Privacy policy
Draft for lawyer review — the wording is not final. In case of any conflict between languages, the Hebrew text prevails.
1. Who we are and what this policy covers
This policy explains how Tevakol Health ([name of the operating entity, registration number and address — to be completed]) collects and uses personal information — on the website, in the chat, in forms, on WhatsApp and by email.
It is written in line with the Israeli Protection of Privacy Law, 5741-1981, including Amendment No. 13 and the regulations made under it, and with the Law of the Republic of Azerbaijan on Personal Data. Privacy contact / data protection officer: [to be completed, if required].
2. What we collect
In the forms: name, phone, the requested procedure and an optional note; in the call-back form also a convenient day and time.
In the chat: the messages you type and, if you choose, your name, phone, field of interest, approximate travel time, whether you have tests, and a convenient date for a call.
Medical information you choose to provide (special-category / sensitive information), and information you send on WhatsApp or by email.
Technical information (such as IP address and browser data) processed by Cloudflare to deliver the website, for security and for the Turnstile anti-spam check.
3. Medical information
Medical information is processed only with your explicit consent and only to coordinate the treatment you asked about. Please do not write detailed medical information in the forms or the chat; medical documents are passed on through a channel agreed with you in advance.
4. Purposes
To reply to you, coordinate your treatment and travel, pass the relevant information to the hospital or clinic, secure the website and meet legal obligations. Basis for processing: your consent, and the need to provide the service you requested. Your information is never sold and never used for advertising.
5. Who receives the information
The hospital or clinic in Azerbaijan relevant to your enquiry — with your consent.
Service providers: Cloudflare (website hosting, security, Turnstile and a fallback AI model), Anthropic (the chat's AI model), WhatsApp / Meta when you choose to send details on WhatsApp, and Google (Gmail) when you email us. Other providers: [to be completed, if any].
Authorities, where required by law.
6. The chat and artificial intelligence
Chat answers are generated by an AI tool and may contain mistakes; they are general only and are not medical advice. The messages you write are sent for processing to Anthropic and, if it fails, to Cloudflare Workers AI, solely to generate the answer.
Under the current settings, chat content is not stored on the website's servers. Retention by the AI providers: [to be verified and completed]. Please do not write ID numbers, passport numbers, card details or full medical files in the chat.
7. Transfers outside Israel
Information may be transferred to Azerbaijan (to the hospital or clinic) and to service providers whose servers are outside Israel, including in the United States and Europe. Transfers are made with your consent and subject to the Protection of Privacy (Transfer of Data to Databases Abroad) Regulations, 5761-2001, and Azerbaijani law.
8. Retention
Details sent through the website forms are not stored on the website's servers; they reach us on WhatsApp, as you choose. Information provided to us is kept for [retention period — to be completed after legal review] and then deleted or anonymised, unless the law requires longer retention.
9. Security
The website is served over an encrypted connection (HTTPS) and protected by Cloudflare, and access to information is limited to the team members handling your enquiry. No system is completely secure. [Further security procedures — to be completed].
10. Your rights
You may access the information about you, ask for it to be corrected or deleted, withdraw consent and object to direct marketing. Under Azerbaijan's Law on Personal Data you also have rights to be informed about, and to object to, processing.
Requests: [email protected] [or an official privacy address — to be completed]. We will reply within [X days — to be completed]. You may also contact the Israeli Privacy Protection Authority or the competent authority in Azerbaijan [name of authority — to be completed].
11. Minors
The service is intended for people aged 18 and over. Enquiries for a minor must be made by a parent or legal guardian.
12. Updates
We will update this policy as needed. Last updated: [to be completed].