Политика Конфиденциальности

1. Общие Положения

I.D. Clinic is committed to protecting the privacy and personal data of all patients, website visitors, and individuals who contact us. This Политика Конфиденциальности explains what personal data we collect, why we collect it, how we use it, and what rights you have regarding your data.

By using our website at idclinic.com.ua or contacting us for medical services, you acknowledge that you have read and understood this policy. We process personal data in accordance with the Law of Ukraine "On Personal Data Protection" (No. 2297-VI) and applicable European data protection standards.

2. Данные, которые Мы Собираем

Depending on how you interact with I.D. Clinic, we may collect the following categories of personal data:

• Identification data: full name, date of birth
• Contact data: phone number, email address
• Medical data: health information, diagnoses, treatment history — collected only as necessary for providing medical services
• Technical data: IP address, browser type, pages visited, time and date of visit (collected via cookies and analytics)
• Communication data: messages sent via our contact form, Telegram, or telephone calls

3. Purpose of Data Processing

We use your personal data for the following purposes:

• Scheduling and confirming appointments
• Providing medical consultations, diagnostics, and treatment
• Maintaining medical records as required by Ukrainian healthcare legislation
• Sending appointment reminders and relevant health information
• Responding to inquiries submitted via our website or by phone
• Improving the quality of our website and services through analytics
• Complying with legal obligations applicable to healthcare providers

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Your consent — when you submit a contact form, book an appointment, or provide your contact details
• Contractual necessity — to provide medical services you have requested
• Legal obligation — to comply with healthcare record-keeping requirements
• Legitimate interest — to operate and improve our services, provided this does not override your rights

5. Data Sharing and Third Parties

I.D. Clinic does not sell, rent, or trade your personal data. We may share data only in the following circumstances:

• With laboratory and diagnostic partners (e.g. Medlab, Genom, CSD) where necessary to complete ordered tests — under strict confidentiality agreements
• With our technology service providers (e.g. website hosting, analytics) acting as data processors under our instructions
• With state authorities if required by Ukrainian law (e.g. infectious disease reporting obligations)
• With your explicit consent in any other case

All third parties with whom we share data are contractually bound to maintain confidentiality and process data only for the specific purpose authorised.

6. Data Retention

We retain personal data for the following periods:

• Medical records: retained for a minimum of 25 years as required by Ukrainian healthcare legislation
• Appointment and contact data: for the duration of the business relationship plus 3 years
• Website analytics data: up to 26 months
• Communication records: up to 2 years from the date of last contact

After the applicable retention period, data is securely deleted or anonymised.

7. Your Rights

Under applicable data protection law, you have the following rights regarding your personal data:

• Right of access — to obtain a copy of the data we hold about you
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data, subject to legal retention requirements
• Right to restriction — to limit how we process your data in certain circumstances
• Right to withdraw consent — at any time, without affecting the lawfulness of processing prior to withdrawal
• Right to lodge a complaint — with the Ukrainian Personal Data Protection Commissioner or applicable supervisory authority

To exercise any of these rights, please contact us using the details below.

8. Cookies

Our website uses cookies and similar technologies to ensure functionality, analyse traffic, and improve user experience. The following categories of cookies may be used:

• Essential cookies: necessary for the website to function — cannot be disabled
• Analytics cookies: help us understand how visitors use the site (e.g. Google Analytics) — can be refused

You may manage or disable cookies at any time through your browser settings. Please note that disabling certain cookies may affect website functionality.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include encrypted data transmission (HTTPS), access controls, and regular security reviews. Despite these measures, no system is completely secure, and we encourage you to contact us immediately if you suspect any compromise of your data.

10. Contact Us

For any questions, requests, or concerns regarding this Политика Конфиденциальности or the processing of your personal data, please contact: