Privacy Policy

1. Introduction

Welcome to Sannad ("we", "us", or "our"). Sannad is a health and wellness booking platform owned and operated in Qatar by Orizon for Advertising Trading and Services (Commercial Registration No. 132016), which is the data controller responsible for your personal information. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application or website (collectively, the "Platform").

Please read this policy carefully. If you disagree with its terms, please stop using the Platform.

2. Information We Collect

We collect information that you provide directly to us, including:

• Full name, email address, and phone number when you register
• Profile photo and date of birth (optional)
• Appointment and booking details including service type and provider
• Health-adjacent data: the specialty and service category of appointments you book (e.g. physiotherapy, cardiology) — used solely to facilitate your bookings
• Payment information (processed securely via our payment provider — we do not store full card numbers)
• Communications you send to us (e.g. support requests)

We also collect certain information automatically when you use the Platform:

• Device type, operating system, and browser type
• IP address and approximate location
• Pages visited and features used within the Platform
• Session duration and interaction patterns
• Device push notification token (if you grant notification permission)

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Process and confirm your bookings and appointments
• Send you appointment reminders and booking confirmations via email and SMS
• Process payments and issue refunds
• Provide customer support
• Improve the Platform and personalise your experience
• Comply with legal obligations in Qatar
• Send you promotional communications (you can opt out at any time)

4. Sharing Your Information

We may share your information with:

• Healthcare providers and facilities — to fulfil your booking (name, contact details, appointment details)
• Payment processors — Our payment processor handles card payments on our behalf and is bound by strict data security standards
• Communication providers — we use third-party services to send emails (Resend) and SMS messages (Twilio)
• Authentication services — Supabase manages secure user authentication
• Analytics and push notifications — Firebase (Google) is used for push notifications and app analytics
• Legal authorities — if required by law or to protect our rights

We do not sell your personal data to third parties.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account using the "Delete Account" option in your Profile, or request deletion by contacting us, we will delete or anonymise your data within 30 days, except where we are required to retain it by law (e.g. for financial records).

6. Security

We implement industry-standard security measures to protect your information, including encrypted data transmission (HTTPS/TLS), secure authentication, and access controls. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Delete your account and associated data — use the "Delete Account" button in your Profile, or contact us at hammad@sannad.qa
• Withdraw consent for marketing communications at any time
• Lodge a complaint with the relevant data protection authority in Qatar

To exercise any of these rights, contact us at hammad@sannad.qa

8. Health Information

The specialty and service category of appointments you book (e.g. physiotherapy, cardiology) are health-adjacent data. We use this information solely to facilitate your bookings and to match you with appropriate providers. This data is never sold, shared for advertising purposes, or used for profiling beyond the Sannad Platform.

9. Children's Privacy

The Platform is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

10. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: