We collect the following types of data:

• Personal Information: Name, email, professional credentials, facility name.
• Patient Referral Information: Data input during referrals, which may include Protected Health Information (PHI)Protected Health Information (PHI).
• Usage Data: Logs, IP addresses, device/browser information for system optimization.

• Facilitate secure digital referrals between licensed healthcare entities.
• Support platform functionality and user authentication.
• Ensure compliance with Qatari data protection and healthcare laws.

• Consent of the user and/or patient (as required by law).
• Legitimate interest to provide a secure referral platform.
• Compliance with legal obligations in Qatar.

• Users are solely responsible for obtaining valid and informed patient consent before uploading or sharing any PHI.
• MedRef does not store PHI for longer than necessary and employs industry-standard encryption and access controls.

• Data is stored on secured cloud servers.
• Patient data is retained only as long as necessary to fulfill referral services, unless longer retention is required by law or regulation.

• MedRef does not sellor trade any personal or patient data.
• Referral data is shared only between authorized referral participants.
• Data may be disclosed only under request from governing authorities (Ministry of Public Health in Qatar) or court orders or legal obligations under Qatari law.

As per Qatari privacy law, you have the right to:

• Access your data;
• Correct or delete inaccurate information;
• Withdraw consent where applicable;

We use:

• End-to-end encryption for referrals;
• Role-based access controls;
• Regular security audits and system updates.

For privacy-related inquiries, contact:
📧 info@med-ref.com