Privacy Policy

1. Introduction

Tabeebo respects your privacy and is committed to processing personal information responsibly, transparently, and securely.

This Privacy Policy explains how personal information may be collected, used, stored, disclosed, transferred, and protected when you:

• visit or search the Tabeebo website;
• create or manage an account;
• create, claim, or manage a specialist, clinic, hospital, or other provider profile;
• submit information or documents for verification;
• contact a healthcare or aesthetic-service provider;
• request or manage an appointment;
• submit an inquiry about a Medical & Aesthetic Package;
• purchase or manage a provider subscription;
• use Tabeebo’s patient-facing AI chatbot;
• use the AI Assistant available to specialists, clinics, or hospitals;
• submit a review, rating, comment, complaint, or support request;
• use another feature made available through Tabeebo.

This Privacy Policy applies to visitors, patients, specialists, doctors, dentists, clinics, hospitals, medical centres, aesthetic-service providers, organization representatives, and other users of Tabeebo.

Certain services may require an additional privacy notice or consent. Telemedicine, when activated, will have separate provider and patient terms, privacy information, and consent requirements.

2. Information we collect

The information collected depends on how you use Tabeebo.

2.1 Information collected from visitors

When you visit or search Tabeebo, we may collect:

• IP address;
• browser type and version;
• device type;
• operating system;
• language preference;
• time-zone information;
• approximate location derived from technical information;
• pages visited;
• searches, filters, and selections;
• date, time, and duration of visits;
• referring website or page;
• interaction with profile contact controls;
• cookie and similar-technology identifiers;
• security, performance, diagnostic, and error information.

Where you voluntarily permit browser geolocation, your location may be used to show nearby providers or services. You can withdraw this permission through your browser or device settings.

2.2 Patient and registered-user information

When you create or use an account, we may collect:

• full name;
• username;
• email address;
• telephone number;
• country and city;
• preferred language;
• password in securely hashed form;
• email or telephone verification status;
• account preferences;
• saved searches or selections where available;
• inquiry and appointment information;
• communications sent through Tabeebo;
• uploaded files where a feature permits them;
• reviews, ratings, and comments;
• support requests;
• complaints and dispute information;
• notification preferences;
• policy and terms acceptance records;
• account activity and security logs.

You should not submit unnecessary health, identity, financial, or confidential information through ordinary contact forms, reviews, comments, or support messages.

2.3 Specialist and individual-provider information

For specialists and other individual providers, we may collect:

• legal and professional name;
• private account email and telephone number;
• public professional contact details;
• professional biography;
• professional title;
• specialties and subspecialties;
• treatments and services;
• education and training;
• professional experience;
• certificates and qualifications;
• licence or professional-registration information;
• professional memberships and affiliations;
• country of practice;
• workplace and practice locations;
• working hours;
• profile photograph;
• gallery images and videos;
• website and social-media links;
• appointment availability;
• consultation modes;
• professional prices;
• subscription information;
• verification documents;
• communications with Tabeebo;
• provider-panel activity;
• account, security, and audit records.

Private account contact information is used for login, security, verification, account recovery, support, billing, and Tabeebo communications. It is not automatically displayed on the public profile.

2.4 Clinic, hospital, and organization information

For clinics, hospitals, medical centres, and other organizations, we may collect:

• organization name;
• organization type;
• registration and licence information;
• private account contact details;
• public professional contact details;
• “About Us” content;
• departments, specialties, treatments, and services;
• associated specialists and staff;
• practice addresses and map locations;
• working hours;
• logos, photographs, gallery images, and videos;
• website and social-media links;
• appointment information;
• Medical & Aesthetic Package information;
• subscription and billing details;
• representative identity and contact information;
• evidence that a representative is authorized;
• verification documents;
• organization-panel activity;
• account, security, and audit records.

2.5 Provider-verification information

Verification information may include:

• identity documents;
• professional licences;
• professional-registration numbers;
• organization-registration documents;
• qualifications and certificates;
• proof of education or training;
• evidence of employment or association;
• authorization documents;
• communications relating to verification;
• information obtained from professional, governmental, institutional, or public sources;
• verification decisions;
• previous verification status;
• requests for additional information.

Verification documents are not intended for public display unless the provider chooses to publish a particular document or publication is otherwise lawful and appropriate.

2.6 Appointment and inquiry information

When appointment or inquiry features are used, we may collect:

• selected specialist, clinic, hospital, or provider;
• appointment type;
• consultation mode;
• requested date and time;
• appointment duration;
• appointment status;
• patient contact details;
• patient message or stated reason;
• assigned specialist;
• booking, confirmation, cancellation, and rescheduling events;
• notification and reminder records;
• provider responses;
• support and dispute records;
• technical records relating to appointment activity.

Medical or health information should only be requested where it is necessary for the relevant service and where appropriate safeguards and lawful processing grounds exist.

2.7 Medical & Aesthetic Package inquiries

When you submit a package inquiry, we may collect:

• name;
• email address;
• telephone number;
• country and city;
• selected package;
• selected clinic or hospital;
• inquiry message;
• desired service or treatment;
• inquiry status;
• provider response;
• consent and policy-acceptance records;
• anti-spam and security information;
• communications relating to the inquiry.

The fields requested may differ between local packages and international or medical-travel packages.

2.8 Subscription, billing, and payment information

Where paid provider subscriptions are offered, we may collect:

• selected plan;
• billing period;
• subscription status;
• subscription start and end dates;
• renewal date;
• provider country;
• provider pricing category;
• billing name and address;
• tax or VAT information;
• order and invoice numbers;
• payment status;
• payment date;
• payment-provider transaction reference;
• cancellation status;
• refund information;
• a masked or general description of the payment method.

Complete payment-card numbers and card-security codes should normally be processed by the authorized payment provider and should not be stored directly by Tabeebo unless expressly required and protected according to applicable payment-security standards.

2.9 Reviews, ratings, comments, and public submissions

When a user submits a review, rating, or comment, we may collect:

• name;
• email address;
• rating;
• review or comment content;
• provider or page reviewed;
• IP address;
• browser and device information;
• date and time;
• moderation information;
• spam-detection and fraud-prevention information;
• complaint or dispute information relating to the submission.

Where Gravatar is enabled, an anonymized string created from an email address may be provided to Gravatar to determine whether the user has a profile image. Gravatar operates under its own privacy terms.

2.10 Images, videos, and uploaded media

Images and files may contain embedded metadata.

Users should remove unnecessary location information, including EXIF GPS data, before uploading images intended for public display.

Publicly displayed media may be:

• viewed;
• downloaded;
• copied;
• shared;
• cached;
• indexed by search engines;
• retained by third parties outside Tabeebo’s control.

2.11 Technical, security, and audit information

We may collect technical records including:

• account logins;
• failed login attempts;
• session information;
• browser and device identifiers;
• IP addresses;
• security alerts;
• password-reset events;
• account changes;
• profile updates;
• verification decisions;
• subscription changes;
• administrative actions;
• appointment status changes;
• inquiry status changes;
• access-denial events;
• suspected fraud or abuse;
• software errors;
• performance information.

These records may be used to secure accounts, investigate incidents, prevent misuse, troubleshoot errors, and maintain platform integrity.

3. How we obtain information

We may obtain information:

• directly from you;
• from a provider or authorized representative;
• through registration and profile forms;
• through patient inquiry and appointment forms;
• through provider-panel activity;
• through reviews, comments, complaints, and support requests;
• from professional or governmental registers;
• from publicly available provider websites and professional sources;
• from organizations with which a specialist is associated;
• from payment, hosting, email, security, analytics, or technical providers;
• through cookies, server logs, and similar technologies;
• from linked English, Persian, and Arabic profile versions;
• from another user who reports a concern;
• from publicly available information relating to provider verification.

Where information is obtained from a public source or another person, the affected provider may request correction or clarification, subject to legal and operational requirements.

4. Why we use information

We may process personal information to:

• operate and secure the website;
• provide searches and filters;
• create and administer accounts;
• provide login and account recovery;
• verify email addresses and telephone numbers;
• maintain language preferences;
• create and publish provider profiles;
• connect translated profile versions;
• verify providers and representatives;
• confirm profile ownership;
• process appointment requests;
• manage confirmations, cancellations, and rescheduling;
• route inquiries to the selected provider;
• manage Medical & Aesthetic Packages;
• provide provider subscriptions;
• create invoices and payment records;
• provide provider-panel tools;
• generate provider analytics;
• operate AI-assisted features;
• maintain permitted AI conversation history;
• provide support;
• communicate account and service information;
• send appointment or inquiry notifications;
• prevent fraud, spam, scraping, and unauthorized access;
• investigate complaints and disputes;
• moderate reviews and public content;
• enforce the Terms of Use;
• improve website design, accessibility, performance, and usability;
• diagnose technical problems;
• perform internal reporting;
• comply with legal, tax, accounting, regulatory, and security obligations;
• establish, exercise, or defend legal claims;
• send marketing communications where separately permitted.

Depending on the circumstances and applicable law, processing may be based on:

• performance of a contract;
• steps requested before entering a contract;
• compliance with a legal obligation;
• legitimate operational, security, or business interests;
• protection of users and the platform;
• establishment or defence of legal rights;
• the user’s consent;
• another lawful ground recognized by applicable law.

Marketing consent is optional and is not required to create an account.

5. Health, identity, and other sensitive information

Health information, identity documents, professional licences, verification documents, and similar information may receive additional legal protection.

Tabeebo will process such information only where it is reasonably necessary for:

• a feature requested by the user;
• provider verification;
• identity or authority verification;
• appointment management;
• fraud prevention;
• protection of users;
• complaint or dispute management;
• compliance with law;
• establishment or defence of legal rights;
• another lawful purpose.

Users should submit only the minimum information necessary for the relevant service.

Reviews, public biographies, ordinary package inquiries, and ordinary support forms should not be used to publish or transmit unnecessary health or identity information.

Telemedicine-related health information will be governed by additional privacy and consent terms when telemedicine is activated.

6. Public provider profiles

Provider profiles are intended to be publicly accessible and may be indexed by search engines.

Depending on the provider’s settings and subscription plan, public profile information may include:

• professional or organization name;
• profile photograph or logo;
• biography or “About Us” text;
• specialties and treatments;
• services;
• education and experience;
• certificates and professional information;
• practice addresses;
• map locations;
• working hours;
• public telephone numbers;
• public email addresses;
• websites and social-media links;
• appointment availability;
• Medical & Aesthetic Packages;
• ratings and reviews;
• profile-ownership indicators;
• verification indicators;
• subscription badges.

Providers are responsible for selecting which professional contact details they wish to display publicly.

Private account contact information is not automatically made public merely because it is stored in the provider’s account.

7. Provider information, claims, and verification limitations

Provider profiles may contain information:

• submitted by a provider;
• submitted by an authorized representative;
• imported from an existing profile;
• obtained from public sources;
• obtained from a professional register;
• translated or reformatted;
• technically synchronized between languages;
• edited by Tabeebo for clarity, consistency, SEO, or plagiarism prevention.

Tabeebo may review selected information or documents and may compare information with available professional or regulatory sources.

However, Tabeebo cannot independently investigate, continuously monitor, authenticate, or guarantee every:

• licence;
• registration;
• certificate;
• diploma;
• qualification;
• professional membership;
• affiliation;
• award;
• claimed year of experience;
• number of procedures;
• treatment claim;
• success rate;
• before-and-after image;
• insurance claim;
• regulatory claim;
• professional representation.

Tabeebo does not guarantee:

• the authenticity of every submitted document;
• that a licence or certificate remains valid after review;
• that a certificate authorizes every advertised treatment;
• that a provider complies with every applicable rule;
• that a provider has no disciplinary or complaint history;
• that every profile statement is complete and current;
• that a provider is suitable for a particular patient;
• that a treatment will achieve a particular result.

Patients should independently verify important information with the provider and the relevant professional or licensing authority.

A profile-ownership status, verification status, or subscription badge is not a medical endorsement, guarantee of quality, or promise of treatment results.

8. Editing, translation, and optimization of provider information

Tabeebo may process provider information for publication, translation, formatting, restructuring, quality control, and search-engine optimization.

This may include editing:

• biographies;
• “About Us” descriptions;
• specialist introductions;
• service descriptions;
• treatment descriptions;
• package descriptions;
• headings;
• frequently asked questions;
• addresses;
• image captions;
• alternative text;
• SEO titles;
• meta descriptions;
• URL slugs;
• excerpts;
• structured data;
• translated profile versions.

Editing or publishing provider information does not mean that Tabeebo independently confirms or endorses the underlying facts.

The provider remains responsible for ensuring that factual information remains accurate, lawful, complete, and current.

9. Contact details, addresses, maps, and opening information

Telephone numbers, email addresses, websites, social-media links, written addresses, map positions, and opening hours may be supplied or updated by providers or their representatives.

This information may change without notice or may become outdated, incomplete, incorrectly translated, or inaccurate.

Tabeebo may format, translate, synchronize, or normalize contact and location information, but cannot guarantee that:

• a telephone number remains active;
• an email reaches the intended recipient;
• a website remains available;
• a written address is complete;
• a map position is exact;
• a provider still operates at the displayed location;
• opening hours remain current;
• a particular specialist attends every displayed location.

Patients should confirm important contact, location, and appointment information directly with the provider before travelling.

10. Appointment information and communications

Tabeebo may process appointment information to provide scheduling tools, notifications, account history, support, and dispute management.

Appointment information may be accessible to:

• the patient;
• the selected provider;
• authorized clinic or hospital personnel;
• an assigned specialist;
• authorized Tabeebo personnel;
• technical service providers where necessary.

Tabeebo may retain records showing:

• when an appointment was requested;
• when it was accepted or rejected;
• when it was rescheduled;
• when it was cancelled;
• which user or provider performed an action;
• whether a notification was generated;
• whether access was denied;
• whether a dispute or support request was submitted.

Appointment information should not be treated as a complete medical record unless expressly stated for a separately governed service.

11. AI-related information

11.1 Patient-facing AI chatbot

When a user interacts with Tabeebo’s patient-facing AI chatbot, we may process:

• questions and prompts;
• AI-generated responses;
• language preference;
• account context where applicable;
• permitted conversation history;
• feedback about responses;
• technical, security, and diagnostic information.

This information may be used to:

• generate responses;
• maintain permitted conversation history;
• improve navigation and usability;
• detect misuse;
• investigate errors;
• maintain security;
• provide support;
• improve reliability.

Users should not submit unnecessary identifying, medical, financial, or confidential information to the chatbot.

11.2 AI Assistant for specialists, clinics, and hospitals

When a provider uses the AI Assistant, we may process:

• prompts and instructions;
• generated text;
• account and profile context;
• language settings;
• permitted conversation history;
• uploaded information where supported;
• feedback;
• technical and security data.

Provider AI histories should remain restricted to the relevant provider account and authorized users.

One provider must not be able to access another provider’s private AI conversation history.

11.3 External AI service providers

AI processing may be performed partly through external technology providers acting on Tabeebo’s behalf.

Relevant information may be transmitted to and processed by those providers according to applicable contractual, privacy, security, and international-transfer safeguards.

Users should not assume that an AI interaction is equivalent to a confidential consultation with a doctor, lawyer, or other regulated professional.

AI interactions will not be used for training Tabeebo’s or a third party’s general-purpose model unless such use is lawfully permitted and clearly disclosed.

12. Analytics and provider reporting

Tabeebo may collect and display analytics such as:

• profile page views;
• estimated unique visitors;
• contact-detail displays;
• telephone-button clicks;
• WhatsApp-button clicks;
• email-button clicks;
• appointment activity;
• package page views;
• package inquiries;
• selected reporting periods.

Analytics may be aggregated, approximate, delayed, or affected by:

• browser privacy settings;
• deleted cookies;
• caching;
• blocked scripts;
• multiple devices;
• bots;
• network conditions;
• technical limitations.

Tabeebo does not guarantee that analytics represent every real-world visitor, patient, contact, or conversion.

13. Cookies and similar technologies

Tabeebo may use cookies, local browser storage, and similar technologies for:

• essential website operation;
• login and account security;
• session management;
• fraud prevention;
• language selection;
• remembering preferences;
• form functionality;
• performance measurement;
• analytics;
• permitted marketing activities.

A temporary cookie may be used to determine whether a browser accepts cookies.

Login cookies may preserve a user’s session and interface preferences. Selecting “Remember me” may keep the account signed in for a longer period.

Comment cookies may remember a commenter’s name or contact information for convenience.

Where required, non-essential cookies will be controlled through an appropriate consent mechanism.

Disabling essential cookies may prevent some features from working correctly.

14. How we share information

We may share relevant information with:

• the provider selected by the patient;
• authorized clinic or hospital personnel;
• an assigned specialist;
• authorized Tabeebo personnel;
• hosting and infrastructure providers;
• email and notification providers;
• payment and billing providers;
• security, anti-spam, and fraud-prevention providers;
• analytics and performance providers;
• translation and technical service providers;
• AI technology providers;
• map and embedded-content providers;
• professional authorities or institutions for verification;
• legal, regulatory, tax, or law-enforcement authorities where required;
• professional advisers;
• a purchaser, successor, or investor in connection with a lawful business transaction.

Service providers should receive only the information reasonably necessary for their assigned purpose.

Tabeebo does not sell personal information to advertisers.

Patient inquiries are not intended to be distributed indiscriminately among unrelated providers. They are routed to the relevant provider, authorized organization personnel, and Tabeebo administrators where appropriate.

15. International processing and transfers

Tabeebo serves users and providers in different countries.

Personal information may therefore be stored or processed outside the country in which the user is located.

Where applicable law requires safeguards for an international transfer, Tabeebo will use an appropriate lawful transfer mechanism, contractual protection, recognized safeguard, valid consent where permitted, or another lawful basis.

Privacy laws and enforcement practices may differ between jurisdictions.

16. Retention of information

Tabeebo retains information only for as long as reasonably necessary for the purpose for which it was collected.

Retention may depend on:

• whether the account remains active;
• whether the profile remains published;
• the status of an appointment or inquiry;
• the verification lifecycle;
• subscription and payment status;
• legal, tax, or accounting requirements;
• complaints or disputes;
• fraud or security risk;
• applicable legal limitation periods;
• a deletion request;
• whether the information has been anonymized.

Examples may include:

• account information retained while an account is active and for an appropriate period after closure;
• profile information retained while a listing remains published;
• verification information retained while relevant to verification, safety, complaints, and legal obligations;
• billing and transaction records retained for applicable tax, accounting, security, and dispute periods;
• security and audit logs retained for an appropriate security period;
• comments and reviews retained while published or relevant to disputes;
• package inquiries retained according to the configured inquiry-retention period;
• AI histories retained according to the applicable account settings and disclosed retention rules;
• backups retained for a limited disaster-recovery cycle.

Information may be retained longer where required by law or necessary to establish, exercise, or defend legal claims.

Information may also be anonymized and retained where it no longer identifies an individual.

17. Security

Tabeebo applies technical, administrative, and organizational safeguards intended to protect personal information.

Measures may include:

• role-based permissions;
• secure authentication;
• password hashing;
• restricted administrator access;
• server-side credential storage;
• encryption where appropriate;
• security and audit logging;
• session controls;
• access restrictions for private documents;
• provider-ownership checks;
• software updates;
• backups;
• monitoring for misuse;
• payment verification;
• staff confidentiality controls.

No internet-based service, storage system, or transmission method can be guaranteed completely secure.

Users are responsible for protecting their passwords, devices, email accounts, and authentication methods.

Suspected unauthorized access should be reported promptly.

18. Your rights and choices

Depending on applicable law, you may have the right to:

• know whether your information is being processed;
• request access to your information;
• request correction of inaccurate or incomplete information;
• request deletion where legal conditions are met;
• request restriction of processing;
• object to certain processing;
• withdraw consent where processing depends on consent;
• object to direct marketing;
• request a copy of certain information in a portable format;
• request information about recipients;
• object to certain solely automated decisions;
• complain to an appropriate data-protection authority.

Requests may be sent to:

Email: info@tabeebo.com
Suggested subject: Privacy request

Tabeebo may request reasonable evidence of identity and authority before responding.

A request may be restricted where information must be retained for legal, tax, accounting, fraud-prevention, security, dispute, or legal-claim purposes.

19. Account closure and deletion

Users may request account closure through available account controls or by contacting Tabeebo.

Closing an account does not necessarily require immediate deletion of:

• billing and transaction records;
• security and fraud-prevention records;
• complaint and dispute records;
• information required by law;
• information needed to defend legal claims;
• independently submitted reviews;
• information in backups awaiting scheduled deletion;
• anonymized analytics.

Cancelling or ending a paid provider subscription does not automatically delete the provider’s profile information.

The account may return to the Free plan according to the applicable subscription terms.

20. Children and minors

Provider accounts may be created only by adults, lawful organizations, or appropriately authorized representatives.

Patients who have not reached the applicable legal age should use Tabeebo with the involvement and authorization of a parent, guardian, or other legally responsible person.

Tabeebo should not knowingly collect unnecessary personal information from children.

21. Third-party websites and embedded content

Tabeebo may contain or use:

• maps;
• videos;
• images;
• payment interfaces;
• social-media links;
• external websites;
• analytics tools;
• messaging services;
• other embedded content.

Third parties may collect information and use cookies according to their own privacy policies and terms.

Tabeebo is not responsible for the independent privacy practices of third-party services.

22. Marketing communications

Operational communications relating to account security, verification, appointments, inquiries, subscriptions, payments, or important platform changes are not considered marketing communications where they are necessary to provide the service.

Marketing communications will be sent only where permitted.

Users may unsubscribe from marketing communications without closing their account or losing essential service notifications.

23. Changes to this Privacy Policy

Tabeebo may update this Privacy Policy when:

• services change;
• new features are introduced;
• technology providers change;
• legal requirements change;
• security or operational practices change.

The version number will be displayed at the top.

Material changes may be communicated through the website, account panel, or email.

Where required, users may be asked to acknowledge or accept an updated version.

24. Contact

Questions, concerns, complaints, or privacy requests may be sent to:

Email: info@tabeebo.com