Data and privacy
How is your request information used?
The website requests limited information to respond to your request. The dedicated consultation form asks for the parent or guardian’s first name, a contact number, an age band, and a general observation. It does not request a diagnosis, records, photos, or videos.
Notice date:
We may record the follow-up channel, responsible person, timing and evidence references for booking, cancellation, attendance and payment within the protected request record. These details are not sent to Google Analytics.
The purpose depends on your request
- Family request: review the contact details and general observation, and share the short contact details with HiCare Medical Centre to arrange the next step. A request does not confirm an appointment.
- Workshop interest: use contact details to notify you when the workshop date and offer are approved. This is not a clinical request; its consent does not include sharing details with the centre for that purpose.
- Institutional request: use contact, professional role, and organisation details to respond to the collaboration request. Its consent does not include routing contact details to the centre for a child’s service.
The consent record
The request type, consent language, consent version, and submission time are recorded. Each purpose has a separate consent statement. Previous consent is not converted into consent for a broader purpose.
Protection and access
Personal request information is encrypted in storage. Administrative access is limited to authorised review. HiCare Medical Centre confirms appointments and handles payment and complaints about services provided at the centre.
Expiry and deletion
A request record expires 90 days after submission and is excluded from routine use. Physical deletion follows a completed cleanup cycle rather than the exact expiry instant. A delayed or failed cycle can delay physical removal.
Hosting-provider recovery copies have separate retention limits. Deleting an operational record does not immediately erase every recovery copy. Expiry and deletion requests must be reapplied before restored information is made available for use. This notice does not state an unverified provider recovery-retention period.
Deletion requests and enquiries
To request deletion earlier or ask about data use, contact Abdulla Almahdi on Instagram. Start with a general request; do not send a child’s clinical information or records. Your connection to the request may need to be verified before action is taken.
Website measurement
When enabled, limited counters measure page visits, pathway selection, form starts, received requests, and guide download clicks. Guide pages may classify visit sources into broad categories such as Instagram, WhatsApp, or search without sending complete referrer URLs or free-form URL parameters. Guide measurement uses no cookies or visitor identifiers and respects supported do-not-track signals. Measurement counters are retained for 400 days before the next cleanup cycle. Measurement events do not include names or contact numbers. The dedicated Instagram consultation link records its source with the request and appointment confirmation status for reporting. Only the dedicated consultation page stores a random browser identifier to distinguish repeat visits within one Bahrain calendar day. It replaces the identifier when the page is visited on a new day. The identifier is not linked to a child’s name, contact number, or request. The server retains a daily hash for seven days before the next cleanup cycle, and aggregate counts for 400 days. You can remove the identifier by clearing site data. The page respects Do Not Track and Global Privacy Control signals. When storage is blocked, visits remain unclassified for repeat measurement. Distinct browsers are an estimate, not a count of distinct people. Counters represent events, not unique people. A download click does not confirm a completed download or reading. Opening the PDF URL directly is not counted as a guide-page download click. Hosting services may use technical logs to operate and protect the service.
The site temporarily keeps the reduced entry channel, campaign code and pending anonymous events in this tab for up to 24 hours. Form answers are not stored in this queue. Each event has a random delivery ID to prevent retry duplicates; server visit-event receipts are retained for 8 days, request-count receipts for the request retention period, and aggregate counters for 400 days. New counters use Bahrain dates. Older UTC counters remain separate. Channel and campaign fields are saved with the encrypted request when available; an untagged link does not prove an advertising source.
Optional Google Analytics
If you allow analytics, Google Analytics measures page visits, form starts and successfully received requests. We do not send children’s names, contact details or form answers to Google. Page URL query details are excluded, and only defined visit-source categories are used. Advertising personalisation and Google Signals are disabled.
No Google tag loads and no analytics data is sent to Google before you consent. Your choice is stored in this browser for up to 180 days. With consent, analytics cookies may be stored for up to 180 days to distinguish sessions and browsers. You can change your choice using the Analytics settings button. Withdrawing consent stops measurement and deletes these analytics cookies for this site. Supported Do Not Track and Global Privacy Control signals are respected. You can use the site and submit requests without allowing these analytics.
Google processes analytics data under its privacy policy. Google Analytics is separate from the local counters described above.
External links
The centre, Instagram, LinkedIn, and linked article sources operate under their own policies when you visit them.
To recover a submission after a lost connection or page reload, an opaque attempt identifier is kept in this tab for up to 24 hours. It contains no name, contact number or form answers, and can retrieve only the saved receipt.