

legal compliance;
fraud prevention;
payment disputes;
medical-record obligations;
legal claims;
security investigations;
protection of other users.

31. Children and minors

Unless a specific service expressly states otherwise, WorldMed-Clinic is intended for adults aged eighteen or over.

Services for minors should be used only through a parent, guardian or other legally authorised representative, subject to applicable law and healthcare-provider requirements.

32. Automated decision-making

WorldMed-Clinic does not make clinical diagnoses or treatment decisions through automated processing.

Professional verification, fraud detection or security controls may involve automated signals, but significant professional or account decisions should be subject to appropriate human review where required by law.

33. Marketing communications

WorldMed-Clinic may send marketing communications only where permitted by law.

Users may unsubscribe through the link contained in the communication or by contacting:

info@worldmed-clinic.com

Service-related messages concerning accounts, bookings, security or legal matters may still be sent where necessary.

34. External websites

The platform may contain links to third-party websites.

WorldMed-Clinic is not responsible for the privacy practices, security or content of external websites. Users should review the relevant third-party privacy notices.

35. Changes to this Privacy Policy

WorldMed-Clinic may update this Privacy Policy to reflect:

new services;
operational changes;
legal developments;
security requirements;
new service providers;
changes in processing activities.

The updated version becomes effective when published. Material changes may also be communicated through the platform or by email.

36. Contact

Questions concerning this Privacy Policy may be sent to:

WorldMed-Clinic
Intended operator: Alvion LLC
Registration number: [to be added after registration]
Registered address: [to be added after registration]
Email: info@worldmed-clinic.com