Privacy Policy

1. Introduction

Welcome to Finland Eye Center. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or use our medical services at any of our four branches across the Sultanate of Oman (Muscat, Sohar, Salalah, Nizwa).

2. Information We Collect

a. Personal Data

• Full name and contact information (phone number, email address, physical address)
• Date of birth, gender, and nationality
• National ID or passport number
• Health insurance information

b. Medical Records

• Medical history and ophthalmic history
• Examination results and diagnoses
• Treatment plans and prescribed medications
• Eye images and scans (OCT, tonometry, corneal topography)
• Surgical procedure records

c. Website Usage Data

• IP address, browser type, and operating system
• Pages visited and duration of visit
• Referral source (search engine, direct link, referral)
• Device information and screen resolution

3. How We Use Your Information

a. Medical Care Delivery

We use your medical data to diagnose your condition, provide appropriate treatment, monitor your health progress, and coordinate care between our doctors and branches.

b. Communication

We may contact you to confirm appointments, send appointment reminders, inform you of test results, or provide health information relevant to your condition.

c. Analytics & Service Improvement

We use aggregated browsing data to analyze website performance, improve user experience, and understand how visitors interact with our online services.

4. Data Protection

We implement rigorous security measures to protect your data:

• Data encryption in transit and at rest using SSL/TLS protocols
• Secure database systems with Row-Level Security (RLS) policies
• Strict Role-Based Access Controls (RBAC) for staff members
• Regular data backups with disaster recovery plans
• Periodic security audits and penetration testing
• Multi-factor authentication for administrative systems

5. Patient Rights

Under Oman data protection regulations, you have the following rights:

6. Cookie Policy

Our website uses cookies to enhance your experience:

7. Third-Party Services

We use the following third-party services that may collect data:

• Supabase: For secure data storage and authentication with encryption and strict security policies
• Google Analytics: For website traffic analysis (aggregated and anonymized data)
• Ahrefs: For SEO optimization and website performance analysis
• Netlify: For website hosting and secure content delivery

We do not sell or share your personal or medical data with any third party for marketing purposes.

8. Data Retention Periods

• Medical records: Retained for a minimum of 10 years as required by Oman law
• Appointment data: Retained for 5 years after the last visit
• Contact data: Retained as long as you have an active account
• Browsing data: Automatically deleted after 26 months
• Cookie logs: According to the duration of each type as outlined above

9. Children's Privacy

For patients under 18 years of age, we collect data only with the consent of a parent or legal guardian. Children's data is treated with the same level of protection and security applied to adult data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date at the top.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: