Privacy Policy

Last updated: November 27, 2025

1. About Us

hi-doctor.ai is a website operated by HI DOCTOR AI, SOCIEDAD LIMITADA, a company registered in Spain with Tax ID B23893027, and registered address at CALLE LOPE DE RUEDA NUM 27, PUERTA CENTRO IZQUIERDA, MADRID, 28009, Spain.

We are a telemedicine service provider committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform.

2. Data Controller

HI DOCTOR AI, SOCIEDAD LIMITADA is the data controller responsible for processing your personal data. For any questions regarding this Privacy Policy or your personal data, please contact us at:

Email: hello@hi-doctor.ai
Address: CALLE LOPE DE RUEDA NUM 27, PUERTA CENTRO IZQUIERDA, MADRID, 28009, Spain

3. Personal Data We Collect

We collect and process the following categories of personal data:

3.1 Identity and Contact Data

Full name
Date of birth
Gender
National ID number (DNI/NIE)
Email address
Phone number
Residential address

3.2 Health Data (Special Category Data)

Medical history you provide in health questionnaires
Current symptoms and health conditions
Medications you are taking or have taken
Allergies and intolerances
Medical consultation notes and recommendations
Prescriptions issued

3.3 Technical Data

IP address
Browser type and version
Device information
Operating system
Usage data and browsing patterns
Cookies and similar technologies (see our Cookie Policy)

3.4 Payment Data

Payment card details (processed securely by our payment providers)
Billing address
Transaction history

4. How We Use Your Data

We use your personal data for the following purposes:

4.1 Provision of Medical Services

To evaluate your medical questionnaire and determine treatment suitability
To enable our licensed physicians to review your case and provide medical consultations
To issue valid electronic prescriptions
To communicate consultation results and medical advice
To maintain your electronic medical record

4.2 Administrative and Legal Purposes

To create and manage your patient account
To process payments for consultations
To comply with legal and regulatory obligations
To respond to complaints and resolve disputes
To maintain records as required by healthcare regulations

4.3 Service Improvement

To improve our platform functionality and user experience
To conduct internal analytics and research
To send service updates and notifications

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

Contractual necessity: Processing necessary for the performance of our contract with you to provide medical consultation services
Legal obligation: Processing necessary to comply with healthcare regulations and legal requirements
Vital interests: Processing necessary to protect your vital interests in emergency situations
Explicit consent: For processing special category health data, we obtain your explicit consent
Legitimate interests: For service improvement and fraud prevention, where our interests do not override your rights

6. Data Sharing

We may share your personal data with:

Licensed Physicians: Our registered medical professionals who review your case and provide consultations
Payment Processors: Secure payment service providers to process your consultation fees
Regulatory Authorities: When required by law or to comply with regulatory obligations
Legal Advisors: In connection with legal proceedings or to protect our rights
Service Providers: Third-party providers who assist with our operations (data hosting, customer support) under strict confidentiality agreements

We never sell your personal data to third parties.

7. International Data Transfers

Your data is primarily stored and processed within the European Economic Area (EEA). If any transfer outside the EEA is necessary, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions by the European Commission
Other valid transfer mechanisms under GDPR

8. Data Security

We implement comprehensive security measures to protect your personal data:

Encryption: All data is encrypted in transit (TLS/SSL) and at rest using industry-standard encryption
Access Controls: Strict access controls ensure only authorized personnel can access your data
Secure Infrastructure: Our systems are hosted in secure data centers within the European Economic Area
Regular Audits: We conduct regular security assessments and vulnerability testing
Staff Training: All staff receive data protection and security training

9. Data Retention

We retain your personal data for the following periods:

Medical Records: Minimum 15 years from the last consultation, as required by Spanish healthcare regulations (Law 41/2002)
Account Data: For the duration of your account plus 5 years after deletion
Payment Records: 7 years for accounting and tax purposes
Technical Data: Generally up to 2 years, unless required for security purposes

10. Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right of Access: Request a copy of your personal data we hold
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your data (subject to legal retention requirements)
Right to Restriction: Request limitation of how we process your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw your consent at any time for consent-based processing

To exercise these rights, contact us at hello@hi-doctor.ai. We will respond within 30 days.

11. Automated Decision-Making

We do not make decisions based solely on automated processing that significantly affect you. All medical decisions and prescription issuance are made by licensed healthcare professionals.

12. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us immediately.

13. Cookies

We use cookies and similar technologies to enhance your experience. Please refer to our Cookie Policy for detailed information about the cookies we use and how to manage them.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated date. For significant changes, we will notify you via email or platform notification.

15. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD):

Website: www.aepd.es
Address: C/ Jorge Juan, 6, 28001 Madrid, Spain

16. Contact Us

For any questions about this Privacy Policy or your personal data, contact us:

Company: HI DOCTOR AI, SOCIEDAD LIMITADA
Tax ID: B23893027
Address: CALLE LOPE DE RUEDA NUM 27, PUERTA CENTRO IZQUIERDA, MADRID, 28009, Spain
Email: hello@hi-doctor.ai

Thank you for trusting hi-doctor.ai with your healthcare needs.