Privacy at Dr. Sobhan Saki’s website
This policy explains information used for patient sign-in, consultation coordination and payment review. Reading public educational pages does not require an account. Share health records and payment documents only in the appropriate private request.
Information collected and purposes
Patient sign-in uses a mobile number and one-time verification. Records may include the name supplied in your account, consultation type, requested or reserved time, appointment status, coordination details and an uploaded bank-transfer receipt. Authentication events and administrative actions may be recorded for security, troubleshooting and dispute resolution. Information is used to authenticate users, coordinate services, communicate request status, verify payments and provide support. Never send card passwords, CVV codes or online-banking credentials.
Access and service providers
Patients access requests belonging to their own account. The physician and authorized staff access information needed for their permitted work. Staff credentials are separate from patient OTP sign-in. Receipts are delivered through access-controlled routes rather than public image links. Hosting, database, file-storage and SMS providers support the service. SMS delivery necessarily sends your number and the relevant message to the messaging provider. Choosing an external consultation messenger also subjects communications to that provider’s policies. Confirm the intended recipient before sending sensitive documents.
Retention and your requests
Records are retained as needed for service delivery, support, payment reconciliation and disputes. Receipt retention follows the active storage configuration and may be extended by financial or legal holds and unresolved disputes. Immediate automatic deletion is not promised. Contact the service through the contact page to request access, correction or deletion, quoting your tracking number. Identity and applicable retention restrictions are checked before acting; necessary financial or disputed records may need to remain.
Session cookies and account security
Session cookies maintain authenticated access. Keep one-time codes, staff passwords and private links confidential, and sign out on shared devices. No internet service can promise absolute security. Report suspected access or incorrectly sent documents using the contact page. Personal health information is not used for public advertising.
Updates and contact
Review the current policy before submitting sensitive information. New analytics tools or services should be described here when activated. Privacy questions can be raised through the contact page. This website is not an emergency service; in Iran call 115 for a medical emergency.