Privacy Notice

1. About HealthOn

Health on Org ("HealthOn", "we", "us" or "our") provides medical tourism coordination and medical equipment supplier introduction services.

We are not a hospital or medical treatment provider. Medical advice, diagnoses and treatment decisions remain the responsibility of appropriately qualified healthcare professionals.

This notice explains how we collect, use, store, share and protect information submitted through our website and related communications.

2. Information We Collect

When you contact HealthOn, we may collect:

• Your name, email address, telephone number and country.
• The type of medical tourism assistance or equipment-related service requested.
• Information voluntarily provided during communications.
• Your inquiry status and assigned coordinator.
• Brief internal staff notes relating to an inquiry, limited to 1,000 characters.
• Your privacy acknowledgement, including the notice version and time accepted.
• Your optional preference to receive updates.
• Limited technical information necessary for security and spam prevention.

Our general inquiry forms are not intended for submitting medical records, prescriptions, diagnoses or detailed medical histories.

Please do not send sensitive medical documents through these forms.

3. How We Use Information

We use personal information to:

• Receive and respond to patient and business inquiries.
• Coordinate requested medical tourism services or supplier introductions.
• Communicate with you about your inquiry.
• Assign inquiries to authorized staff.
• Maintain operational and security records.
• Prevent spam, misuse and unauthorized access.
• Meet applicable legal obligations.

4. Optional Updates and Marketing

Our inquiry forms include an optional "keep me informed" checkbox.

This checkbox is not selected automatically.

If you select it, we may contact you with relevant service updates or promotional communications. You can withdraw your preference by contacting info@health-on.org.

Submitting an inquiry does not require agreeing to receive marketing communications.

5. Sharing Information

Where necessary to respond to your request, relevant information may be shared with healthcare providers, medical tourism partners, equipment suppliers or service providers.

We may also use technology and hosting providers to operate and secure our website and inquiry-management systems.

We do not sell personal information.

We will seek additional consent or provide further information where required before sharing sensitive medical information.

6. International Transfers

Some medical tourism or supplier requests may involve organizations outside Qatar.

Where an international transfer is necessary, we will take appropriate measures to protect personal information and comply with applicable legal requirements.

7. Storage and Security

Inquiry information is stored using the website's hosting and database infrastructure.

Access is restricted to authorized personnel. Staff use password-based authentication with an additional authenticator-app verification code.

Coordinators can access only inquiries assigned to them.

The system records inquiry status changes, assignments and deletions for accountability. Contact details are not duplicated in these activity logs.

For spam prevention and submission rate limiting, certain email and telephone identifiers are stored in a one-way protected form rather than as readable contact details.

No online system can guarantee absolute security.

8. How Long We Keep Information

Our current internal retention rules identify:

• Unsuccessful patient inquiries as eligible for deletion 90 days after closure.
• Closed clinic or equipment inquiries as eligible for deletion after 365 days without contact.

These periods indicate when records become eligible for deletion, not a guarantee of automatic deletion.

Automatic deletion is currently disabled. Authorized staff review and delete eligible records manually.

Records subject to a legal hold are retained until the hold is lifted and deletion is permitted.

Operational activity and audit records are retained separately for accountability and security purposes.

Operational activity and audit records are currently retained indefinitely, including after an inquiry is deleted. These records do not duplicate customer contact details. The retention of these records will be reviewed against applicable legal requirements.

9. Your Privacy Rights

Subject to applicable law, you may request access to your personal information, correction of inaccurate information, deletion where appropriate or withdrawal of consent.

To make a request, email info@health-on.org.

We may verify your identity before processing a request.

10. Children's Information

General website inquiries should be submitted by adults.

Parents or legal guardians should submit inquiries on behalf of children.

11. Changes to This Notice

We may update this Privacy Notice when our services, information-handling practices or applicable requirements change.

The website will display the applicable notice version. Where required, we will request acknowledgement of an updated notice.

12. Contact

Health on Org

Westbay, Doha, Qatar

Email: info@health-on.org