Doctors & Service Providers Privacy Policy

1Who we are, and your role as a doctor or facility owner

Masri & Jazairi For Trading LLC

Registered in the Commercial Register under No. 0311009290 dated 22/11/2009, the operator of the Doctors.sy platform. When you use the platform to manage your patients and appointments, Doctors.sy acts in two capacities: as the data controller for the professional and financial data of your account, and as a processor on your behalf for the patient data that you or your staff enter into the system. You remain legally and professionally responsible for the accuracy of diagnosis and treatment and for the confidentiality of your patients’ records.

2Who this document covers

• Doctors registered on the platform with an individual account
• Owners of clinics and medical centres (facilities)
• Facility staff added by the doctor or owner (reception, accounting, nursing, administration)
• Suppliers and technical partners linked to the facility account

3Registration and professional licence data

When a doctor or facility account is created, we collect: professional name and specialty, licence or syndicate membership number and any document proving the legal right to practise, clinic or centre address, working hours and listed prices, and official contact details. The account is not activated to receive bookings until the licence details have been verified.

4Staff data and permissions within your account

When you add a staff member to your facility account, we collect their name, phone number, email and job title, and you define precisely the permission granted to them (for example: a receptionist sees appointments only, an accountant sees invoices and the wallet, a nurse accesses medical records without wallet data). Doctors.sy enforces this role-based control technically so that no staff member exceeds the scope granted to them, while you — as the doctor or facility owner — remain responsible for choosing the right permission for each staff member, supervising their use of the system, and revoking their access as soon as their relationship with the facility ends.

5Patient data you access as a doctor or facility

When a booking is confirmed, you receive only the patient data you need: name, phone number, reason for the visit if given, and any medical file the patient uploaded specifically for you. This data is entrusted to you, and its permitted use is limited to:

• Providing the medical service or consultation the patient booked
• Managing the medical record and billing related to that visit
• Operational communication about the appointment (reminders, rescheduling, follow-up)

6"Taqwimi" data — an exception that does not automatically include doctors

Menstrual cycle, pregnancy and partner-relationship data that a user enters in the "Taqwimi" service never reaches you as a doctor or facility, unless the user explicitly chooses to link her account to a specific obstetrician-gynaecologist and consents to that particular sharing. You have no right to request or access this data in any other way.

7Your financial and wallet data

We record: the value of your bookings and consultations, your in-platform wallet balance, the withdrawal requests you submit, and transfer records via Stripe or Paymera, as well as internal accounting records for audit and tax purposes. Doctors.sy does not store your full card or bank account details; these are processed directly by the payment gateway or Paymera under their own policies.

8How we use your data as a doctor or facility

• Activating your account and showing your professional profile to patients searching for your specialty
• Running your facility’s booking, scheduling, billing and wallet system
• Verifying your compliance with the licensing and usage terms
• Providing you with general usage statistics (number of bookings, cancellation rate) to improve your clinic’s performance
• Operational and technical communication and technical support
• Legal and tax compliance and responding to official requests

9Legal basis for processing

Your data is processed on the basis of performing the contract between you and Doctors.sy to provide the clinic management service, compliance with our shared legal and tax obligations, protecting a legitimate interest such as platform security and preventing wallet fraud, and your explicit consent where specifically required.

10Sharing your data with other parties

We share the minimum necessary data with: payment gateways (Stripe and Paymera) to transfer your wallet balances, hosting and infrastructure providers, messaging service providers, and official authorities when there is a valid legal request. Your financial and licence data is never shown to any other doctor or facility on the platform.

11Professional and financial account security

• Encrypted connections via HTTPS/TLS and encryption of sensitive data at rest
• Optional or mandatory two-step verification (MFA) for professional and financial accounts; we especially recommend enabling it for accountants’ and facility owners’ accounts
• Audit logs for every wallet or medical record operation, including the identity of the staff member who performed it
• Monitoring of unusual login attempts on professional accounts

12Data retention

We keep your professional account data for as long as it is active and then for the legally required period after closure; wallet and invoice records in line with applicable accounting and tax requirements; and medical record access logs for the period professional laws require you to keep your medical records.

13Your rights, and your responsibility for your patients’ data

You have the right to access your professional and financial data, request its correction, and export your records when closing your account, as permitted by law. In turn, as the professional responsible for your patients’ records, you must respond to patient requests about their data (access, correction, deletion) within a reasonable time, and notify Doctors.sy immediately if you suspect any unauthorised access to your facility account.

14Account suspension or termination

Providing false licence details, violating a patient’s privacy, misusing staff permissions, or breaching the Terms of Use and Payment may lead to a formal warning, temporary suspension or permanent termination of the account, with your right to request a review of the decision within a set period via legal@doctors.sy.

15Updates to this policy

We may update this policy from time to time. The date of the update is published clearly at the top of the page, and we notify you of any material change by email, WhatsApp or a notification in your dashboard at least 30 days before it takes effect.