Privacy Policyسياسة الخصوصية

1. Who we are

Hollywood Clinic ("Hollywood Clinic", "we", "us", "our") is an aesthetic medicine, dermatology and clinical nutrition clinic based in Cairo, Egypt. We operate the website www.hollywoodclinics.net and the associated booking and enquiry services described in this policy.

For the purposes of Egyptian Law No. 151 of 2020 on the Protection of Personal Data, Hollywood Clinic is the controller of the personal data described below. Our registered clinic address, telephone number and email address are set out in section 16.

This policy explains what information we collect about you, why we collect it, who we share it with, how long we keep it, and the choices and rights available to you. Please read it together with our Terms of Service and Cookie Policy.

2. Information we collect

We collect information in three ways: information you give us directly, information we receive when you contact us through a third-party platform, and information collected automatically when you use our website.

2.1 Information you give us directly

Where	What we collect
Booking form	Your name, mobile number, the department and treatment you are interested in, your preferred doctor (or a request to be matched with a specialist), and your preferred appointment date and time.
Contact form	Your name, email address, phone number and the content of your message.
Reviews	The name you choose to display, your star rating, your written review, and the treatment or doctor it relates to.
At the clinic	Identification and contact details, your medical and treatment history, clinical notes, consent forms, and — where you agree in writing — before-and-after photographs.

2.2 Information from messaging and social platforms

If you contact us through WhatsApp, Facebook Messenger, Instagram, or by clicking a WhatsApp button on our website, we receive your name or profile name, your phone number or platform user ID, and the content of the messages you send us. These conversations are also processed by the platform provider under its own privacy policy.

2.3 Information collected automatically

When you browse our website we and our analytics providers automatically collect:

• Your IP address (used to derive an approximate city-level location — we do not determine your precise location)
• Device type, screen size, operating system, browser and language setting
• The pages you visit, how long you spend on them, and how far you scroll
• Which buttons and links you click, including WhatsApp, phone and booking buttons
• The website or advertisement that referred you to us
• An anonymised recording of your session — mouse movement, taps, scrolling and clicks — captured by Microsoft Clarity. Text you type into form fields is masked and is not recorded.

3. Health information

Specifically:

• We collect health information only where it is necessary to give you safe and appropriate care, or to answer a question you have asked us.
• We ask for your explicit consent before collecting it, and separate written consent before taking or using any clinical photograph.
• We do not send the details of your medical condition, diagnosis, or clinical notes to advertising platforms such as Google Ads or Meta.
• Where an event is sent to an advertising platform to measure the performance of an advertisement, it records only that a booking or enquiry occurred — never what the booking was for.
• Access to clinical records inside the clinic is restricted to the treating doctor and authorised clinical staff, who are bound by medical confidentiality obligations under Egyptian law and the rules of the Egyptian Medical Syndicate.

4. How we use your information

We use your information to:

• Contact you to confirm, reschedule or remind you about an appointment
• Answer your questions and provide the consultation or treatment you request
• Match you with a doctor appropriate to your concern
• Keep the medical records we are required to keep as a healthcare provider
• Publish reviews you have chosen to submit
• Understand how our website is used, find broken or confusing pages, and improve it
• Measure whether our advertising is working and reduce wasted advertising spend
• Send you offers or clinic news, only where you have separately agreed to receive them
• Protect our website and services against fraud, abuse and security incidents
• Comply with legal, regulatory and tax obligations in Egypt

We do not sell your personal data. We do not rent or trade it, and we do not share it with third parties for their own independent marketing purposes.

5. Our legal basis

We rely on the following grounds for processing your data:

• Your consent — for health information, clinical photographs, marketing messages, and non-essential cookies. You may withdraw consent at any time (see section 11).
• Performance of a contract — to deliver the appointment or treatment you booked.
• Legal obligation — to keep medical records and financial records required by Egyptian law.
• Legitimate interests — to secure our systems and understand website performance, balanced against your rights and expectations.

6. Cookies and tracking

Our website uses cookies and similar technologies through Google Tag Manager, Google Analytics 4, Google Ads and Microsoft Clarity. Some are strictly necessary for the site to function; others help us measure traffic and advertising performance.

Our full Cookie Policy lists each provider, what it does, and how to opt out. You can also block or delete cookies through your browser settings at any time — blocking non-essential cookies will not stop you using the site or making a booking.

7. Facebook, Instagram and WhatsApp

Hollywood Clinic maintains a presence on Facebook, Instagram and WhatsApp, and uses Meta's business tools to run and measure advertising and to respond to enquiries.

In this context:

• When you message us on any Meta platform, we receive your profile name, your platform user ID or phone number, and the content of your messages, so that our team can reply to you.
• If you submit an enquiry through a Meta lead form, we receive the details you entered into that form.
• We may use aggregated, non-identifying measurement signals to understand whether an advertisement led to an enquiry. These signals do not contain your medical information.
• Meta Platforms, Inc. processes your data on its own terms as an independent controller. Its handling of your information is governed by the Meta Privacy Policy, which we do not control.
• You can manage or remove Hollywood Clinic's access to your Facebook or Instagram profile information at any time in the Settings › Apps and Websites section of your Meta account.

If you want the information we hold about you deleted, follow the instructions on our Data Deletion page.

8. Who we share information with

We share information only with the service providers we need in order to operate, and only to the extent necessary. Each is bound to protect your data and to use it only on our instructions.

Provider	Purpose
Supabase	Secure database that stores bookings, enquiries and reviews
Vercel	Website hosting and delivery
Google	Analytics 4, Tag Manager and Ads — website measurement and advertising performance
Microsoft	Clarity — anonymised session analytics with form input masked
Meta	Facebook, Instagram and WhatsApp messaging, and advertising measurement
Internal notification tools	Alerting clinic reception staff that a new booking or enquiry has arrived so it can be actioned quickly

We may also disclose information where we are legally required to do so — for example in response to a valid order from a court or a competent Egyptian authority, or to establish or defend a legal claim.

9. Storage and international transfers

Some of the providers listed above store or process data on servers located outside Egypt. Where your data is transferred internationally, we take reasonable steps to ensure it remains protected by an adequate standard of security and contractual safeguards, consistent with the requirements of Egyptian Law No. 151 of 2020.

Your clinical records held at the clinic remain in Egypt.

10. How long we keep information

Type of information	Retention period
Medical and clinical records	For the period required of healthcare providers under Egyptian law and professional regulations
Booking and enquiry records	Up to 24 months from your last contact with us, unless they form part of a clinical record
Published reviews	Until you ask us to remove the review
Website analytics	Up to 14 months (Google Analytics 4); up to 30 days for Microsoft Clarity session recordings
Marketing consent records	Until you withdraw consent, plus a short period to evidence that the withdrawal was honoured

When a retention period ends we delete the information or irreversibly anonymise it so that it can no longer identify you.

11. Your rights

Under Egyptian Law No. 151 of 2020 you have the right to:

• Be informed about the personal data we hold about you and how it is processed
• Access a copy of that data
• Correct data that is inaccurate, outdated or incomplete
• Erase your data, subject to records we are legally required to retain
• Withdraw consent at any time, including consent to marketing or to the use of your photographs
• Object to processing, or ask us to restrict it
• Complain to the Egyptian Personal Data Protection Centre if you believe we have not handled your data lawfully

To exercise any of these rights, email [email protected] or call +20 100 000 7176. We respond within 30 days. We may ask you to verify your identity before we act, so that we do not disclose your information to someone else. Exercising your rights is free of charge.

12. Deleting your data

You can ask us to delete the personal information we hold about you at any time. Full step-by-step instructions, including what is deleted, what we are legally required to keep, and how long it takes, are on our dedicated Data Deletion page.

13. Security

We protect your information using measures appropriate to its sensitivity, including encrypted connections (HTTPS) across the whole website, access controls and row-level security rules on our database, restricted staff access on a need-to-know basis, and separate credentials for administrative systems.

No system can be guaranteed completely secure. If a data breach occurs that is likely to affect your rights, we will notify you and the competent authority as required by Egyptian law.

14. Children

Our website and services are directed at adults. We do not knowingly collect personal data from anyone under 18 through this website. Where a patient under 18 attends the clinic, we require the consent and attendance of a parent or legal guardian. If you believe a minor has provided us with personal data through the website, contact us and we will delete it.

15. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Where a change materially affects how we use your information, we will take reasonable steps to notify you before it takes effect.

16. Contact us