At Curistic, we care about the privacy of your data and are committed to protecting it. This Privacy Notice explains what personal data we collect, why we collect it, how we use and share it, and the rights you have over it. Please read it together with our Terms of Service.
In brief: We divide our users into four categories, each with a different relationship to your data.
Please note: When providing you with medical care, our Clinic Partners act as independent data controllers in their own right — they are not processing your data merely on Curistic’s behalf. Their own privacy practices also apply once your data reaches them.
In brief: We collect only what we need to connect you with the right clinic and coordinate your treatment journey — contact details, medical information you choose to share, and basic technical data from your use of our Website.
| Category | Examples | Purpose |
|---|---|---|
| Contact data | Full name, phone/WhatsApp number, email address, country of residence, nationality | To communicate with you, identify you, and coordinate your booking |
| Medical data | Symptoms, diagnosis, medical history, photographs (e.g. dental/cosmetic condition), lab results, and other health information you or your referring party share | To match you with a suitable Clinic Partner and prepare your treatment plan |
| Travel data | Passport copy, flight details, arrival/departure dates, accommodation preferences | To confirm your booking and coordinate your visit to Egypt |
| Payment data | Payment method details, transaction records (processed by our payment providers) | To process booking amounts and treatment payments |
| Technical data | IP address, device type, browser, cookies, pages visited | To operate and improve our Website and measure its performance |
| Communications | WhatsApp messages, emails, call records with our coordinators | To provide support and maintain a record of your requests |
We process your personal data on the following legal bases:
Important: For medical data specifically, the only legal basis we use is the performance of our contract with you. We do not use your medical data for any purpose other than coordinating the treatment you have requested.
In brief: We share your data with the Clinic Partner you choose to receive care from, and with service providers who help us run the Platform. We do not sell your data.
We share your relevant contact and medical data with the Clinic Partner you have chosen to receive medical care from, so that they can assess your case and prepare your treatment. When we onboard a Clinic Partner, a data-handling agreement forms a mandatory part of our contract with them, requiring them to protect your data appropriately. Once your data reaches a Clinic Partner, they act as an independent controller for the purpose of providing your medical care.
We use trusted third parties to help us operate the Platform — for example, cloud hosting, payment processing, WhatsApp Business messaging, analytics, and customer support tools. These providers only process your data on our instructions and are contractually required to keep it secure.
Your data is primarily processed and stored in Egypt. Where we use service providers located outside Egypt (for example, cloud or messaging infrastructure), we take appropriate steps to ensure your data continues to receive an adequate level of protection, consistent with recognised international data protection standards.
We may disclose your data where required by law, court order, or governmental request, or where necessary to protect the rights, property, or safety of Curistic, our users, or others.
A cookie is a small piece of data stored on your device that helps our Website function and helps us understand how it is used. We use:
You can control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of our Website.
We retain your personal data for as long as necessary to fulfil the purposes described in this Notice, including providing ongoing support after your treatment, complying with our legal and tax obligations, and resolving any disputes. Medical data is generally retained for the duration of your relationship with Curistic and for a reasonable period afterward, consistent with applicable healthcare record-keeping practices, unless you request earlier deletion and we have no legal obligation to retain it.
Depending on your location, you may have some or all of the following rights over your personal data:
To exercise any of these rights, please contact us at privacy@curistic.org. We will respond within a reasonable time and in accordance with applicable law.
Curistic does not knowingly collect personal data from individuals under the age of 18 without the involvement and consent of a parent or legal guardian. Where treatment involves a minor, we require the consent and direct participation of a parent or legal guardian throughout the process, consistent with our Patient Consent terms.
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration, including secure storage, access controls, and confidentiality obligations on our staff and service providers. No method of transmission or storage is completely secure, and while we work hard to protect your data, we cannot guarantee absolute security.
We may update this Privacy Notice from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. Where a change is material, we will notify you by posting a notice on our Website or by contacting you directly. We encourage you to review this Notice periodically.
If you have any questions about this Privacy Notice or how we handle your data, please contact us: