PRIVACY AND DATA
Privacy Policy
MediNow processes the data required for accounts, clinics, appointments, notifications and platform administration.
Who MediNow is
MediNow is a technology platform for online medical appointments. We connect patients with clinics, doctors and available services, but we do not provide medical services, diagnosis, treatment or automatic CAS eligibility checks.
Data processed for patients
For patient accounts and appointments we may process name, email, phone number, account settings, selected clinic, doctor, service, appointment date and time, payment type, statuses, cancellations, rescheduling, reviews and notes voluntarily entered by the user.
Data processed for clinics and staff
For clinics we process account data, clinic details, locations, doctors, services, schedules, availability, CAS settings, subscriptions, add-ons, payments, billing data, team roles and administration actions required to operate the platform.
CAS appointments
MediNow does not collect personal identification numbers for CAS. The patient confirms that they are insured and will present the required documents at the clinic. CAS eligibility is checked manually by the clinic in official systems or at reception.
Booking for another person
A patient may book an appointment for another person. In that case we collect the beneficiary's name and age, while phone number or relationship may be entered optionally. The user confirms they have the person's consent or the right to book, and the data is used to manage the appointment.
Notifications
We may send in-app, email, SMS or push notifications for confirmations, reminders, cancellations and rescheduling, depending on platform and clinic settings. If the appointment is for another person, the notification may include the beneficiary's name. We do not include unnecessary sensitive data in notifications.
Reviews, files and media
After a completed appointment, the patient may leave a review. Active reviews may be public and may be moderated. The platform may store user avatars, doctor avatars, clinic logos and cover images, together with the required metadata.
Technical and operational security data
We process technical data such as IP address, browser/device information, sessions, strictly necessary cookies, logs and audit entries for authentication, security, abuse prevention, support and correct platform operation.
Purposes and GDPR legal bases
We process data for account creation, appointments, clinic administration, notifications, support, security, legal obligations, payments/subscriptions and service improvement. Legal bases include contract performance, consent where applicable, legal obligations and legitimate interest.
Who can see the data
Patients can see their own account data and appointments. The selected clinic and authorized staff can see data needed to manage the appointment. MediNow administrators may access data strictly for support, security and administration. Technical providers may process data as subprocessors.
Data retention
We keep data while the account is active and as long as necessary for appointments, audit, security, billing, legal obligations and support. Reviews may remain public while active. Upon request, we delete or anonymize data where the law allows it.
Protection measures
We use role-based access, access limitation, audit, backups and reasonable technical measures to protect data. No online platform can guarantee absolute security, but we treat access to operational medical data with increased care.
Subprocessors and transfers
We may use providers for hosting, databases, email, SMS, push notifications, file storage, payments and monitoring. We select providers compatible with the platform's role and limit transferred data to what is necessary to provide the service.
User rights
You may request access, rectification, deletion or anonymization, restriction, portability, objection and withdrawal of consent where processing is based on consent. You may lodge a complaint with the competent data protection authority.
Privacy contact
For data protection questions or GDPR requests, use the MediNow contact form or the support address published in the platform. If a DPO is appointed, contact details will be displayed here.