This notice explains how Ovello uses the information you give us when you apply for a founding place or enquire about listing your clinic. It covers clinic owners, managers, doctors and their teams. If you are a patient, please read our patient privacy notice instead.
1. Who we are
Ovello Technologies FZCO ("Ovello", "we") operates the Ovello marketplace and clinic platform. We are registered with the International Free Zone Authority in Dubai, United Arab Emirates, licence number 86537, with our registered office at Building A1, Dubai Digital Park, Silicon Oasis, Dubai, United Arab Emirates.
We are the controller of the information you give us through this page. You can contact us about your data at privacy@ovello.co or by post to the address above.
2. The information we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Contact details | Your name, work email and WhatsApp or phone number | You |
| Clinic details | Country, city, website, the treatments you offer and how many international patients you see each month | You |
| Communications | Messages, call notes and emails between you and our team about your enquiry | You; our team |
| Consent record | That you agreed to be contacted, and when | You |
| Technical | Basic information your browser sends, such as IP address and device type, used to keep the site working and secure | Automatically |
We do not ask for, and you should not send us, any patient information through this form.
3. Why we use it and our legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry and assessing whether your clinic is a good fit for a founding place | Steps you have asked us to take before entering into a contract (UK and EU GDPR Article 6(1)(b)); our legitimate interest in building a trusted network of clinics (6(1)(f)) |
| Contacting you by email, phone or WhatsApp about your application | Your consent (6(1)(a)), which you can withdraw at any time |
| Keeping records of enquiries and consents | Legal obligation (6(1)(c)); legitimate interests (6(1)(f)) |
| Keeping the site secure and preventing misuse | Legitimate interests (6(1)(f)) |
We will not send you marketing unless you separately ask us to. If you go on to list your clinic, the Ovello Provider Agreement and Provider Data Sharing Agreement then govern how we use your information.
4. Who we share it with
- Service providers who work for us under contract and only on our instructions, such as website hosting, our CRM, and email and messaging tools.
- Verification and legal advisers in your clinic's country, but only if you go on to apply for verification.
- Regulators, courts and professional advisers where the law requires it or to establish or defend a legal claim.
- A buyer or successor if Ovello is sold or restructured, under confidentiality and on the same terms as this notice.
We do not sell your information.
5. International transfers
Ovello is established in the United Arab Emirates, and our service providers may store or access information in other countries, including the United Kingdom and the European Union. Where information is transferred to a country without an adequacy decision, we use the safeguards approved for that purpose, such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses.
6. How long we keep it
| Information | How long |
|---|---|
| Enquiries that do not lead to a listing | 12 months from our last contact with you, then deleted |
| Enquiries that lead to a listing | Moved to your provider account and kept as set out in the Provider Agreement |
| Consent records | For as long as we rely on the consent, then 6 years |
7. Your rights
You can ask us for a copy of your information, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. You can withdraw your consent to be contacted at any time, without affecting anything we did before you withdrew it. Email privacy@ovello.co. We respond within one month and may ask you to confirm your identity first.
You also have the right to complain to a data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk). In the EU it is the authority in the country where you live or work. In Türkiye it is the Personal Data Protection Authority (KVKK). We would ask that you contact us first so we can try to resolve your concern.
8. Security
We protect your information with access controls and encryption in transit, and we require the same protections from our service providers by contract. No system is perfectly secure, and we will tell you and the relevant regulator without undue delay if a breach puts your rights at risk.
9. Changes to this notice
We will post any change here and update the version number and date.