Who is responsible
Your MedBoox account is run by Com2pme, which is responsible for the account: your sign-in details, the family members you add and their medical profiles.
Each practice is responsible for the file it keeps about you. If you have a question about what a practice recorded, ask that practice first.
This notice follows Lebanese Law No. 81 of 10 October 2018 on Electronic Transactions and Personal Data.
You can reach us at [email protected] or +961 79 164 130.
What your account keeps and why
- Your name, date of birth, email address, WhatsApp number and language, to sign you in and to find your files at your practices.
- The family members you add, and the medical profile you fill in for each of them, which a practice sees only if you choose to share it.
- Documents you send to a practice, so that they reach it.
- Records of your sign-ins, and the phones and browsers signed in, to keep the account secure.
How your file reaches your account
A practice’s file is linked to your account by your proved WhatsApp number and your name. When only the number matches, you are asked first. You then see your visits, your payments and what the doctor chooses to share.
Who sees it
- Your practices. Your medical profile stays private unless you choose to share it with a practice, and you can switch it off for each practice. A document goes only to the practice you choose.
- People you invite. Someone you invite to follow a family member sees that person’s visits, shared records and payments, and can change nothing.
- Our providers. Our servers, database and backups are in France. To run the service, we also use Meta (WhatsApp) to deliver messages and Google to deliver notifications and emails. Some of them are outside Lebanon, so information can be transferred abroad. They only receive what they need.
MedBoox staff do not look at your records except when a practice asks for help or the law requires it, and they are bound by confidentiality. We may also disclose information when Lebanese law or a court requires it.
WhatsApp messages
Messages about your appointments never contain medical details. You can stop a practice’s WhatsApp messages at any time by replying STOP to one of them, and get them back by replying START.
How long it is kept
Your account is kept until you close it, at any time, in Account. The account, its family members and their medical profiles are then deleted. Each practice keeps its own file: ask the practice directly to delete it. An account whose email was never proved is removed after a day.
How it is protected
MedBoox uses encrypted connections, two-step sign-in with an email code, encryption of session notes and uploaded files, separation of each practice’s data, and regular backups. No system is perfectly secure; if an incident affects your information, we will tell the people concerned without undue delay.
Your rights
Under Law 81/2018 (Articles 99 to 102), you can ask to know whether information about you is processed and to receive a copy of it, to have it corrected, completed or deleted, and to object to its processing for legitimate reasons.
You can correct your details and close your account yourself, in Account. For a file a practice keeps, send your request to that practice, which answers within the ten days the law provides. You can also bring the matter before the competent Lebanese courts.