Privacy Policy

eMedClinic is operated by Apogeu Proeminente Unipessoal Lda, registered in Portugal (NIF: 518240290), trading as eMedClinic. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese data protection law.

1 Who We Are

Data Controller: Apogeu Proeminente Unipessoal Lda

Trading name: eMedClinic

2 What Data We Collect

eMedClinic operates as a booking and payment marketplace. We collect only the minimum data necessary to facilitate appointment bookings. We do not collect, store or process patient clinical data.

Booking data collected through our platform includes:

• Full name
• Email address
• Telephone number
• Appointment type and preferred doctor
• Payment information (processed securely via our payment provider — card details are never stored by eMedClinic)

Clinical records and consultation notes are the sole responsibility of each contracted doctor and are held within their own practice management systems, entirely separate from the eMedClinic platform.

The sole exception is Tessa Drayton, Psychotherapy Practitioner and MER Clinical Consultant, who maintains her own client notes independently in accordance with her professional obligations as a practitioner.

3 How We Use Your Data

We use your personal data only for the following purposes:

• To process and confirm your appointment booking
• To communicate with you regarding your appointment
• To process payment for your consultation
• To send appointment reminders where requested
• To comply with our legal and regulatory obligations

We do not use your data for marketing purposes without your explicit consent. We do not sell or share your data with third parties for commercial purposes.

4 Legal Basis for Processing

• Contract: Processing is necessary to fulfil your booking request
• Legal obligation: We may process data to comply with applicable law and regulatory requirements including ERS registration obligations
• Legitimate interests: To operate and improve our platform

5 Data Retention

We retain booking data for a period of 24 months following your last appointment, after which it is securely deleted. Payment records are retained for 7 years in accordance with Portuguese tax and accounting obligations.

6 Data Storage and Security

Your data is stored on servers located in France, hosted by Hostinger, in full compliance with EU data protection requirements. We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure.

7 Your Rights

Under GDPR you have the following rights:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate data
• Right to erasure: to request deletion of your data where there is no legitimate reason for continued processing
• Right to restriction: to request that we restrict processing of your data
• Right to portability: to receive your data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interests

To exercise any of these rights please contact us at privacy@emedclinic.com. We will respond within 30 days.

8 Cookies

Our website uses essential cookies necessary for the platform to function. We do not use tracking or advertising cookies. A cookie notice is displayed on your first visit to the site. For full details please see our Cookie Policy.

9 Third Party Services

We use the following third party services to operate our platform:

• Hostinger: website hosting (EU-based servers, France)
• Amelia: appointment booking software
• Payment provider: secure payment processing

Each third party service is GDPR compliant and subject to appropriate data processing agreements.

10 Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on our website. We will notify you of significant changes by email where we hold your contact details.

11 Complaints

If you have concerns about how we handle your personal data you have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.