Privacy and Personal Data Protection Policy

1. Who processes your data (the Controller)

The controller of personal data is sole proprietor (FOP) Oksana Mykhailivna Obrizko, who carries out medical practice under the name “St. Panteleimon Family Clinic” (hereinafter — the “Clinic”, “we”).

• Address: 6/36 Bilasa i Danylyshyna St., Kalush, Ivano-Frankivsk region, 77304, Ukraine
• Taxpayer number (RNOKPP): 2643515028
• Medical practice license: Order of the Ministry of Health of Ukraine No. 1265 of 05.07.2018 “On licensing of medical practice” (valid from 05.07.2018, permanent)
• Phone: +38 (097) 699-53-84
• Email for data-related questions: obrizkoo@gmail.com

2. What personal data we collect

2.1. Data you provide yourself

• first name and surname;
• phone number;
• email address (if provided);
• the selected service, preferred date of visit and other information you provide in the booking form, a comment or during a phone call.

2.2. Health data (special category)

When providing medical services, we may process data about your health — a special category of personal data with an enhanced level of protection. Such data is processed solely for the purpose of providing medical care and constitutes medical confidentiality under the healthcare legislation of Ukraine.

2.3. Technical data

When you visit the website, anonymized technical data (device type, browser, pages viewed, clicks on the main buttons) is collected automatically — without cookies, see section 8.

3. Why we process data

• booking appointments and contacting you to confirm a visit;
• providing medical services and keeping medical records;
• responding to your requests and enquiries (phone, form, messengers);
• complying with legal requirements (in particular in the field of healthcare);
• improving the website and the quality of service (in anonymized form).

4. Legal grounds

We process your data on the basis of:

• your consent — which you give, in particular, by ticking the corresponding box in the booking form;
• the need to provide medical care and to perform the contract for medical services;
• compliance with obligations under the law, primarily the Law of Ukraine “On Personal Data Protection” No. 2297-VI of 01.06.2010 and healthcare legislation.

5. Who we may share data with

We do not sell your personal data. Data may be shared only to the extent necessary for the purposes above, in particular with:

• the electronic healthcare system / medical services (in particular the Health24 medical information system) — for appointments and medical records;
• the website hosting and technical support provider;
• web analytics services — Cloudflare Web Analytics and PostHog (servers in the European Union) — anonymized data only, without names, phone numbers or form contents;
• messengers (e.g. Telegram), if you contact us through them;
• public authorities — only in the cases and in the manner provided by law.

6. How long we keep data

Appointment data is kept for as long as necessary to handle your request, and medical records — for the periods set by healthcare legislation. After these periods expire, the data is deleted or anonymized.

7. How we protect data

We take organizational and technical measures to protect data from unauthorized access, loss or disclosure: limited staff access, medical confidentiality, a secure website connection (HTTPS). No method of transmitting data over the internet is completely secure, but we keep improving our protective measures.

8. Cookies and analytics

To understand how visitors use the website and make it more convenient, we use anonymized analytics: Cloudflare Web Analytics and PostHog (PostHog Cloud, servers in the European Union). These tools do not set cookies and do not store data in your browser; a random visit identifier exists only while the tab is open.

What is collected: pages viewed (address without parameters, except the selected service), website language, the website you came from (without address parameters), device type, browser, operating system, screen size, approximate location (country, city) derived from the IP address — we do not store the IP address itself — as well as clicks on the main buttons ("Book now", "Sign a declaration", phone, Telegram, map), opening questions in the FAQ section, and the fact that the booking form was submitted and its result (success or error).

What is not collected: your name, phone number, message text or any other data you enter in the booking form. We do not record browsing sessions, do not build visitor profiles and do not use analytics for advertising.

Analytics does not start if your browser sends a "Do Not Track" or Global Privacy Control signal. You can also block it with any content blocker — the website will keep working fully.

The Google Maps map in the "Contacts" section is a third-party service that may use its own cookies under Google's policy.

9. Your rights

Under Article 8 of the Law of Ukraine “On Personal Data Protection”, you have the right to:

• know the sources of collection and the location of your data and the purpose of its processing;
• access your data;
• request correction of inaccurate or incomplete data;
• request deletion of your data if it is processed unlawfully or is no longer needed;
• withdraw previously given consent;
• object to processing and file complaints with the Ukrainian Parliament Commissioner for Human Rights.

To exercise your rights, write to us at obrizkoo@gmail.com or call +38 (097) 699-53-84.

10. Children's data

Data of underage patients is processed only with the consent and in the presence of their parents or other legal representatives.

11. Changes to this Policy

We may update this Policy. The current version is always available on this page with its effective date. We recommend reviewing it periodically.

12. Contacts

For any questions about the processing of personal data, contact us: obrizkoo@gmail.com, +38 (097) 699-53-84, 6/36 Bilasa i Danylyshyna St., Kalush.