Privacy Policy

This Privacy Policy explains how Dr. Mohamed Nabeel Physical Therapy (“we”, “our”, or “the clinic”) collects, uses, and protects information when you visit drnabeel.com. We are committed to handling your data responsibly and in accordance with the Egyptian Personal Data Protection Law No. 151 of 2020 (PDPL) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Who We Are

Dr. Mohamed Nabeel Physical Therapy operates clinics in 6th October City, Sheikh Zayed, and Gharbia, Egypt. You can contact us at any time via WhatsApp: +20 155 556 1505.

2. What Data We Collect

We collect two categories of data when you use this website:

• Interaction events — When you click a contact button (WhatsApp, phone, Book Now, or Instagram), our server records the event type (e.g. whatsapp_click) and the timestamp of the click.
• IP address — Your IP address is automatically logged by our server alongside each interaction event. This helps us detect and filter bot traffic from genuine patient interactions.

We do not collect your name, email address, phone number, or any health information through this website.

3. Cookies and Analytics

We use Google Tag Manager (GTM) to manage analytics tags. GTM loads by default when you visit our site and may set analytics cookies on your device. You can opt out at any time using the controls below — if you decline, GTM will immediately stop collecting analytics data and no further cookies will be written.

4. How We Use Your Data

• Analytics— To understand which contact channels patients prefer (e.g., WhatsApp vs. phone) and to improve the website's design and content.
• Fraud and bot detection — IP addresses help us identify and exclude non-human traffic from our statistics.

We do not use your data for advertising, profiling, or automated decision-making. We do not sell or share your data with any third party other than Google (via GTM, and only if you have consented to cookies).

5. Legal Basis for Processing

• Legitimate interest (PDPL Article 4 / GDPR Article 6(1)(f)) — for server-side event logging (event type + IP address). Our legitimate interest is maintaining accurate analytics and detecting abuse.
• Legitimate interest (PDPL Article 4 / GDPR Article 6(1)(f)) — for GTM and analytics cookies. You may opt out at any time via the Cookie Preferences on the Privacy Policy page.

6. Data Retention

After 30 days, IP addresses are deleted from all records while the associated event log (type + timestamp) is retained for the remainder of the 12-month period in fully anonymised form.

7. Your Rights

Under the Egyptian PDPL and GDPR, you have the right to:

• Access — request a copy of the data we hold about you.
• Deletion — request that we delete your data before the end of the retention period.
• Opt out — opt out of analytics cookies at any time via the Cookie Preferences section on the Privacy Policy page.
• Object — object to processing based on legitimate interest.

To exercise any of these rights, contact us via WhatsApp: +20 155 556 1505. Because we do not collect your name or email, please include your approximate location and the date/time of your visit so we can identify any relevant records.

8. Data Security

All data is stored on secured servers. Access to the analytics dashboard is restricted to authorised clinic staff only. Data is transmitted over HTTPS at all times.

9. Third-Party Links

This website contains links to external services (WhatsApp, Instagram). Once you leave our site, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any external services you visit.

10. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of the website after an update constitutes acceptance of the revised policy.

11. Governing Law

This policy is governed by the laws of the Arab Republic of Egypt. Any disputes shall be subject to the exclusive jurisdiction of Egyptian courts.