1. Introduction
Pelargos Care ("we", "us", or "our") is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal and medical information when you use our fertility care management services.
2. Data Controller Information
Data Controller: Pelargos Care
Contact: info@pelargosivf.com
Data Protection Officer: Available at the above email address
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: For marketing communications and optional features
- Contract: To provide our fertility care management services
- Vital Interests: For medical emergencies and critical health situations
- Legal Obligation: To comply with healthcare regulations and legal requirements
- Legitimate Interest: For service improvement and fraud prevention
4. Information We Collect
4.1 Personal Information
- Name, email address, phone number, date of birth
- Emergency contact information
- Spouse/partner information (if provided)
- Account credentials and preferences
4.2 Medical Information
- Medical history and treatment records
- Test results and laboratory reports
- Prescription and medication information
- Treatment stages and progress notes
- Folliculogram and hormone test results
- Meeting notes and consultation records
4.3 Technical Information
- IP address, browser type, device information
- Usage patterns and interaction data
- Cookies and similar tracking technologies
5. How We Use Your Information
We use your information for the following purposes:
- Healthcare Services: Provide fertility care management, track treatment progress, manage prescriptions and test requests
- Communication: Send appointment reminders, test notifications, and treatment updates
- Account Management: Maintain your account, process registrations, and provide customer support
- Legal Compliance: Meet healthcare regulations and legal obligations
- Service Improvement: Analyze usage patterns to improve our services (anonymized data only)
6. Data Sharing and Third Parties
We do not sell your personal information. We may share your data with:
- Healthcare Providers: Doctors, midwives, and medical professionals involved in your care (with explicit consent)
- Collaborating Entities: Laboratories, pharmacies, and scan centers for test processing and prescription fulfillment
- Service Providers: Cloud hosting (Firebase/Google Cloud), email services, and technical support providers under strict data processing agreements
- Legal Authorities: When required by law or to protect vital interests
7. Data Security
We implement comprehensive security measures including:
- End-to-end encryption for data transmission
- Secure cloud storage with access controls
- Regular security audits and vulnerability assessments
- Staff training on data protection and confidentiality
- Multi-factor authentication for admin access
8. Data Retention
We retain your data for the following periods:
- Medical Records: 7 years after last treatment (as required by medical regulations)
- Account Information: Until account deletion or 2 years after last activity
- Communication Records: 3 years for support and legal purposes
- Technical Logs: 12 months for security and troubleshooting
9. Your GDPR Rights
Under GDPR, you have the following rights:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data (subject to legal obligations)
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent for consent-based processing
To exercise these rights, contact us at info@pelargosivf.com. We will respond within 30 days.
10. Cookies and Tracking
We use essential cookies for:
- Authentication and session management
- Security and fraud prevention
- Basic functionality and user preferences
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect service functionality.
11. International Data Transfers
Your data may be processed in countries outside the EEA through our cloud service providers (Google Cloud/Firebase). These transfers are protected by:
- Adequacy decisions by the European Commission
- Standard Contractual Clauses (SCCs)
- Appropriate safeguards as required by GDPR
12. Children's Privacy
Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16.
13. Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours as required by GDPR.
14. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or prominent notice on our platform at least 30 days before changes take effect.
15. Supervisory Authority
You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your personal data in accordance with GDPR.
16. Contact Us
For any questions, concerns, or to exercise your rights:
Last updated: 29/05/2026
Version: 2.0 (GDPR Compliant)