Privacy Policy
Last updated: June 18, 2026
1. Introduction and Scope
SciVerra Tech ("we," "our," or "us") operates the GMX healthcare platform. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, mobile applications, and services. This policy applies to patients, medical facility staff, and all visitors to the Platform.
2. Information We Collect
We collect information you provide directly: name, phone number, email address, facility details, and appointment preferences. For medical facilities, we collect registration documents, licensing information, and operational data. We also collect usage data: pages visited, search queries, and interaction patterns to improve the Platform.
3. How We Use Your Information
We use collected information to: operate and maintain the Platform, process booking requests, deliver medical results and reports, verify medical facility credentials, communicate with you about your account and services, improve Platform functionality, and comply with legal obligations. We do not sell your personal information.
4. Medical Data Handling
Medical data (imaging results, reports, prescriptions, and health-related information) is handled with heightened security. Each medical facility's data is logically isolated from other facilities. Patient data is only accessible to the patient and the specific medical facility that provided the service. Results and reports are delivered through secure, permission-limited links with expiration controls.
5. Data Sharing and Disclosure
We may share information: with medical facilities you book with (your name and contact details), with service providers who help operate the Platform (hosting, messaging infrastructure), when required by law or to protect rights, and in connection with a business transfer. Booking requests are shared only with the specific facility you select.
6. Data Retention
We retain personal information for as long as necessary to provide services and comply with legal obligations. Medical facilities retain control over their operational and patient data according to their own retention policies and applicable healthcare regulations. Patient account data is retained until the patient requests deletion.
7. Data Security
We implement enterprise-grade security measures: encryption in transit (TLS) and at rest, role-based access controls, logical tenant isolation between medical facilities, secure result links with expiration, session management, and regular security assessments. While we strive to protect your data, no method of electronic storage or transmission is 100% secure.
8. Your Rights
Depending on applicable law, you may have the right to: access your personal data, request correction of inaccurate data, request deletion of your data, restrict or object to processing, and data portability. To exercise these rights, contact us through the channels provided on the Platform.
9. Cookies and Tracking
The Platform may use cookies and similar technologies for authentication, preferences, and analytics. You can control cookie settings through your browser. Essential cookies required for Platform functionality cannot be disabled. Analytics and preference cookies can be managed through your browser settings.
10. Third-Party Services
The Platform may integrate with third-party services, including WhatsApp for notifications, Google Maps for location services, and cloud infrastructure providers. These services have their own privacy policies. We are not responsible for the privacy practices of third-party services, though we select providers with strong privacy commitments.
11. Children's Privacy
The Platform is not intended for children under 18 without parental consent. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided personal information, we will take steps to delete it.
12. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated through the Platform or via email. Continued use of the Platform after changes constitutes acceptance of the updated policy. We encourage you to review this policy regularly.
13. Contact Information
For questions about this Privacy Policy or to exercise your data rights, contact SciVerra Tech / GMX through the contact section on the Platform, by email at the address published on our website, or through the contact details available in the GMX landing page footer.