Privacy Policy

1. Who We Are

iCure Technology Limited British limited liability company (“iCure”, “we”, “us” or “our”), is the owner and operator of [http://his.consiliemdigital.com/], our web portals, mobile applications, and related software and services (together, the “Services”).

Our Services include, among others:

• - A clinical decision support system (CDSS) for healthcare professionals
• - Electronic medical record (EMR) and practice management tools for clinics and hospitals
• - A patient-facing application/portal to access health records and communicate with providers

We respect the privacy of your data and are committed to protecting it. This Privacy Policy explains how we collect, use, share and protect personal information about users of our Services, including healthcare providers, medical facilities, medical professionals, and patients (together referred to as “users”, “you” or “your”).

Your access to and use of the Services is also governed by our Terms & Conditions. Capitalized terms used but not defined here have the meaning given in the Terms & Conditions.

2. Data Controller & Data Processor Roles

A “Data Controller” is the person or entity that determines the purposes and means of processing personal data. A “Data Processor” is the person or entity that processes personal data on behalf of a Data Controller.

In practice:

• - For patient health data managed on behalf of a clinic, hospital, or healthcare professional, iCure usually acts as a Data Processor and the healthcare provider is the Data Controller.
• - For certain operations (e.g. user account management, platform analytics, marketing, or when you use the patient app directly), iCure may act as an independent Data Controller.

We process your data only as permitted by applicable laws.

3. Definitions

“Personal Data” / “Your Information” means any information that identifies you or can reasonably be used to identify you, directly or indirectly.

“Protected Health Information” (“PHI”) means health-related information about patient users that can reasonably be used to identify them and relates to:

• - physical or mental health condition (past, present, or future)
• - provision of healthcare
• - payment for healthcare

4. Protected Health Information (PHI)

When we process PHI on behalf of healthcare providers (e.g. using iCure to store patient records, assist diagnosis, or manage appointments), we act as a Data Processor.

We implement appropriate technical, organizational, administrative, and physical safeguards to protect PHI, including:

• - access controls and role-based permissions
• - encryption in transit and at rest (where applicable)
• - audit logging and monitoring
• - policies and procedures for confidentiality and security

We will only access, use, or disclose PHI:

• - as instructed or permitted by the healthcare provider,
• - as authorized by you, or
• - as required or permitted by applicable law.

5. Information You Provide Directly

We may collect information that you provide directly to us, for example when you:

• - register for an account on iCure (doctor, clinic, or patient)
• - fill in forms or questionnaires
• - submit medical history or health information through the patient portal
• - request support, book a demo, or contact us
• - subscribe to newsletters or marketing communications
• - join events or programs related to iCure

Depending on who you are (provider or patient), this may include:

Identification & contact information:

• - Full name
• - Date of birth
• - Email address and phone number
• - Physical and/or business address
• - Profile photo

Professional information (for healthcare providers):

• - Medical license number
• - Specialization
• - Affiliated clinic/hospital
• - Professional qualifications and experience

Health and medical information (for patients):

• - Demographic and basic health profile
• - Medical history, diagnoses, medications, allergies
• - Visit history, clinical notes, test results, imaging reports
• - Treatment plans and prescriptions
• - Lifestyle and other information you or your provider choose to store in the system

Payment and billing information:

• - Payment method details (processed through third-party payment gateways
• - Billing address, transaction history

Any other information you choose to provide.

6. Information Collected Through Your Use of the Services

When you use iCure, we may automatically collect certain information about how you interact with our Services, for example:

• - Date and time you log in and log out
• - Features and modules you use (e.g. CDSS, EMR, messaging, scheduling)
• - Actions taken (searches, clicks, pages viewed, forms submitted)
• - Device and browser type
• - Referring pages and links clicked inside the Services

We use this information to ensure compatibility and performance, detect and fix bugs, provide support and improve security.

• - operate, maintain, and improve the Services
• - secure accounts and detect abuse or suspicious activity
• - generate usage analytics to help us prioritize features and performance improvements.

7. Information from Third Parties

We may also receive information about you from:

• - Healthcare providers and facilities
• - Connected services or apps
• - Payment providers and financial institutions
• - Publicly available sources, where permitted by law.

If you choose to log in or connect via a third-party service, we may receive the information you permit that service to share with us (such as name, email, etc.).

8. Cookies & Similar Technologies

We use Cookies and similar technologies to operate and improve our Services.

Cookies are small text files placed on your device by websites or apps. They allow us to:

• - remember you when you return
• - keep you logged in
• - store preferences and settings
• - understand how the Services are used

We may use session cookies (deleted when you close your browser/app) and persistent cookies (stored for a longer period), as well as web beacons, tracking pixels, and local storage/app caches for analytics, security, and to improve user experience.

Third-party providers may use cookies or similar technologies to provide analytics or service functionality.

You can manage or delete cookies through your browser or device settings. If you disable cookies, some features of iCure may not work properly.

9. Device & Technical Information

When you use iCure on a computer or mobile device, we may collect:

• - Device type, operating system, and version
• - Device identifiers (where allowed)
• - IP address and approximate location
• - App version and configuration
• - Error logs and crash information

We use this information to ensure compatibility and performance, detect and fix bugs, provide support and improve security.

10. Mobile App Permissions & SDKs

If you use the iCure mobile app, it may request access to certain device features, for example:

• - Camera (e.g. to scan documents or upload photos)
• - Storage (e.g. to store downloaded reports)
• - Internet access

We also use software development kits (SDKs) and similar tools, some provided by third parties, to:

• - analyze app usage and performance
• - detect crashes and bugs
• - enable certain functionalities (e.g. push notifications, secure communication)

You can manage certain permissions via your device settings. Disabling some permissions may limit certain app features.

11. Location Information

We may collect or infer location information:

• - from your IP address (approximate country/city level)
• - from device GPS / location services (only with your consent)
• - from the address details you or your provider enter into the system

We use location data to personalize content, help route you to nearby providers or relevant services (if such features exist), and comply with jurisdiction-specific legal requirements.

12. Call & Messaging Data

If iCure enables communication features (e.g. in-app messaging, call logs, SMS notifications):

• - We may collect metadata such as date/time, sender/recipient, and message status.
• - Content of messages may be stored to maintain care records, where applicable.

If we need to use call or SMS content beyond basic service provision, we will obtain your consent where required by law.

13. Children’s Privacy

Our Services are generally intended for adults and licensed healthcare professionals.

We do not knowingly allow children under the applicable age of majority to create independent accounts without appropriate authorization. However, healthcare providers and parents/guardians may store children’s health data in iCure as part of legitimate medical care.

If you believe a child has created an account or provided personal information to us without appropriate authorization, please contact us at [Contact Email]. We will take steps to investigate and delete such information where required.

14. How We Use Your Information

We use your information for our legitimate business purposes and to provide a safe, efficient, and compliant Service. Main purposes include:

• - Providing and operating the Services
• - Supporting healthcare delivery
• - Customer support & communication
• - Billing & payments
• - Analytics & improvement
• - Security, fraud prevention & legal compliance
• - Marketing & product communication (where permitted)

Our legal bases may include: your consent, performance of a contract, compliance with legal obligations, and our legitimate interests.

15. How We Share Your Information

We may share your information:

• - With healthcare providers and facilities
• - With service providers (Data Processors)
• - With affiliates and group companies
• - With research partners (only anonymized/aggregated data)
• - For legal and safety reasons
• - In business transfers
• - With your consent

We do not sell your personally identifiable health information.

16. Aggregated & Anonymized Data

We may create and use aggregated or de-identified data that cannot reasonably be used to identify you or your patients, for purposes such as statistical analysis, research, improving healthcare workflows, and understanding disease trends.

17. International Data Transfers

If we transfer your personal data outside Egypt or your country of residence, we will ensure appropriate safeguards are in place in line with applicable law.

18. Data Security

We use a combination of technical, organizational, and administrative measures to protect your data. However, no system is 100% secure. If we become aware of a data breach that affects your rights and freedoms, we will take appropriate steps and notify you and/or relevant authorities where required by law.

19. Data Retention

We retain personal data for as long as your account is active, as long as your provider maintains your records on iCure, as long as necessary to provide the Services, or as required by applicable regulations. After that, data may be anonymized or securely deleted, unless we must retain it longer to comply with legal obligations, resolve disputes, or enforce agreements.

20. Your Rights

Subject to applicable laws, you may have rights to:

• - Access your data
• - Rectify inaccurate data
• - Request deletion in certain circumstances
• - Restrict processing
• - Object to certain processing
• - Data portability
• - Withdraw consent

To exercise any of these rights, please contact us at [Contact Email]. We may ask you to verify your identity before fulfilling your request.

21. Marketing Communications & Opt-Out

If you have opted in, we may send you news, updates, and marketing communications about iCure. You can opt out at any time by clicking “unsubscribe” in our emails or by contacting us at [Contact Email]. We may still send important non-promotional messages (e.g. security alerts, account notices).

22. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for their content, security, or privacy practices. We encourage you to review the privacy policies of any third-party sites or services you visit.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top and, where required, notify you via email or in-app notification.

Your continued use of the Services after the effective date of the updated policy constitutes your acceptance of the changes.

24. Contact Us

If you have any questions or requests regarding this Privacy Policy or our handling of your personal information, please contact:

• - Email: info@icure.com
• - Registered Office: 17 The Pastures, Takeley, Bishop’s Stortford, Essex CM22 6TH