This Privacy Policy explains what personal data PTset ("PTset", "we", "us") collects, why, how it is protected and what rights you have. It applies to the website ptset.com, the owner console and the center workspaces (together, "the Service"). We follow the Egyptian Personal Data Protection Law No. 151 of 2020.
1. Two kinds of data
Account data. This is data about you as a PTset customer: the account owner and the users of his centers. For this data, PTset is the controller: we decide how it is used, as explained in this policy.
Center data. This is the data your centers record in the Service: patients and cases, sessions, evaluations and reports, payments, staff, payroll and attendance, and uploaded files. It often includes health data, and sometimes data about children. For this data, your center is the controller and PTset is the processor: we store and process it only to provide the Service to your center, as described in our Terms of Use. Patients who want to access, correct or delete their data should contact the center that treats them.
2. Data we collect
When you register and use your account:
- name, e-mail address and password (stored only in encrypted, hashed form);
- your centers' names, addresses, phone numbers and logos;
- your plan, subscription dates and payment records;
- your acceptance of our Terms and this policy, with the date and IP address.
When you pay:
- PayPal handles card payments. We receive the subscription reference and status from PayPal, not your card number.
- For bank transfer or InstaPay payments, we keep the payment reference you give us.
When you contact us: the messages and details you send us by e-mail, WhatsApp or phone.
Automatically, when you use the Service:
- technical data such as IP address, browser type, device and the pages you open;
- records of important actions in the Service (for example logins and changes to settings), used for security and support;
- cookies (see section 6).
3. How we use the data
- to create and run your account and your centers, and provide the Service;
- to process payments and manage subscriptions;
- to send service messages: activation codes, password reset, payment and plan notices, security alerts and changes to our Terms or this policy;
- to answer support requests and fix problems;
- to keep the Service secure and prevent misuse;
- to understand how the Service is used and improve it, using statistics that do not identify patients;
- to send you news about PTset features, if you have not opted out (section 9);
- to meet our legal obligations.
We do not sell personal data, and we never use center data (including patient data) for advertising or marketing.
4. Who can see the data
- Your team. Users of your centers see only what their permissions allow, as set by the account owner or center administrators.
- PTset staff. Only authorised staff, only when needed for support, maintenance or security, and under confidentiality.
- Service providers. Companies that host the Service, send our e-mails, process payments (PayPal) and measure website use (Google Analytics). They receive only the data they need for their task and must protect it.
- Authorities. When the law or a court order requires it.
- Business transfer. If PTset is sold or reorganised, the data may pass to the new owner under the same protections. We will tell you first.
5. Where the data is stored
The Service is hosted by a professional hosting provider. Some of our providers may store or process data outside Egypt. When this happens, we take the steps required by the Egyptian Personal Data Protection Law to keep the data protected to an adequate level.
6. Cookies and similar technologies
We use:
- necessary cookies, to keep you logged in, remember your language and bring you back to the page you were on;
- offline files, which the browser stores so that the platform loads faster and can show a page when the connection drops;
- analytics cookies from Google Analytics on our website, to count visits and see which pages are useful.
You can block or delete cookies in your browser settings. Without the necessary cookies, you cannot log in.
7. How we protect the data
- encrypted connections (HTTPS) between your browser and the Service;
- passwords stored only in hashed form;
- protection against common web attacks and session misuse;
- separate storage for each center's data;
- access limited to authorised staff;
- regular backups.
No online service can be completely secure. If a breach affects your data, we will tell you without undue delay and take steps to limit the harm.
8. How long we keep the data
- Account and center data: while your account is active. After you leave, we keep it for 90 days so that you can come back or export it, then we delete it (see our Terms of Use).
- Payment records: for as long as tax and accounting laws require.
- Backups: deleted data leaves our backups as they are replaced over time.
9. Your rights
Under the Egyptian Personal Data Protection Law, you have the right to:
- know what personal data we hold about you and get a copy;
- correct data that is inaccurate or incomplete;
- ask us to delete your data, or to limit how we use it, when the law allows;
- object to processing, and withdraw your consent where we rely on it;
- stop marketing messages at any time, with the unsubscribe link in the message or by writing to us. Service messages (for example security alerts and payment notices) continue while you have an account;
- be told if a breach affects your personal data.
To use these rights, write to support@ptset.com from your account's e-mail address. We may ask you to confirm your identity. We reply within the time the law sets.
If you are not satisfied with our answer, you can complain to the Personal Data Protection Center in Egypt.
10. Children
The Service is for centers and their staff, not for children. Centers that treat children record their data under the responsibility of the center, with the consent of a parent or legal guardian.
11. Changes to this policy
When we change this policy, the new version is numbered and dated on this page, and earlier versions stay available. We tell account owners about important changes by e-mail and in the owner console before they take effect.
12. Contact
PTset, Cairo, Arab Republic of Egypt
E-mail: support@ptset.com
WhatsApp: +20 122 268 8400