Changes from version 1 to version 2. added removed
This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit our website, use our clinic management software, or otherwise interact with us. Arab Republic of Egypt. We are committed to ensuring the protection of Your privacy and compliance with applicable data protection laws, including Egyptian Personal Data Protection Law No. 151 of 2020
Personal information we collect
We collect personal information in several ways, including when you:
You visit our website or use our software.
Contact us via email, phone, or other channels.
Providing information to set up or manage your account with us
The personal information we collect may include:
Name, address, phone number, email address, and other contact details
Payment information (eg: Instapay account)
Technical information, such as IP addresses
Browser type and data stored in cookies on your device
How we use your information
We use your personal information to provide and improve our Services, including:
Manage your account and process payments
Verify your identity
Communicate with you about our products, services, and promotions
Enhancing the functionality and security of our services
Fulfilling legal obligations and protecting our business interests
We may send you marketing materials about our services that we believe may be of interest to you. You have the right to opt out of receiving these messages at any time by contacting us directly or by following the instructions contained in them.
Information exchange and disclosure
We do not sell or rent your personal information. However, we may share it in the following situations:
Service Providers: We may share your personal information with third-party service providers who perform services on our behalf (e.g., payment processors, IT support, website hosting).
Your rights
Under UK, EU and US privacy laws, you have the following rights:
Right to access: You may request a copy of the personal information we hold about you.
Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal information.
Right to erasure: Under certain circumstances, you may request that we delete your personal information.
Right to restrict processing: You can request that we restrict the way we use your personal information.
Right to data portability: You have the right to request that we transfer your data to another service provider.
Right to object: You may object to our processing of your personal information on certain grounds.
Right to withdraw consent: Where consent is the legal basis for processing, you can withdraw it at any time.
protection
We take appropriate security measures to protect your personal information from unauthorized access, alteration or disclosure.
Data retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When we no longer need your personal information, we will securely delete or anonymize it.
Changes to this Privacy Policy
We reserve the right to update this Privacy Policy from time to time. Any changes will be posted on our website, and the revised Privacy Policy will be effective as of the date of posting. Please review this page regularly to stay informed about how we are protecting your personal information.
This Privacy Policy explains what personal data PTset ("PTset", "we", "us") collects, why, how it is protected and what rights you have. It applies to the website ptset.com, the owner console and the center workspaces (together, "the Service"). We follow the Egyptian Personal Data Protection Law No. 151 of 2020.
1. Two kinds of data
Account data. This is data about you as a PTset customer: the account owner and the users of his centers. For this data, PTset is the controller: we decide how it is used, as explained in this policy.
Center data. This is the data your centers record in the Service: patients and cases, sessions, evaluations and reports, payments, staff, payroll and attendance, and uploaded files. It often includes health data, and sometimes data about children. For this data, your center is the controller and PTset is the processor: we store and process it only to provide the Service to your center, as described in our Terms of Use. Patients who want to access, correct or delete their data should contact the center that treats them.
2. Data we collect
When you register and use your account:
- name, e-mail address and password (stored only in encrypted, hashed form);
- your centers' names, addresses, phone numbers and logos;
- your plan, subscription dates and payment records;
- your acceptance of our Terms and this policy, with the date and IP address.
When you pay:
- PayPal handles card payments. We receive the subscription reference and status from PayPal, not your card number.
- For bank transfer or InstaPay payments, we keep the payment reference you give us.
When you contact us: the messages and details you send us by e-mail, WhatsApp or phone.
Automatically, when you use the Service:
- technical data such as IP address, browser type, device and the pages you open;
- records of important actions in the Service (for example logins and changes to settings), used for security and support;
- cookies (see section 6).
3. How we use the data
- to create and run your account and your centers, and provide the Service;
- to process payments and manage subscriptions;
- to send service messages: activation codes, password reset, payment and plan notices, security alerts and changes to our Terms or this policy;
- to answer support requests and fix problems;
- to keep the Service secure and prevent misuse;
- to understand how the Service is used and improve it, using statistics that do not identify patients;
- to send you news about PTset features, if you have not opted out (section 9);
- to meet our legal obligations.
We do not sell personal data, and we never use center data (including patient data) for advertising or marketing.
4. Who can see the data
- Your team. Users of your centers see only what their permissions allow, as set by the account owner or center administrators.
- PTset staff. Only authorised staff, only when needed for support, maintenance or security, and under confidentiality.
- Service providers. Companies that host the Service, send our e-mails, process payments (PayPal) and measure website use (Google Analytics). They receive only the data they need for their task and must protect it.
- Authorities. When the law or a court order requires it.
- Business transfer. If PTset is sold or reorganised, the data may pass to the new owner under the same protections. We will tell you first.
5. Where the data is stored
The Service is hosted by a professional hosting provider. Some of our providers may store or process data outside Egypt. When this happens, we take the steps required by the Egyptian Personal Data Protection Law to keep the data protected to an adequate level.
6. Cookies and similar technologies
We use:
- necessary cookies, to keep you logged in, remember your language and bring you back to the page you were on;
- offline files, which the browser stores so that the platform loads faster and can show a page when the connection drops;
- analytics cookies from Google Analytics on our website, to count visits and see which pages are useful.
You can block or delete cookies in your browser settings. Without the necessary cookies, you cannot log in.
7. How we protect the data
- encrypted connections (HTTPS) between your browser and the Service;
- passwords stored only in hashed form;
- protection against common web attacks and session misuse;
- separate storage for each center's data;
- access limited to authorised staff;
- regular backups.
No online service can be completely secure. If a breach affects your data, we will tell you without undue delay and take steps to limit the harm.
8. How long we keep the data
- Account and center data: while your account is active. After you leave, we keep it for 90 days so that you can come back or export it, then we delete it (see our Terms of Use).
- Payment records: for as long as tax and accounting laws require.
- Backups: deleted data leaves our backups as they are replaced over time.
9. Your rights
Under the Egyptian Personal Data Protection Law, you have the right to:
- know what personal data we hold about you and get a copy;
- correct data that is inaccurate or incomplete;
- ask us to delete your data, or to limit how we use it, when the law allows;
- object to processing, and withdraw your consent where we rely on it;
- stop marketing messages at any time, with the unsubscribe link in the message or by writing to us. Service messages (for example security alerts and payment notices) continue while you have an account;
- be told if a breach affects your personal data.
To use these rights, write to support@ptset.com from your account's e-mail address. We may ask you to confirm your identity. We reply within the time the law sets.
If you are not satisfied with our answer, you can complain to the Personal Data Protection Center in Egypt.
10. Children
The Service is for centers and their staff, not for children. Centers that treat children record their data under the responsibility of the center, with the consent of a parent or legal guardian.
11. Changes to this policy
When we change this policy, the new version is numbered and dated on this page, and earlier versions stay available. We tell account owners about important changes by e-mail and in the owner console before they take effect.
12. Contact
PTset, Cairo, Arab Republic of Egypt
E-mail: support@ptset.com
WhatsApp: +20 122 268 8400