Consent to the Collection and Processing of Personal Data

Short form (the text next to the tick box on registration)

The tick is mandatory to complete registration. Consent to receive news and special offers is given by a separate optional tick.

Full text of the consent

1. To whom the consent is given

The consent is given to 2Medlink Group LLP, BIN 260740001075, Republic of Kazakhstan, Almaty, 37 Abay Ave. (hereinafter — the Company), as the owner and operator of the personal data, and also to third parties engaged by the Company for the purposes set out in Section 3, to the extent set out in the Privacy Policy.

2. What data it covers

The consent covers the following personal data:

• mobile phone number, first and last name, email address;
• date of birth, sex, blood type, city, profile photo;
• information about appointment bookings: doctor, clinic, date and time, appointment format, description of the complaint or reason for the visit, booking status;
• information about orders for medicines, including their contents and delivery address;
• reviews, ratings and photos attached to them;
• technical data: IP address, device and browser information, cookie identifiers, selected city.

Consent to the processing of personal data concerning health is confirmed separately — information about the fact of and reasons for seeking medical care, the specialization of the selected doctor, appointment history and the contents of the medicines ordered.

For doctors and partner representatives, the consent additionally covers information about specialization, length of experience, place of work, license number, and copies of the diploma and certificates uploaded for verification.

3. For what purposes

• registration and identity verification when signing in with a one-time code;
• arranging an appointment booking and a medicine order and transferring them to the chosen clinic or pharmacy;
• sending booking and order notifications to the personal account and to WhatsApp;
• maintaining the personal account, the history of requests and favorites;
• publication of reviews and their moderation;
• verification of doctors and partners;
• handling requests to the support service;
• ensuring the security of the Portal;
• generating de-identified statistics;
• fulfilling the requirements of the legislation of the Republic of Kazakhstan.

4. What actions are permitted

Collection, recording, systematization, accumulation, storage, alteration, supplementation, use, distribution to the extent set out in Section 5, de-identification, blocking and destruction of personal data — with and without the use of automation.

5. To whom the data may be transferred

• to the clinic, doctor or pharmacy chosen by the User — to the extent necessary to provide the requested service;
• to the SMS delivery operator — to deliver the one-time code;
• to Meta Platforms Ireland Ltd. (WhatsApp Business Cloud API, Ireland) — to deliver booking notifications; such transfer is cross-border;
• to Google LLC (USA) — when signing in via a Google account; such transfer is cross-border;
• to state authorities — on the grounds provided for by law.

By confirming this Consent, the subject separately agrees to the cross-border transfer of their personal data to the extent stated.

6. Validity period

The consent is valid from the day it is given and until the purposes of processing are achieved or until it is withdrawn.

7. Withdrawal procedure

The consent may be withdrawn at any time — by a request to info@ibolid.kz from the phone number or email address stated in the profile, or through the support section in the personal account.

Withdrawal of consent entails the termination of processing and the deletion or de-identification of personal data, except for data whose processing and storage are mandatory by law, and information necessary for a partner to complete a booking or order that has already been arranged. Further use of the Portal after withdrawal of consent is not possible.

8. Confirmation

By giving the Consent, the subject confirms that they:

• have read the Privacy Policy and the Terms of Use;
• are acting voluntarily and in their own interest;
• have reached the age of eighteen or are acting as a legal representative;
• when arranging a booking or an order for another person — have the right to provide the Company with that person's data and have obtained that person's consent (the consent of a legal representative — for a minor).

The date, time and version of the Policy in effect at the moment the Consent is given are recorded in the account.