Dr. Mazen Mahmoud Pediatrics Clinic logo
Book Appointment

Privacy Policy

(Website of Dr. Mazen Mahmoud - Pediatrics & Neonatology Consultant)

Last Updated: Jul 10, 2026

Your privacy is important to us. This Privacy Policy explains what data this website handles, how it is used, and how it is protected.

1. Data We Collect

A. Data You Submit Through Forms

When you use the website forms, you may submit personal data such as:

  • parent/guardian name
  • child name (appointment form)
  • child age
  • contact phone number
  • email address
  • visit type, preferred date, and preferred time (appointment form)
  • inquiry/visit message text
  • non-sensitive information confirmation checkbox

B. Technical Data Processed for Security and Delivery

The application processes limited technical data needed for operation and abuse prevention, including:

  • IP-related request headers (x-forwarded-for / x-real-ip) for rate limiting
  • language context from URL, headers, and the language cookie

C. Cookie Data

The site sets one functional cookie:

  • NEXT_LOCALE (stores selected language: ar or en)

For full cookie details, see the Cookie Policy.

2. How We Use Data

We use submitted and technical data to:

  • receive and process contact and appointment requests
  • send requests to the clinic email inbox through the configured mail service
  • apply anti-spam and anti-abuse protections (honeypot and rate limiting)
  • render and remember language preference

3. What We Do Not Currently Use

Based on the current website codebase, the site does not currently run:

  • analytics trackers
  • advertising pixels
  • marketing profiling cookies

4. Sharing of Data

We may share data only as needed with:

  • authorized clinic recipients of submitted forms (via email delivery)
  • infrastructure/service providers needed to host and deliver the website and email transport
  • legal/regulatory authorities when required by law

We do not sell or rent personal data.

5. Storage and Retention

Current application behavior is:

  • Form submissions are processed and sent by email.
  • The website code does not store form submissions in an application database.
  • Rate-limit entries are kept in server memory for a short window (up to about 10 minutes) and then expire.
  • The NEXT_LOCALE cookie is set with up to 1 year lifetime unless cleared earlier.

Email retention depends on clinic mailbox and operational practices.

6. Security Measures

The website includes reasonable technical safeguards such as:

  • server-side input validation and sanitization
  • request throttling/rate limiting
  • honeypot anti-spam field handling

No internet-based service can guarantee absolute security.

7. Children's Data

The website is intended for parents/guardians seeking pediatric care. Any child-related data is expected to be submitted by a parent or legal guardian.

8. Your Rights

Depending on applicable law, you may request access, correction, or deletion of your personal data where legally permitted. To make a request, contact us using the details below.

9. External Links

The website may link to third-party websites. We are not responsible for third-party privacy or security practices.

10. International Transfers

Depending on hosting/email infrastructure, data may be processed in jurisdictions outside Qatar. Where applicable, we seek service providers with appropriate security practices.

11. Policy Updates

This policy may be updated from time to time. Updates become effective when posted on this page.

12. Contact Information

For privacy questions or requests, contact: