Your privacy, plainly.

Injection Studio, the aesthetic injectables clinic of Dr. Sara El Hamawy, 9 Mohamed Fawzy Moaz St, Smouha, Alexandria, Egypt. We are responsible for the personal data described here and we handle it under Egypt's Personal Data Protection Law (No. 151 of 2020).

To ask anything about your data: WhatsApp +20 111 566 6332, or ask at the desk.

We count visits so we know which pages help people and where they came from. We record the page, the website or campaign that sent you, whether you are on a phone, tablet or computer, the language, and taps on Book, WhatsApp or Call.

We do not use cookies, advertising trackers or Google Analytics, and we do not store your IP address. A random number lives in your browser tab so a visit with several pages counts as one person; it disappears when you close the tab. If your browser sends "Do Not Track" or "Global Privacy Control", we count nothing at all. Only the clinic manager can see these totals, and they are deleted after 13 months.

If you leave your name on the "Soon" page we keep your name, mobile, email if you gave one, what you said you were curious about, and where you heard of us. We use it only to tell you when we open and to offer you a first appointment. It is deleted six months after the opening, or sooner if you ask.

When you book online, by phone or on WhatsApp we keep your name, mobile, the treatment you asked about and the time. We use it to hold your appointment, confirm it and remind you. If you never come, the request is kept for our records but never used for marketing.

Safe treatment needs a medical record: your medical history, allergies and medicines, what was injected, where and how much, batch numbers, your signed consent forms, clinical photos, aftercare and follow-ups, and your payments. This is kept for as long as the law requires for medical and financial records, because it protects you if anything ever needs to be checked.

Clinical photos stay in your file. A before-and-after is only ever shown on our website or social media with your separate written consent, without your name, and you can withdraw that consent at any time; we then stop using it.

If you use the app we keep your account (name, mobile, email), your bookings, rewards and referral code, questions you send Dr. Sara, anything you post, and the device token that lets us send you notifications. You can turn notifications off in your phone's settings, and you can ask us to close your account.

Appointment confirmations, reminders and aftercare are part of your care. Offers and news are only sent if you are happy to receive them; reply "stop" or tell the desk and they stop.

When you message us on Instagram or Facebook, or comment on our posts, we keep the conversation: your profile name, what you wrote, and our replies. We use it to answer you, to book your visit and to follow up. If you book, the chat is linked to your patient file so we do not ask you the same things twice.

Replies are written with the help of an automated assistant (an AI service by Anthropic) that works from the clinic's own prices and rules and can check free appointment times. It never gives medical decisions: anything about your health, a problem after a treatment, or a photo or voice note is passed to Dr. Sara or the team, and a person can step into any chat at any time. The text of your messages is sent to the AI service only to write the reply; it is not allowed to use it for anything else.

Photos and voice notes you send are kept for the team to see. Conversations are kept for up to 12 months after your last message, unless they become part of your patient file. To have a conversation deleted, ask us on WhatsApp or in the chat itself.

Only the people who need it for your care: Dr. Sara and the doctors who treat you, and the reception team for bookings and payments. Each role sees only what it needs; the nursing team, for example, does not see patient files. We never sell your data and never use it for advertising.

We use trusted service providers to run the clinic, and they keep the data on our behalf: our web host (GoDaddy), our secure database (Supabase), our email delivery service (Resend), Meta (WhatsApp, Instagram and Facebook) when you choose to message us there, and Anthropic, the AI service that helps write our replies on Instagram and Facebook. Some of them store data outside Egypt; we only use providers that protect it and use it for nothing else.

Every connection to our website, app and clinic system is encrypted. Staff sign in with their own accounts, each limited to what their job needs, and the manager account requires two-step sign-in. The data is backed up every night, and medical data is never shown on public pages.

You can ask to see the data we hold about you, correct it, delete it (except what the law requires us to keep in a medical or financial record), withdraw a consent you gave (for example for photos or marketing), or object to a use. Ask on WhatsApp or at the desk; we may confirm it is really you, and we reply as soon as possible and within 30 days.

If you are not satisfied with our answer, you can complain to Egypt's Personal Data Protection Center.

We do not treat anyone under 18, and the opening list and app are not meant for them.

If we change how we use your data we will update this page and the date at the top, and tell patients directly if the change matters to them.