Privacy Policy & Medical Data Security
Our commitment to strict medical confidentiality, cryptographic safety, and safeguarding your personal healthcare records.
Core Privacy Commitments at Brahtak
Enterprise-grade patient data protectionMedical Oath
Clinical notes are never shared with advertisers or third parties.
End-to-End Security
Bank-grade database and transit encryption for all communication.
Egyptian Privacy Law
Full compliance with Egyptian data regulations.
Introduction & Medical Confidentiality Standard
Brahtak, a specialized platform for physical therapy and medical rehabilitation in Egypt, treats patient and practitioner privacy as a paramount responsibility. We protect all health and personal records in full compliance with the Egyptian Personal Data Protection Law (Law No. 151 of 2020).
Categories of Data Collected & Purposes
We collect strictly minimal and proportionate data necessary to deliver certified home care and clinic visits safely:
- Name & phone for booking dispatch & OTP verification.
- Detailed physical address for home rehabilitation visits.
- Email for official PDF invoices and scheduling receipts.
- Chief musculoskeletal complaints and injury history.
- Specialist gender preference (Male / Female).
- Rehabilitation milestones and attending doctor notes.
Technical Safeguards & Encryption Standards
We apply enterprise-grade security protocols to protect all stored health records:
- In-Transit & At-Rest Encryption: TLS 1.3 web encryption with AES-256 database protection.
- Banking Grade Payment Security: We do not store credit card numbers; payments are processed securely via Kashier under PCI-DSS standards.
- Strict Role-Based Access: Access to clinical records is strictly limited to your assigned attending specialist.
Your Rights under Egyptian Data Protection Law
Under Egyptian Law No. 151 of 2020, every patient possesses the following enforceable legal rights:
Export past booking invoices & session records.
Update contact, address, or medical preferences.
Request account closure & data erasure.
Contact Data Protection Officer
For any privacy queries, consent withdrawals, or data access requests, contact our compliance office: