Privacy policy
Last updated: October 2026
This page explains what information Dr. Mahdiye Nobakht's online clinic (drnobakht.com) keeps about you, why, and who can see it.
What we record
The mobile number or email you log in with, your name and — if you choose — birth year and sex; your appointments and chosen visit method; payment receipts; the medical form, photos, lab results and documents you upload; visit notes, cases and prescriptions the doctor records for you; and your messages with the clinic.
Why
Only to provide your visits: booking and confirming appointments, checking payments, letting the doctor prepare before the visit, keeping your treatment history and prescriptions, and sending reminders and notices about your appointments. Your information is never sold or used for advertising.
Who can see it
Medical information (medical form, photos, documents, notes and prescriptions) is visible only to Dr. Mahdiye Nobakht and the clinic's technical administrator. Front-desk staff only see what's needed for scheduling and payment review. Files are stored privately and open only through short-lived links after logging in.
SMS, email and WhatsApp
Login codes, confirmations, reminders and "your prescription is ready" notices are sent by SMS and email and contain no medical details — the only exception is a prescription emailed to your own address at your or the doctor's request. Visits take place on WhatsApp or Google Meet, which are subject to those services' own privacy terms.
Where and how long
Data is kept on the clinic's own servers and backed up regularly. Medical records are kept as long as needed for your continued care and as required by law.
Cookies
The site uses a single essential cookie to keep you logged in. No tracking or advertising tools are used.
Your rights
Through "Messages" in your account or at info@drnobakht.com you can ask for a copy of your data, a correction, or deletion of your account. Deleting some medical records may be limited by legal requirements.