Personal data processing and protection policy

2. What we process and why

• Booking: patient and representative names, age, phone number, clinic, service, doctor and preferred time — only to receive the request, contact the applicant and arrange an appointment.
• Reviews: author name, rating, review text and selected doctor — to moderate the review and, under a separate publication consent, display it on the website.
• Optional marketing list: adult applicant name, phone number, clinic direction and website source — to send advertising and informational messages when separate marketing consent is given.
• Technical data: IP address, browser and device information, pages and actions — only after analytics cookies are accepted, for website analytics and improvement.

Do not send diagnoses, examination results or other health data through booking and review forms. Medical information is collected through the clinic’s protected medical processes, not these website forms.

3. Grounds and processing operations

Processing is based on the data subject’s specific consent, contractual/pre-contractual requests, and legal duties applicable to the clinic. Operations may include collection, recording, organisation, storage, clarification, use, restricted disclosure, blocking, deletion and destruction, with or without automation.

The website stores submissions in the protected administration system. Telegram notifications contain no names, phone numbers, medical details, record identifiers or review text. Yandex.Metrica is contacted only after analytics consent.

4. Retention

• Booking requests: 180 days from submission; canceled requests are deleted 30 days after cancellation.
• Marketing contacts: three years from the latest separate marketing consent or until it is withdrawn, whichever occurs first.
• Unpublished reviews: 90 days. Published reviews: until publication consent is withdrawn or the publication purpose ends.
• Unpublished website copies of before/after cases: 90 days. Published copies: until dissemination consent is withdrawn or the publication purpose ends; this does not change statutory medical-record retention.
• The consent version, server timestamp and selected checkboxes are retained with the relevant record for its stated retention period. Isolated evidence may be retained longer only where a legal claim or mandatory law requires it.

5. Your rights

You may request information, access, correction, blocking or deletion, withdraw consent, object to processing, and complain to Roskomnadzor or a court. Send a signed request to the relevant controller’s postal address or privacy email above; identify the request and data that let us find the record. Consent withdrawal does not affect processing already lawfully performed.

6. Protection, cookies and updates

Access is restricted by roles; data transmission is protected; events and retention deadlines are recorded; access and deletion procedures are reviewed. Necessary cookies support the website. Analytics cookies and Yandex.Metrica are optional and load only after acceptance; the choice can be changed using “Cookie settings” in the footer.

The current version is always published at this address. Material changes will apply from the date stated in the updated version.