Privacy notice

Karizo EOOD, company number 207562809, controls account, contract, billing, platform-security, abuse-prevention, professional-verification, opt-in discovery and its own support processing. Privacy contact: [email protected]; its address and telephone appear in the Terms. This does not assert that a data protection officer has been appointed.

The organization or independently practising professional determines the purposes and lawful basis for clinical files, recipients and retention; MediSend processes them on documented instructions. A receiving professional may separately control their own clinical work. Roles follow the actual activity, not merely a screen or contract label.

Account operations use names, emails, preferences, protected password representations, MFA settings, sessions, memberships and grants. Organization operations use business and legal details, selected plans, usage, invoices, payments and commercial history. Clinical content may include health information, identifiers, images, documents and professional notes selected by the customer.

Security and accountability use limited device and network signals, access, issuance and revocation events, account-link consent and verification decisions. Professional profiles use the supplied role, specialty, practice details, registration identifier, contact preferences and verification evidence. Support uses tickets and safe technical context; it does not request medical files, passwords, PINs or OTPs.

Our own activities may rely on contract, legal obligations or assessed legitimate interests in security and accountability. Professional-profile visibility is a separate voluntary choice and can be turned off. Required login and invoice details are identified in the relevant form; the corresponding service may be unavailable without them.

The customer establishes the applicable basis and condition for health data; a general registration checkbox does not replace them. We do not use clinical content for advertising, global patient search or model training. We make no automated clinical decision about a patient. Automated abuse checks may require human review; professional verification is separately reviewed.

Linking records the two consenting accounts, dates and authenticated sessions. Permissions and records remain independent; emails or medical data are not matched to create automatic links. Unlinking stops switching and affected sessions, while limited history may remain for security and claims.

When visibility is enabled, verified professional details and permitted contact fields appear in the directory. Review the displayed fields before opting in and turn visibility off from the professional profile. The directory contains no patient examinations and grants no access to them.

Information is available to authorized staff and explicitly selected recipients, and to verified suppliers for the relevant activity. Email and SMS suppliers receive the contact and minimal access or authentication message; this may include a code/PIN when the customer selects that function. Supplier acceptance does not establish recipient delivery.

The supplier register must identify active contracting entities, countries, functions and transfer mechanisms. This draft does not verify production configuration or promise exclusively EU processing. Processing outside the EEA must be assessed and documented before the affected activity is enabled.

Link expiry differs from content retention. Clinical retention follows the organization’s policy and lawful instructions. Product defaults are not advice on statutory medical archives. Professional-verification evidence has a removal process after 90 days; decisions and minimal audit records may be retained separately.

Invoices, contract evidence and limited security records follow applicable legal, contractual and approved operational periods. Account deletion does not remove these obligations or another organization’s records. The exact retention, backup and legal-hold schedule requires approval before publication.

Depending on the basis, you can request access, rectification, erasure, restriction or portability, or object; a voluntary choice can be withdrawn for future processing. Applicable legal limitations may apply. For clinical content, contact the identified organization first; MediSend assists its request. For our own processing, contact [email protected] without clinical attachments or secrets.

We may request proportionate identity evidence. A response is normally due within one month, with permitted extensions for complexity and timely explanation. You can complain to Bulgaria’s CPDP or another competent supervisory authority. CPDP publishes its procedure at cpdp.bg; complaints do not require surrendering other rights.