Privacy Policy

BioVisit Privacy Policy

Your health information is confidential. This page explains the information needed, its purposes, access limits and how to exercise your rights.

Scope and principles

BioVisit provides clinician and center search, appointment booking and services enabled by the care provider. This policy explains the use of information in those processes. Its guiding principles are patient dignity, confidentiality and access limited to the patient, care team and legally authorized persons, consistent with the Ministry of Health Patient Rights Charter and applicable law. This document does not constitute approval or licensing by the Ministry.

Information received

Depending on the selected service, information may include identity and contact details such as name, national or foreign-national identifier, mobile number, birth date and gender; appointment details such as provider, center, service, date and time; and payment amount, status and reference. Health records, history and messages are received through the features used by you or an authorized care provider. Technical information needed for operation and security, such as IP address, browser, request time and error logs, may also be recorded.

Purposes and limits

Information is used for identity verification and sign-in, booking and follow-up, requested care, authorized history, appointment updates or reminders, payments and support, abuse prevention and legal obligations. Information requested for a service should be proportionate to that service. Do not submit unrelated medical information or another person’s information without authority. Use of the system is not unlimited consent to commercial use of health information or a waiver of patient rights.

Confidentiality and necessary sharing

Appointment and relevant health information are shared with the clinician, center and authorized care team only as needed for care. Support and technical staff access should be limited to their duties and permissions. Infrastructure, messaging and payment providers may receive information necessary for their operation. Other disclosure requires valid patient authorization or a legal basis; requests from competent authorities must be assessed within the law. Health information must not be sold or disclosed to unrelated parties for advertising.

Sign-in, one-time codes and shared devices

Keep one-time sign-in codes private and do not share them. Use a mobile number you control and address changes or loss of the SIM. Sign out after using a shared device. Support does not need a bank-card PIN, CVV2 or SMS sign-in code to handle your request. Do not publish sensitive information in public messages or reviews.

Cookies and browser preferences

Session cookies support sign-in and authenticated features. Preferences such as language and light or dark appearance may be stored in the browser. Browser settings can clear or restrict this data; blocking essential cookies may interrupt sign-in or booking. Camera, microphone or location access, where a feature needs it, uses browser permissions that you can manage.

Payments and bank details

Online payments should use the gateway presented during checkout. Enter card PINs, one-time banking passwords and CVV2 only on the legitimate banking gateway. Transaction information and, when necessary, the card or IBAN supplied by you are processed for payment status, follow-up, wallet or refunds. Do not publish bank information in medical documents, public messages or reviews.

Documents, online care and intelligent tools

Upload only documents relevant to the service and check the recipient and active account before sending. Messages, files or information sent to a clinician, support or an intelligent feature are processed to respond to that request; avoid unnecessary sensitive identifiers. Service-specific terms and any additional processing or recording should be disclosed when the feature is used. Research, public release or use beyond the stated purpose of identifiable patient information requires the relevant authorization and legal basis.

Retention, correction and deletion

Retention should be limited to service needs, medical and financial records, disputes and legal duties. Closing an account or canceling an appointment does not necessarily delete medical or financial records. You may request access, correction, restriction of unnecessary use or deletion of information not subject to retention duties. After identity and authority checks and assessment of legal requirements, the outcome and any limits should be explained. Backup retention may differ from the active system.

Children and legal representatives

Booking or submitting records for a child or a person under guardianship requires legal authority or valid authorization. Being a companion or family member, or possessing a telephone number, does not by itself authorize access to all of another person’s medical information. Identity and evidence of representation or guardianship may be required to exercise patient rights.

Security and incident reporting

Information protection depends on access controls, technical safeguards and safe user practices; no online system can guarantee absolute security. Report suspected unauthorized access, another person’s data being displayed, exposed codes or security flaws through support. For an initial report, provide the time, page address and a brief description, without passwords, one-time codes or unnecessary medical records. Handling should preserve confidentiality and follow legal duties.

Rights requests and policy updates

Use BioVisit Support or Contact Us for questions, corrections, privacy requests or complaints. Requests about medical record content or clinical actions may be referred to the clinician or center responsible for the record. The right to approach competent legal and regulatory authorities is preserved. The current policy and updates are published on this page, and material changes to processing purposes should be communicated appropriately. This text was reviewed on 29 October 2026.