Privacy & Data Protection

Privacy Policy

This Privacy Policy explains how AlMahmoud Medical Group collects, uses, shares, and protects the personal data you provide through this website and our related communication channels, and describes the rights you have over your data under the applicable laws of the State of Qatar. By using this website or our related communication services, you acknowledge that you have read and understood this policy.

Last updated: 24 August 2026

Who we are

AlMahmoud Medical Group ("we", "us", "our", or "the Group") is a network of licensed medical centers operating in the State of Qatar. For the purposes of this policy and the applicable data-protection law, the Group acts as the controller responsible for the personal data processed through this website and our related communication channels.

For any question about this policy or your personal data, you can reach our privacy contact at the email address listed in the "Contact us" section below.

Scope of this policy

This policy applies to personal data collected through this website, our appointment-request and enquiry forms, the patient account portal, and messaging or assistant channels linked to the Group (such as WhatsApp and Instagram). It does not govern third-party platforms or websites that we link to, which operate under their own privacy policies.

What data we collect

We collect only the data needed to respond to you and to organize your care. Depending on how you interact with us, this may include:

  • Identity and contact details, such as your full name, phone or WhatsApp number, and email address.
  • Appointment and enquiry details, the requested branch, service, doctor, preferred date and time, request type (appointment or enquiry), and any message you choose to send.
  • Account information, if you create a patient account, the credentials and profile details you provide, and a record of appointment requests and benefits linked to your account.
  • Health-related information, any details you voluntarily share about your condition or the service you are seeking. This is treated as data of a special nature and given additional protection.
  • Technical and usage data, limited information such as general usage and performance data collected to keep the website secure and working properly.

You are responsible for providing accurate and up-to-date information. Incomplete or incorrect details may affect our ability to process your request or contact you.

How we use your data

We use your personal data to:

  • Respond to your enquiries and communicate with you.
  • Receive, organize, and follow up on appointment requests, and route them to the relevant branch, department, or staff member.
  • Create and manage your patient account and any benefits or discounts linked to it.
  • Maintain the security, integrity, and proper functioning of the website and our services.
  • Comply with applicable legal, regulatory, and healthcare obligations in the State of Qatar.

We do not use your data to send marketing or promotional messages without obtaining your separate and explicit consent. Submitting an appointment request is not a final confirmation of the appointment; a booking is confirmed only after our team contacts you.

Messaging and automated assistant

Some conversations on the clinic’s messaging channels (for example Instagram) may be handled with the help of an automated assistant, and you will be informed of this at the start of the conversation. The assistant may collect the details needed to process your request, such as your full name, WhatsApp number, requested service, request type, and preferred appointment date and time.

The automated assistant does not provide medical diagnoses or prescriptions, and the conversation can be transferred to a member of the clinic staff whenever needed.

Sharing and third-party platforms

We do not sell your personal data. To the extent necessary to provide our services, your data may be processed through trusted third-party platforms that act as our processors, which may include:

  • Secure database and authentication services used to store appointment requests and patient accounts.
  • Email delivery services used to send appointment and account-related messages.
  • Messaging and communication platforms such as Meta (Instagram, Facebook, WhatsApp), Respond.io, Make, and HubSpot.
  • Scheduling and productivity services such as Google Calendar, and mapping and reviews services provided by Google.

We may also disclose personal data where required to comply with a legal obligation or a lawful request from a competent authority in the State of Qatar.

International data transfers

Because some of the platforms we rely on operate globally, certain data may be processed or stored outside the State of Qatar, in accordance with the privacy and protection policies of each platform. Where data is transferred internationally, we take reasonable steps to ensure it remains protected to a standard consistent with the applicable data-protection law.

How long we keep your data

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law and healthcare regulations. When data is no longer needed, it is securely deleted or anonymized in line with our data-retention practices.

How we protect your data

We apply appropriate organizational and technical measures to protect personal data against unauthorized access, use, alteration, or disclosure. While no method of transmission or storage is completely secure, we work to safeguard your data and to limit access to those who need it to provide our services.

Medical information

Information published on this website or shared through our communication channels and automated assistant is general and educational. It is not a medical diagnosis, a prescription, or a substitute for consulting a physician. A diagnosis and treatment plan are determined only after your case is assessed by the relevant specialist.

Children’s privacy

This website is intended for use by adults. Where a request or booking concerns a minor, it should be submitted by a parent or legal guardian, who is responsible for the accuracy of the information provided and for consenting to its processing.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, systems, or legal obligations. The updated version is published on this page with a revised "Last updated" date, and your continued use of the website after an update constitutes acceptance of the revised policy.

Your rights over your data

Under the applicable data-protection law of the State of Qatar, you have the following rights over your personal data. We will not charge you for exercising these rights and will not discriminate against you for doing so.

Right of access

Request confirmation of whether we process your data and obtain a copy of the personal data we hold about you.

Right to correction

Ask us to correct or complete personal data that is inaccurate or out of date.

Right to deletion

Ask us to delete your personal data where it is no longer needed for the purposes for which it was collected, subject to legal and healthcare retention requirements.

Right to object

Object to the processing of your data where it is not necessary or is excessive for the stated purpose.

Right to withdraw consent

Withdraw a consent you previously gave, including consent to receive marketing messages, at any time.

Right to be informed of breaches

Be notified where a data breach affecting your personal data is likely to cause you serious harm.

How to make a data request

To exercise any of the rights above, send an email to our privacy contact. Please describe your request clearly so we can act on it quickly.

Please include:

  • Your full name and the phone number or email you used with us.
  • The type of request (access, correction, deletion, objection, or withdraw consent).
  • Any details that help us locate your data, such as an appointment reference.

We aim to respond to data requests within a reasonable period, typically within 30 days. If a request is complex, we will let you know and keep you updated.

To protect your privacy, we may ask you to verify your identity before we act on a request.

Complaints

If you believe we have not handled your personal data properly, we encourage you to contact us first so we can resolve the matter. You also have the right to raise a complaint with the competent data-protection authority in the State of Qatar (the National Cyber Security Agency).

Contact us

For any question about this policy, your personal data, or a data request, contact us at:

AlMahmoud Medical Group, State of Qatar

Privacy email:info@almahmoudgroup.com

Or reach us through our contact page