Privacy policy

Last updated: 30 October 2026. This policy is a draft and is being reviewed by a lawyer before it is final.

1. Who we are

This policy covers the BookMed website at bookmed.org. BookMed is a product of Etec, and Siavash Memarizadeh is responsible for it. Contact: hello@bookmed.org.

2. The website

• Contact form. We keep your name, email address, the topic you choose and your message, so that we can reply. We keep messages for up to 24 months unless you ask us to delete them sooner.
• Server logs. The server records the time of each request and the network address it came from, for security and to fix faults. These logs are kept for a short time.
• Staff sign-in. Administrators sign in with a one-time code sent to their email address. We keep their name and email address.

We do not use cookies for advertising. The site uses one session cookie for administrators only.

3. The software: MediCRM and MediPlan

Clinics use our software to run their practice. For that data the clinic is the controller and decides why and how patient data is used. We process it on the clinic's instructions, under a written agreement.

• MediPlan runs on the clinic's own server. The clinic keeps the data.
• MediCRM receives messages and lead details from the channels the clinic connects, such as WhatsApp, Telegram, Messenger, Instagram and Facebook Lead Ads, and from its own web forms.

4. Data from Meta, WhatsApp and Telegram

When a clinic connects a Facebook Page, an Instagram account, a WhatsApp Business number or a Telegram bot, we receive the messages and lead-form answers sent to it. We use them only to show them to the clinic's staff, to let staff reply, and to run the automations the clinic set up. We do not use this data for our own advertising, and we do not sell it. The clinic can disconnect a channel at any time, and the connection can also be removed from the Meta account settings.

5. Who we share data with

We use service providers to run the software and the website: Oracle Cloud Infrastructure (hosting and, when set up, email delivery), the email provider used for sign-in codes, and the platforms the clinic connects (Meta, WhatsApp and Telegram). Each of them processes data under its own terms.

6. How long we keep data

Data is kept while the clinic uses the software. When a clinic leaves, its data is deleted or returned, unless the law requires us to keep it.

7. Your rights and deletion

You can ask us to see, correct or delete your personal data. The steps are on the data deletion page.

8. Security

Connections use HTTPS. Secrets such as email passwords and channel tokens are stored sealed (encrypted) on the server. Staff sign in with one-time codes, and each person sees only what their role allows.

9. Children

Our services are for clinics and their staff. We do not knowingly collect personal data from children under 18.

10. Changes

When this policy changes, we update the date above. For important changes we tell the clinics that use our software.

11. Contact

Etec, Siavash Memarizadeh. Email: hello@bookmed.org.