Privacy Policy for Ibn Al Haytham Hospital
Last updated: August 17, 2026
This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and informs You about Your privacy rights and how the law protects You.
We use Your Personal and Health Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
Interpretation and Definitions
Interpretation
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- Account means a unique account created for You to access our Service or parts of our Service.
- Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
- Application refers to Ibn Al Haytham Hospital Patient App, the mobile software application provided by the Company.
- Company (referred to as either "the Company", "We", "Us", or "Our" in this Agreement) refers to Ibn Al Haytham Hospital, Al Madinah Al Munawwarah Street, Tla’a Al-Ali, Amman, Jordan.
- Country refers to: Jordan.
- Device means any device that can access the Service such as a cellphone, digital tablet, or computer.
- Personal Data is any information that relates to an identified or identifiable individual, including healthcare and medical identification details.
- Service refers to the Application.
- Service Provider means any natural or legal person who processes data on behalf of the Company to facilitate, deliver, or maintain the Service.
- Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
- You means the individual accessing or using the Service, or the legal entity on behalf of which such individual is accessing or using the Service, as applicable.
Collecting and Using Your Personal Data
Types of Data Collected
Personal and Medical Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information and medical records necessary to provide hospital services. This information may include, but is not limited to:
- First name, middle name, and last name
- National ID / Passport Number / Medical Record Number (MRN)
- Date of birth and gender
- Phone number and email address
- Home and delivery address details
- Medical information (appointment history, laboratory test results, radiology reports, prescriptions, and physician notes)
Device Permissions & Media Access
To deliver specific features, the Application may request access to:
- Camera & Photo Library / Storage: To allow You to capture, upload, and attach existing medical prescriptions, external medical reports, or update Your profile picture.
- Push Notifications: To deliver automated appointment reminders, real-time lab/radiology readiness alerts, and critical healthcare updates.
Usage Data
Usage Data is collected automatically when using the Service. Usage Data may include information such as Your Device's Internet Protocol address (IP address), operating system type and version, browser type, unique device identifiers, device performance, and diagnostic crash data.
Use of Your Personal Data
The Company may use Personal Data for the following purposes:
- To provide and maintain our Service: Including managing user logins, authenticating patient identity, and monitoring system health.
- To manage Your Account: To facilitate access to your electronic medical profiles, appointments, laboratory results, and imaging reports.
- To facilitate healthcare services: Enabling online appointment bookings, doctor consultations, and clinic scheduling.
- To contact You: By SMS, telephone calls, email, or push notifications regarding appointments, security updates, system announcements, or test result availability.
- To manage Your requests: To attend to and resolve customer service and patient support inquiries.
- For security and compliance: To prevent fraudulent access, secure sensitive health records, and comply with applicable medical data regulations and accreditation standards.
Sharing of Your Personal Data
We strictly protect Your confidential health and personal records. We do not sell, rent, or trade patient information. We may share Your data only under the following specific circumstances:
- With Medical Personnel & Healthcare Providers: Doctors, nurses, and authorized hospital staff directly involved in Your diagnosis, treatment, and clinical care.
- With Service Providers: Trusted technical partners and IT vendors who assist in hosting, database maintenance, and communication delivery under strict non-disclosure and confidentiality agreements.
- For Legal Obligations: When required by Jordanian law, court orders, or official requests by public health and government authorities.
- With Your Explicit Consent: For any other clinical or administrative purpose where You give direct authorization.
Retention, Transfer & Security
Retention of Your Personal Data
The Company will retain Your Personal and Medical Data only for as long as is necessary for the purposes set out in this Privacy Policy and in compliance with healthcare data retention laws and hospital governance standards in Jordan. Usage Data is retained for internal analytical and security auditing purposes to improve application stability and performance.
Transfer of Your Personal Data
Your information, including Personal Data, is processed at the Company's operational offices and secure on-premise/cloud data centers. It will not be transferred to any external jurisdiction unless adequate technical and organizational security controls are maintained to safeguard Your data.
Delete Your Personal Data (User Rights & Account Deletion)
You have the right to request access to, update, or request the deletion of the Personal Data collected through the Service:
- You may review or modify basic account details directly from within the Application settings.
- You may request full account deactivation and data removal by contacting our IT and patient support team at mobile@ihh.com.jo.
Note: Official clinical records, diagnostic reports, and medical transaction histories may be legally required to remain archived in accordance with hospital regulatory retention policies.
Security of Your Personal Data
The security of Your Personal Data is of critical importance to Us. We enforce robust security standards—including SSL/TLS communication encryption, firewalls, and restricted role-based database access—to protect sensitive health information against unauthorized access, loss, or alteration.
Additional Policies
Children's Privacy
The Service may be used by parents or legal guardians to manage healthcare records and appointments for their minor children. We do not knowingly collect personal data directly from children without parental or legal guardian consent.
Links to Other Websites
Our Service may contain links to external web resources (such as official health portals or social channels). If You click on a third-party link, You will be directed to that site. We encourage You to review the Privacy Policy of every website You visit.
Changes to this Privacy Policy
We may update Our Privacy Policy periodically. We will notify You of any material changes by posting the updated Privacy Policy on this page and updating the "Last updated" date at the top.
Contact Us
If You have any questions or requests regarding this Privacy Policy, You can contact us:
- Entity Name: Ibn Al Haytham Hospital
- Address: Al Madinah Al Munawwarah Street, Tla’a Al-Ali, Amman, Jordan
- Email: mobile@ihh.com.jo / info@ihh.com.jo
- Official Website: https://ihh.com.jo