This Privacy Policy explains how CLEVORA collects, uses, stores, protects and discloses personal data when you visit our website, contact us, request a demonstration, create an account, or use the CLEVORA clinic management platform.
CLEVORA respects the privacy of individuals and processes personal data in accordance with applicable laws, including Lebanese Law No. 81 of 10 October 2018 relating to Electronic Transactions and Personal Data (the "Law").
- Who we are
- Scope of this policy
- CLEVORA and clinic responsibilities
- What personal data we collect
- Why we process personal data
- Legal basis and authorization
- Information provided when data is collected
- Sensitive personal data
- Cookies and analytics
- Who we share personal data with
- Transfers and disclosures
- Data retention
- Security and confidentiality
- Your rights
- How to exercise your rights
- Children
- Data incidents
- Changes to this policy
- Contact
- Additional GDPR information
1. Who we are
CLEVORA is a clinic management platform operated by CLEVORA, registered under commercial registration number 3446772, with its registered address at Beirut / Lebanon ("CLEVORA", "we", "us" or "our").
For privacy-related questions, requests or complaints, you can contact us at: info@clevora.me.
2. Scope of this policy
This Privacy Policy applies to personal data processed by CLEVORA through:
- the CLEVORA website;
- demo, contact and registration forms;
- CLEVORA user accounts;
- the CLEVORA clinic management platform;
- customer support communications;
- our business and administrative activities; and
- cookies and analytics technologies used on our website.
The Lebanese Law applies to automatic and non-automatic processing of personal data, subject to the exclusions and other provisions established by law.
3. CLEVORA and clinic responsibilities
3.1 Website visitors and CLEVORA users
When you visit our website, contact CLEVORA, request a demonstration, register for an account or use CLEVORA for your own account, CLEVORA determines the purposes and means of the relevant processing and is responsible for that processing.
3.2 Patient and clinic data
Clinics using CLEVORA may enter patient and other healthcare-related information into the platform.
In relation to such information, the clinic determines the purposes for which the information is collected and used. CLEVORA processes that information to provide the platform and related services to the clinic and in accordance with the clinic's instructions and the applicable contractual arrangements.
If you are a patient and your information was entered into CLEVORA by a clinic, your first point of contact for questions about the purpose of the processing, your medical record, or requests concerning that information should generally be the relevant clinic.
4. What personal data we collect
| Category | Examples | Source |
|---|---|---|
| Website visitors | Pages visited, browser type, device information, approximate location, referring website and technical information associated with website use. | Your browser and website technologies, where applicable. |
| Demo and enquiry requests | Name, clinic name, email address, telephone number, country and information included in your enquiry. | You. |
| Account users | Name, username, email address, telephone number, professional role, account permissions and profile information you choose to provide. | You or your clinic administrator. |
| Security and technical records | Login and logout information, IP address, device and browser information, authentication information and records of actions performed within the platform. | Generated through your use of the platform. |
| Communications | Messages, enquiries and contact details provided when communicating with CLEVORA by email, WhatsApp, telephone or other communication channels. | You. |
| Patient information | Information entered by a clinic into the CLEVORA platform. Depending on the clinic and its use of the platform, this may include health information and other sensitive information. | The relevant clinic or authorized user. |
We seek to collect personal data that is appropriate and does not exceed what is necessary for the stated purposes of processing.
5. Why we process personal data
CLEVORA processes personal data for legitimate, specific and explicit purposes, including:
- providing and operating the CLEVORA platform;
- creating and administering user accounts;
- authenticating users and maintaining account security;
- providing customer and technical support;
- responding to demo requests and enquiries;
- communicating service-related information;
- processing subscriptions and related administrative matters;
- maintaining technical and security logs;
- detecting and preventing unauthorized access, fraud and misuse;
- improving the reliability and functionality of our services;
- complying with applicable legal and regulatory obligations;
- responding to lawful requests from competent authorities; and
- protecting CLEVORA's legal rights and the safety of users.
Personal data will not be subsequently processed for purposes that are incompatible with the purposes for which it was collected, except where permitted by applicable law, including where processing is permitted for statistical, historical or scientific purposes.
6. Legal basis and authorization
CLEVORA does not rely on consent as the sole basis for every processing activity.
Depending on the nature of the processing, processing may be carried out because it is necessary to provide a service or perform a contractual relationship, because it is required or permitted by law, because the individual has consented where consent is appropriate, or because another lawful basis applies.
Under Lebanese Law No. 81/2018, certain categories of processing are exempt from authorization or licensing requirements, while other processing activities may require notification, a permit or a license. CLEVORA will comply with the applicable requirements for the processing activities it conducts.
Where a processing activity requires a permit or license under applicable law, CLEVORA will not commence that processing unless the applicable legal requirements have been satisfied.
7. Information provided when personal data is collected
When CLEVORA collects personal data directly from an individual, we seek to provide clear information concerning:
- the identity of CLEVORA or its relevant representative;
- the purposes for which the data is processed;
- whether providing the requested information is mandatory or optional;
- the consequences of not providing requested information;
- the persons or categories of persons to whom the data may be disclosed; and
- the individual's rights to access and correct their information and how those rights may be exercised.
Where personal data is obtained from a source other than the individual, CLEVORA will provide the information required by applicable law, subject to any applicable legal exception.
8. Sensitive personal data
Certain categories of personal data receive additional protection under Lebanese Law No. 81/2018.
In particular, the Law restricts the collection and processing of information that directly or indirectly reveals a person's health status, genetic identity or sexual life, except in circumstances permitted by law, including circumstances involving the individual's explicit agreement, medical diagnosis or treatment by a healthcare professional, legal proceedings, or an applicable license.
CLEVORA may process health-related information as part of providing its clinic management services where such information is entered and processed on behalf of a clinic and the processing is legally permitted.
CLEVORA does not use patient health information for advertising or unrelated marketing purposes.
9. Cookies and analytics
CLEVORA uses cookies and similar technologies for purposes such as operating the website, maintaining security and, where permitted, understanding website usage.
Necessary cookies
Necessary cookies may be used to operate essential website functions, maintain sessions, protect forms and provide requested functionality.
Analytics cookies
CLEVORA may use Google Analytics to understand how visitors use the website. Analytics cookies are activated only where the visitor has provided the required consent through our cookie controls.
You can change your cookie preference at any time:
10. Who we share personal data with
CLEVORA may disclose personal data to service providers and other recipients where necessary to provide, secure and operate the services, subject to applicable legal and contractual requirements.
- Hosting and infrastructure providers: Hostinger
- Email providers: support@hostinger.com
- Analytics providers: Google Analytics, where the applicable consent has been provided.
- Communication providers: WhatsApp or other communication services where you choose to contact CLEVORA through those services.
- Other technical providers: None
We may also disclose personal data where required or permitted by applicable law, pursuant to a lawful request or decision of a competent authority, or where necessary to protect CLEVORA's legal rights, users or the security of the service.
11. Transfers and disclosures
CLEVORA may use service providers located outside Lebanon. Where personal data is transferred or made accessible outside Lebanon, CLEVORA will take the measures required by applicable law and will disclose such transfers where required.
Our current hosting and principal data-storage locations are: Europe / France.
Where the GDPR or another data-protection law imposes additional requirements on an international transfer, CLEVORA will use the transfer mechanism required by that law, where applicable.
12. How long we keep personal data
Personal data is retained only for as long as necessary for the purpose for which it was collected, or for the period required or permitted by applicable law.
| Data category | Retention period |
|---|---|
| Demo and enquiry information | 30 days |
| Account information | While the account is active and for 30 days after closure, unless a longer period is legally required. |
| Security and audit logs | 60 days |
| Patient and clinic records | According to the applicable clinic agreement, the clinic's instructions and applicable legal retention requirements. |
| Analytics information | According to the applicable analytics configuration and 11 months. |
Personal data will not be retained indefinitely without a lawful reason for continued retention.
13. Security and confidentiality
CLEVORA takes appropriate technical and organizational measures, taking into account the nature of personal data and the risks associated with its processing, to preserve the integrity and security of personal data and protect it against unauthorized access, alteration, damage or disclosure.
Depending on the service and environment, these measures may include:
- role-based access controls;
- restricted access to personal data by authorized personnel;
- authentication and access-management controls;
- activity and security logging;
- secure transmission of information;
- backup and recovery measures; and
- technical and organizational controls designed to prevent unauthorized access.
CLEVORA personnel and service providers who have access to personal data are required to maintain confidentiality in accordance with their obligations.
14. Your rights
Subject to applicable legal conditions and exceptions, individuals whose personal data is processed by CLEVORA may have the right to:
- ask whether their personal data is being processed;
- obtain a copy of their personal data;
- receive understandable information where their data is encoded, compressed or encrypted;
- request information about the purposes, categories, sources and nature of the processing;
- request information concerning persons or categories of persons to whom their personal data has been disclosed or who may access it;
- request correction of inaccurate personal data;
- request completion of incomplete data;
- request updating of outdated data;
- request deletion of data where the applicable legal conditions are satisfied;
- object, for legitimate reasons, to the collection or processing of their personal data, including processing for commercial promotion, subject to the exceptions provided by law; and
- exercise any additional rights granted by applicable data protection legislation.
In particular, Lebanese Law No. 81/2018 provides rights of access and correction and permits individuals to object to certain processing. Requests concerning correction, completion, updating or deletion will be handled within the applicable statutory period.
15. How to exercise your rights
To exercise your rights or ask questions about the processing of your personal data, contact:
To protect personal data from unauthorized disclosure, CLEVORA may need to verify the identity of the person making a request before providing access or making changes.
Requests to correct, complete, update or delete personal data will be handled in accordance with the applicable legal requirements, including the statutory time limits applicable under Lebanese law.
Where patient information is controlled by a clinic, patients should generally submit their request to the relevant clinic. CLEVORA will cooperate with the clinic as required by the applicable agreement and law.
16. Children
CLEVORA is a professional clinic management platform and is not directed toward children through its public website.
We do not knowingly request unnecessary personal information from children through our public website.
17. Data incidents and unauthorized access
CLEVORA maintains security measures intended to protect personal data against unauthorized access, alteration, damage and disclosure.
If CLEVORA becomes aware of a security incident involving personal data, we will assess the incident and take the measures required under applicable law and our contractual obligations, including notifying affected customers, individuals or competent authorities where such notification is legally required.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, processing activities, legal requirements or security practices.
The "Last updated" date at the beginning of this policy indicates when the policy was most recently revised.
Where a change is material and applicable law requires notification, we will provide appropriate notice.
19. Contact
For questions, requests or complaints concerning this Privacy Policy or the processing of your personal data:
CLEVORA
Email:
info@clevora.me
Registered address:
Beirut / Lebanon
Telephone:
+961 3 399 885
20. Additional information where the GDPR applies
If and to the extent the EU General Data Protection Regulation applies to CLEVORA's processing of your personal data, additional GDPR rights and obligations may apply.
These may include rights concerning access, rectification, erasure, restriction of processing, objection, data portability and withdrawal of consent where consent is the applicable legal basis.
Where required by the GDPR, CLEVORA will provide information about the applicable legal basis for processing, applicable international transfer safeguards, data-protection contacts and the right to lodge a complaint with a competent supervisory authority.
Nothing in this section limits rights available under Lebanese law or any other applicable law.
