Privacy Policy
This Privacy Policy explains how Dr. Mohamed Basil's dental clinic collects, uses, stores, and shares personal information when you visit drmohamedbasil.com or interact with our clinic. We are committed to protecting your privacy in accordance with the Hashemite Kingdom of Jordan's Personal Data Protection Law No. 24 of 2023 and applicable international standards.
Effective date: 13 May 2026 · Last updated: 13 May 2026 · Version 1.0
1. Data Controller
The data controller responsible for the processing of your personal data is:
Dr. Mohamed Basil — Restorative Dentistry Clinic
Fourth floor, Wasfi Al-Tal Street 178, Amman, Jordan
WhatsApp / Phone: +962 79 897 6723
Website: drmohamedbasil.com
For any privacy-related inquiry, complaint, or to exercise your data rights, please contact us using the details above with the subject line "Data Privacy Request".
2. Categories of Data We Collect
We collect only the personal data necessary for the purposes described below.
2.1 Data you provide directly
- Contact data: Name, phone number, and any optional message you submit through the consultation form on our website or through WhatsApp.
- Clinical conversations: Any information you voluntarily share via WhatsApp or in person about your dental concerns, symptoms, or treatment preferences.
2.2 Data collected automatically
- Device & technical data: Browser type, operating system, IP address (truncated and anonymised where possible), screen size, and approximate location (country/city level only).
- Usage data: Pages visited, time spent, links clicked, and the referring source (e.g., search engine, social media, or advertising link).
- Advertising identifiers: Google Ads click identifiers (when permitted via consent) to attribute conversions to specific campaigns.
2.3 Sensitive data
We do not deliberately collect sensitive personal data (such as detailed medical history) through this website. Any clinical details you share for treatment purposes are collected separately in our clinic during in-person consultations and handled under standard medical confidentiality obligations, not under this online Privacy Policy.
3. Legal Basis & Purposes of Processing
Under Jordan's Personal Data Protection Law 2023 and international standards (e.g., GDPR Art. 6 for EU visitors), we process your personal data on the following lawful bases:
| Purpose | Categories used | Legal basis |
|---|---|---|
| Responding to consultation requests and scheduling appointments | Contact data, clinical conversations | Performance of a service you requested; your explicit consent |
| Providing dental services and post-treatment follow-up | Contact data, clinical data (collected in-clinic) | Performance of a treatment contract; legitimate medical interest |
| Operating, securing, and improving the website | Device & technical data, usage data | Legitimate interest in maintaining a functional, safe service |
| Measuring advertising performance and reaching new patients | Usage data, advertising identifiers | Your consent (via the cookie banner) |
| Complying with legal, regulatory, or court obligations | Any category as required | Legal obligation |
4. Cookies & Tracking Technologies
We use the following categories of cookies and similar technologies. You can accept, reject, or customise these via the cookie banner that appears on your first visit, and re-open your preferences at any time via the small cookie icon at the bottom-left of the page.
| Category | Examples / Purpose | Retention | Default |
|---|---|---|---|
| Strictly necessary | Language preference, session security. Always active. | Session — 12 months | Always on |
| Analytics | Aggregated, anonymised usage statistics to understand site performance. | Up to 24 months | Off until consent |
| Advertising | Google Ads cookies (_gcl_aw, _gcl_au) to measure ad conversions and reach relevant audiences. | Up to 90 days | Off until consent |
Our implementation uses Google's Consent Mode v2 — when you decline tracking, Google receives no identifiable data; only anonymous, modelled signals are sent to support aggregate measurement.
5. Recipients & Sharing
We do not sell your personal data. We share limited data with the following categories of processors and third parties strictly as necessary:
- Hosting & infrastructure: Cloudflare, Inc. (United States & EU edge nodes) — provides website hosting, DNS, and security. Cloudflare processes data under its own published privacy terms and may temporarily process your IP address and request headers.
- Email infrastructure: Hostinger International Ltd. (Lithuania, EU) — hosts our clinic email service.
- Analytics & advertising: Google LLC (United States, with EU representative) — operates Google Analytics and Google Ads. Engaged only with your consent.
- Messaging: WhatsApp / Meta Platforms, Inc. — when you choose to message us via WhatsApp, the conversation is governed by WhatsApp's end-to-end encrypted infrastructure and Meta's privacy terms.
- Legal authorities: Government, regulatory, or judicial authorities in Jordan or other applicable jurisdictions, when legally required.
6. International Transfers
Some of our processors (Cloudflare, Google, Meta) are based outside Jordan. Where personal data is transferred outside Jordan, we rely on safeguards including the recipient's own data protection commitments, EU Standard Contractual Clauses (where applicable), and the principles of Jordan's PDP Law 2023.
7. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected:
- Consultation request data — up to 12 months after the request, unless the request leads to an active patient relationship.
- Patient clinical records — retained in accordance with applicable medical record-keeping laws in Jordan (typically 10 years).
- Website analytics & advertising data — retained per the cookie retention periods in Section 4. Aggregated, non-identifying data may be retained indefinitely for trend analysis.
- Email correspondence — up to 24 months unless retained longer for legal reasons.
8. Security
We implement technical and organisational measures appropriate to the risk, including:
- HTTPS encryption across the entire website (TLS 1.3) via Cloudflare
- End-to-end encrypted messaging via WhatsApp
- Access controls and authentication on internal systems
- Regular security review of third-party processors
However, no internet transmission or storage system is 100% secure. If we become aware of a personal data breach that poses a risk to your rights, we will notify affected individuals and relevant authorities in accordance with applicable law.
9. Your Rights
Under Jordan's Personal Data Protection Law 2023 (and GDPR for EU visitors), you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate or incomplete information
- Erasure — request deletion, subject to legal record-keeping obligations
- Restriction — limit how we process your data in specific circumstances
- Portability — receive your data in a structured, commonly used format
- Objection — object to processing based on legitimate interest or for direct marketing
- Withdraw consent — at any time, where processing is based on consent (without affecting prior lawful processing)
- Lodge a complaint — with Jordan's Personal Data Protection Unit or your local data protection authority
To exercise any of these rights, contact us via the details in Section 1. We will respond within 30 days. Identity verification may be required.
10. Children
Our website is intended for an adult audience. We do not knowingly collect personal data from individuals under 18 without verified parental or guardian consent. If you believe a minor has provided personal data without consent, please contact us and we will delete the information promptly.
11. Patient Imagery & Testimonials
Before/after photographs and patient testimonials displayed on this website are published only with the patient's prior written or recorded consent. Patients retain the right to withdraw this consent at any time and have their imagery or testimonial removed by contacting us.
12. Third-Party Links
This site contains links to external platforms (Instagram, WhatsApp, Google Maps). These services are governed by their own privacy practices, and we are not responsible for their content or data handling.
13. Changes to this Policy
We may revise this Privacy Policy from time to time to reflect legal, operational, or technical changes. Material changes will be notified via a notice on the website. The "Last updated" date above always reflects the current version.
14. Contact & Complaints
For any privacy-related concern, request, or complaint, please contact us using the details in Section 1. If you believe we have not adequately addressed your concern, you have the right to lodge a complaint with the Jordanian Personal Data Protection Unit established under the Personal Data Protection Law 2023, or with a relevant supervisory authority in your country of residence.