Privacy Policy

Effective date: April 25, 2026
Last updated: April 25, 2026

---

In Plain Language

R Clinics collects only the information needed to provide your dental and aesthetic care, communicate with you about appointments, and run our practice. We do not sell your data. We use industry-standard security to protect your records. You have the right to access, correct, or delete your information at any time. If you have any questions, email us at hello@r-clinics.com.

---

1. Who We Are

R Clinics ("we," "us," "our") is a dental and aesthetic medicine clinic operating in Amman, Jordan, owned and operated by Dr. Hamza Alrefaei. We are the data controller for personal information described in this policy.

Contact:

• Address: 370 Wasfi At-Tall Street, Amman 11822, Jordan
• Email: hello@r-clinics.com
• Phone: +962 79 093 1819

2. Information We Collect

We collect information in three categories:

Information you provide directly:

• Identity information: name, date of birth, gender, national ID number (where required for medical records under Jordanian regulation)
• Contact information: phone number, email address, residential address
• Medical information: medical history, allergies, current medications, dental and aesthetic treatment history, photographs and clinical images taken during care, treatment notes
• Payment information: bank account or card details (processed by our payment provider; we do not store full card numbers)
• Communications: messages you send us through WhatsApp, email, our website, or in person

Information collected automatically when you use our services:

• Appointment history and attendance records
• Technical data when you use our patient portal: IP address, browser type, device information, pages visited
• Cookies and similar technologies (essential session cookies only; we do not use advertising cookies)

Information from third parties:

• Referral information from other healthcare providers (with your consent)
• Insurance verification details (where applicable)

3. How We Use Your Information

We use your information for the following purposes:

We do not use your data for advertising or marketing without your explicit, separate consent.

4. WhatsApp Business Communications

We use WhatsApp Business through Meta Platforms, Inc. ("Meta") to send appointment reminders, confirmations, and follow-up messages. By providing your phone number and consenting to communications, you agree that:

• We may send you transactional WhatsApp messages related to your appointments and care
• Meta processes the message metadata and content according to Meta's WhatsApp Business Privacy Policy (https://www.whatsapp.com/legal/business-policy)
• You can opt out at any time by replying "STOP" to any of our WhatsApp messages
• After you opt out, we will switch to email or phone for essential communications about your appointments

We do not send marketing or promotional WhatsApp messages without your separate explicit consent.

5. How We Share Your Information

We share your information only in these limited circumstances:

• With our clinical staff and contractors who are bound by professional confidentiality (dental hygienists, aesthetic practitioners, lab technicians, our reception team)
• With healthcare providers you ask us to coordinate with (for example, your physician, an orthodontist, or a referring dermatologist)
• With payment processors to process your payments — only the data necessary for the transaction
• With our software providers that help us run the clinic (electronic health records, communication tools, cloud hosting). These providers are bound by data processing agreements and only access data as needed to provide their service.
• With authorities when required by Jordanian law, court order, or to protect the safety of patients or staff
• With your explicit consent in any other case

We do not sell, rent, or trade your personal information to third parties for their commercial purposes.

6. International Transfers

Some of our service providers (such as Meta for WhatsApp Business, Replit for application hosting, Resend for transactional email) are located outside Jordan, primarily in the United States and the European Union. When we transfer your data internationally, we rely on:

• Standard contractual clauses approved by relevant data protection authorities
• Service providers that maintain appropriate technical and organizational security measures
• The minimum data necessary for the specific service

7. Data Retention

We retain your information for the following periods:

After the retention period, we securely delete or anonymize the data.

8. Your Rights

Under the Jordanian Personal Data Protection Law (Law No. 24 of 2023) and our policies, you have the right to:

• Access your personal information we hold
• Correct inaccurate or incomplete information
• Delete your information (subject to our legal obligations to retain certain medical and financial records)
• Restrict or object to certain types of processing
• Withdraw consent for processing based on consent at any time
• Receive your data in a portable, machine-readable format
• Lodge a complaint with the Jordanian data protection authority

To exercise any of these rights, email hello@r-clinics.com with your full name, the right you wish to exercise, and verification of your identity. We will respond within 30 days.

9. Security

We protect your information using:

• Encryption in transit (HTTPS / TLS) for all communications with our patient portal
• Encryption at rest for stored data
• Role-based access controls limiting which staff can see which records
• Audit logs of all access to medical records
• Multi-factor authentication for staff accounts
• Regular security reviews and updates
• Physical security at our clinic premises

If we discover a data breach affecting your personal information, we will notify you and the relevant authorities as required by Jordanian law.

10. Children's Data

We provide care to patients under 18 only with the consent of a parent or legal guardian. The guardian holds the rights described in Section 8 on the child's behalf until the child reaches 18, at which point the rights transfer to the patient.

11. Cookies

Our patient portal uses essential cookies required for login sessions and security. We do not use advertising cookies, tracking pixels, or analytics cookies that share data with third parties. You can disable cookies in your browser settings, but doing so will prevent you from logging in.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top
• Notify you by email or through our patient portal
• For material changes, request renewed consent where required by law

13. Governing Law

This Privacy Policy is governed by the laws of the Hashemite Kingdom of Jordan, including the Personal Data Protection Law (Law No. 24 of 2023) and Ministry of Health regulations. Any disputes will be resolved by the courts of Amman, Jordan.

14. Contact Us

For any questions, concerns, or requests related to your privacy:

R Clinics
370 Wasfi At-Tall Street
Amman 11822, Jordan
Email: hello@r-clinics.com
Phone: +962 79 093 1819