Πολιτική Απορρήτου
How Doctors Cyprus collects, uses, shares and protects personal data across browsing, professional listings, memberships and appointment enquiries.
On this page
Who we are
Doctors Cyprus is an online healthcare directory and enquiry platform operated by CREATEAGENCY LTD (“Doctors Cyprus”, “we”, “us” or “our”).
CREATEAGENCY LTD
Αριθμός Εγγραφής Εταιρείας: HE 483989
ΑΦΜ: CY60267355M
13 Αμαζονίου, ΣΟΦΟΚΛΕΟΥΣ, 8025 Πάφος, Κύπρος
Ηλεκτρονική διεύθυνση: info@doctorscyprus.com
For personal data processed through the operation of this website, CREATEAGENCY LTD is generally the controller under Regulation (EU) 2016/679 (GDPR) and applicable Cyprus data-protection law.
Our role and the role of healthcare providers
Doctors Cyprus helps people discover healthcare professionals and send enquiries. We do not provide medical care, medical advice, diagnoses, prescriptions, or emergency services, and use of the platform does not by itself create a doctor-patient relationship.
When you ask us to send an enquiry to a selected doctor, clinic or other healthcare provider, we process that enquiry to route it to the selected recipient. Once the recipient receives and uses the information for their own healthcare, scheduling or record-keeping purposes, they will normally act as a separate controller and their own privacy notice will apply. You should contact that provider directly about how they handle your information.
Personal data we collect
Information you give us
- General enquiries: name, email address, telephone number and the contents of your message.
- Appointment enquiries: name, contact details, the selected provider, profile page, and any message you choose to submit. Your message may contain health information if you decide to include it.
- Professional listings: professional name, contact details, qualifications, specialities, languages, clinic or practice details, address, biography, services, website and social links, photographs, video, documents, and verification material.
- Membership and billing: plan, subscription, invoicing, tax and transaction information. A payment provider may collect payment-card details directly; we normally receive transaction records rather than complete card credentials.
- Communications and preferences: support correspondence, consent choices and marketing preferences.
Information collected automatically
Our website and service providers may collect IP address, browser and device details, approximate location derived from IP, pages viewed, referring page, dates and times, technical identifiers, consent records, and security or diagnostic logs. Non-essential analytics and marketing technologies are used only in accordance with your cookie choices. See our Πολιτική Cookies.
Information from other sources
We may receive professional information from an authorised representative, a clinic, a publicly available professional source, an official register, the professional’s own website or social profile, or a service provider. We use such information to build, verify or correct directory listings and to operate and protect the platform.
How and why we use personal data
Depending on the context, we process personal data for the following purposes and legal bases:
- To provide a requested service or take steps before a contract: routing enquiries, creating or managing listings, administering memberships, processing transactions and providing support.
- For our legitimate interests: operating and improving the directory, maintaining accurate professional listings, responding to business enquiries, measuring service performance using consented or privacy-preserving tools, preventing fraud and spam, securing the website, enforcing our terms and establishing or defending legal claims. We consider the impact on your rights before relying on this basis.
- With consent: non-essential cookies, direct electronic marketing where consent is required, and special-category data where explicit consent is the appropriate legal condition. You may withdraw consent at any time without affecting earlier lawful processing.
- To comply with law: accounting, tax, regulatory, court, law-enforcement and other legal requirements.
If personal data is required to perform a contract or respond to a request and you do not provide it, we may be unable to provide the relevant service.
Appointment enquiries and health information
Health information is a special category of personal data. Only include information that is reasonably necessary for the selected provider to understand and respond to your enquiry. Please do not submit detailed medical records, identity documents, payment-card information or information about another person unless you are authorised and it is genuinely necessary.
Where an appointment form permits health information, we use it only to transmit and administer the enquiry you asked us to send. We rely on your explicit consent for that special-category processing where required by Article 9 GDPR. You may withdraw that consent by contacting us, although withdrawal cannot undo information already transmitted to or lawfully used by the selected provider.
Appointment enquiries are not confirmed bookings and are not monitored as an emergency service. If you or another person may need urgent assistance in Cyprus, call 112 or 199 or contact an appropriate emergency service directly.
Professional profiles and public information
Professional profiles are intended for public display and search indexing. Information such as a professional’s name, photograph, qualifications, speciality, practice location, biography, languages, services and professional contact channels may therefore be visible to anyone and may appear in search-engine results.
We may take reasonable steps to verify profile information, but verification is not a guarantee of clinical quality, current registration, availability or suitability. Professionals and authorised representatives must keep submitted information accurate and inform us promptly of changes. A professional may request correction or review of a listing by emailing us. Removal requests are assessed in light of applicable rights, public information, legal obligations and our legitimate interest in maintaining an accurate directory.
Who receives personal data
We do not sell personal data. We may disclose it only where relevant to the purposes described above, including to:
- the doctor, clinic or healthcare provider you select when sending an enquiry;
- hosting, content-management, form, email-delivery, security, anti-spam, analytics, consent-management, advertising and technical-support providers;
- payment and accounting providers where a paid service is used;
- professional advisers, insurers, auditors, prospective purchasers or investors subject to appropriate confidentiality;
- courts, regulators, law-enforcement bodies or other authorities where disclosure is required or permitted by law; and
- the public, for information intended to form part of a public professional profile.
Providers acting on our instructions are required to protect personal data and use it only for authorised purposes. Third parties acting for their own purposes are responsible for their own compliance.
International transfers
Some technology providers may process data outside Cyprus or the European Economic Area. Where GDPR requires it, we use an adequacy decision, approved Standard Contractual Clauses, or another lawful transfer mechanism, together with supplementary safeguards where appropriate. Details may be requested using the contact information below.
Retention
We keep personal data only as long as reasonably necessary for the relevant purpose, including legal, accounting, security and dispute requirements. Our usual approach is:
- website copies of contact, appointment and professional-submission form entries are normally retained for up to 365 days, unless a longer period is required for support, security or legal reasons;
- emails and support correspondence are kept for as long as needed to resolve the matter and maintain an appropriate business record;
- professional profile and membership information is kept while the listing or commercial relationship is active and for a reasonable period afterwards;
- invoices and transaction records are kept for the period required by tax, accounting and company law;
- consent and suppression records are kept as needed to demonstrate or respect your choices; and
- cookie lifetimes are shown in the live inventory in our Cookie Policy.
Backups may retain data for a limited additional period before secure rotation. A healthcare provider who receives an enquiry sets their own retention period for their copy.
Your rights
Subject to the conditions and exceptions in applicable law, you may have the right to:
- request access to and a copy of your personal data;
- correct inaccurate or incomplete data;
- request deletion or restriction of processing;
- object to processing based on legitimate interests or to direct marketing;
- receive certain data in a portable format;
- withdraw consent at any time; and
- lodge a complaint with a supervisory authority.
To exercise a right, email info@doctorscyprus.com. We may need information to verify your identity and clarify your request. We normally respond within one month, although GDPR allows an extension for complex or numerous requests. You may also contact the Office of the Commissioner for Personal Data Protection in Cyprus.
Cookies and marketing
Necessary technologies support security, consent choices and core website functions. Optional preference, statistics and marketing technologies are controlled through our consent tool. You can reject optional cookies or change your choice at any time through the controls in our Πολιτική Cookies.
Where we send electronic marketing, you can unsubscribe using the link in the message or by contacting us. Service messages about a listing, enquiry, payment or material terms change are not marketing and may still be sent where necessary.
Security and children
We use reasonable technical and organisational safeguards designed to protect personal data from accidental or unlawful loss, alteration, disclosure or access. No online service can guarantee absolute security.
The platform is intended for adults. A parent or legal guardian may use it to find a provider for a child, but should submit only the minimum information needed and should contact the provider directly for sensitive details. Children should not submit forms or create listings themselves. If you believe a child has provided data without appropriate authority, contact us so we can investigate.
Changes, complaints and contact
We may update this policy when our services, providers or legal requirements change. We will publish the revised version here and change the date above. Material changes may also be communicated through the website or directly where appropriate.
Questions, requests or complaints may be sent to:
CREATEAGENCY LTD
13 Αμαζονίου, ΣΟΦΟΚΛΕΟΥΣ, 8025 Πάφος, Κύπρος
Ηλεκτρονική διεύθυνση: info@doctorscyprus.com
Please also read our Πολιτική Cookies, Όροι & Προϋποθέσεις και Medical Disclaimer.