PRIVACY POLICY

MD Pharma Consulting Group

Effective Date: January 01, 2019
Last Updated: January 01, 2019

1. Introduction

MD Pharma Consulting Group is committed to protecting the privacy, confidentiality, and security of personal information entrusted to us.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you visit our website at https://www.mdpharma-egypt.com, contact us, request information about our services, register for training or educational activities, or otherwise interact with us through our website and related digital channels.

Our activities include healthcare and pharmaceutical consulting, clinical research support, pharmacovigilance, medical writing, regulatory affairs, statistics and data analysis, health economics and market access, hospital management, and professional training.

We recognize that information handled in healthcare and clinical research environments may be particularly sensitive. We therefore seek to apply appropriate confidentiality safeguards and responsible information-handling practices to the personal information we process.

By using our website, you acknowledge that you have had the opportunity to review this Privacy Policy. Where applicable law requires consent for a particular processing activity, we will seek that consent separately.

2. Who We Are

Organization: MD Pharma Consulting Group
Website: https://www.mdpharma-egypt.com
Email: info@mdpharma-egypt.com
Telephone: +20 2 2461 8603
Mobile: +20 110 0339245
Address: 19th Floor, North Tower, Nile City Towers, Ramlet Beau Lac, Corniche El Nile, Cairo 11624, Egypt.

The website identifies the MD Pharma Consulting Group branch in Cairo, Egypt, as its regional office. The appropriate legal entity responsible for a particular processing activity will depend on the services involved and the applicable contractual arrangements.

For privacy-related inquiries, please contact us using the details above and include “Privacy Request” in the subject line.

3. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information.

3.1 Information You Provide Directly

This may include:

• Name, email address, telephone number, and professional contact details.

• Organization, employer, job title, and professional interests.

• Information entered into website contact forms, including your name, email address, subject, and message.

• Information provided when requesting a consultation, quotation, proposal, or information about our services.

• Registration, enrollment, and administrative information relating to training programs, educational activities, or online courses.

• Information contained in correspondence, feedback, complaints, and other communications with us.

Please do not submit confidential patient records, medical reports, clinical-trial participant information, or other sensitive personal information through general website contact forms unless we have specifically instructed you to use an approved and secure channel.

3.2 Technical and Website Usage Information

When you visit our website, certain information may be collected automatically by our website platform or associated service providers, depending on the technologies enabled. This may include:

• Internet Protocol (IP) address.

• Browser type, operating system, and device information.

• Pages visited, referral sources, and interactions with website content.

• Date, time, and duration of visits.

• Cookies, analytics identifiers, and similar technologies, where enabled.

We use this information to support website functionality, maintain security, understand website performance, and improve the user experience.

3.3 Professional, Client, and Project Information

In the course of providing services, we may process professional contact details, project communications, contractual information, and other information relating to clients, business partners, consultants, researchers, healthcare professionals, and other authorized stakeholders.

Where our work involves clinical research, pharmacovigilance, medical affairs, or healthcare data analysis, the information processed will depend on the relevant project, our contractual role, applicable protocols, and the instructions of the responsible client or organization.

3.4 Sensitive and Health-Related Information

MD Pharma Consulting Group may support projects involving health-related information, clinical research records, adverse event reports, or other sensitive data.

Such information will be processed only where appropriate for the relevant activity and subject to applicable legal requirements, contractual obligations, consent requirements, research protocols, and confidentiality safeguards.

Where MD Pharma Consulting Group acts as a service provider or processor on behalf of a client, the client may determine the purposes and essential means of processing. In those circumstances, our handling of the information will be governed by the applicable agreement, documented instructions, and relevant legal requirements.

We do not intend to collect sensitive health information through ordinary website contact forms.

4. How We Use Personal Information

We may use personal information for the following purposes:

1. Responding to inquiries: To answer questions, respond to contact forms, and communicate with individuals who contact us.

2. Delivering services: To assess business requirements, prepare proposals, manage projects, and provide contracted consulting, research, analytical, or educational services.

3. Training and education: To administer course registrations, communicate with participants, maintain appropriate educational records, and provide course-related support.

4. Client and business relationships: To manage contracts, coordinate projects, maintain professional relationships, and communicate with clients, suppliers, and partners.

5. Website administration: To operate, maintain, troubleshoot, and improve our website and digital services.

6. Security and fraud prevention: To protect our systems, detect unauthorized activity, and investigate suspected misuse.

7. Legal and regulatory compliance: To meet applicable legal, regulatory, contractual, audit, recordkeeping, and reporting obligations.

8. Business development and communications: To provide relevant information about our services, publications, educational opportunities, or industry activities where permitted by law and, where required, with your consent.

9. Rights and dispute management: To establish, exercise, or defend legal claims and protect our legitimate business interests, where legally permitted.

We will not use personal information for purposes materially incompatible with the purposes for which it was collected unless permitted by applicable law or supported by the necessary consent or other lawful basis.

5. Legal Grounds for Processing

Depending on the applicable jurisdiction and the nature of the activity, we may process personal information on one or more of the following grounds:

• Your consent, where required.

• The performance of a contract or steps requested before entering into a contract.

• Compliance with legal or regulatory obligations.

• Protection of vital interests, where applicable.

• Legitimate interests, where recognized by applicable law and appropriately balanced against individual rights.

• Other lawful grounds specifically permitted under applicable legislation.

Where processing relies on consent, you may withdraw that consent, subject to legal limitations and the consequences of withdrawal. Withdrawal does not affect the lawfulness of processing undertaken before the withdrawal.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies through the website platform or third-party services.

These technologies may serve several purposes:

• Essential cookies: Supporting core website functions, security, and navigation.

• Functional cookies: Remembering preferences and improving usability.

• Analytics cookies: Helping us understand website traffic and user interactions.

• Marketing cookies: Supporting promotional measurement or relevant communications, if such tools are enabled.

The actual cookies used will depend on our website configuration and the services integrated into it.

Where required by applicable law, we will obtain consent before placing non-essential cookies or activating corresponding tracking technologies. You may also be able to manage cookies through your browser settings or an available website cookie-preference tool.

Disabling certain cookies may affect some website functions.

7. Disclosure of Personal Information

We do not sell personal information as a business practice.

We may disclose personal information, where necessary and legally permitted, to:

• Service providers: Website hosting providers, IT support providers, cloud services, communication platforms, and other vendors supporting our operations.

• Clients and project partners: Authorized recipients involved in delivering contracted consulting, clinical research, pharmacovigilance, analytics, or other professional services.

• Professional advisers: Legal counsel, auditors, accountants, insurers, and other advisers subject to appropriate confidentiality obligations.

• Regulatory and public authorities: Competent authorities where disclosure is legally required or otherwise lawfully authorized.

• Business transaction parties: Relevant parties involved in a proposed or completed merger, restructuring, acquisition, or transfer of business, subject to applicable confidentiality and data protection requirements.

• Other authorized recipients: Parties to whom you have directed us to disclose information or where disclosure is otherwise permitted by law.

We seek to ensure that third parties handling personal information on our behalf are subject to appropriate confidentiality, security, and data protection requirements.

8. International Transfers of Personal Information

MD Pharma Consulting Group operates in a healthcare and pharmaceutical consulting environment that may involve international clients, research collaborators, service providers, or other stakeholders.

Consequently, personal information may, where necessary, be accessed or processed in countries other than the country in which it was collected.

Where international transfers occur, we will seek to ensure that they are supported by an applicable legal basis and any required safeguards, approvals, permits, contractual protections, or consent under the relevant data protection laws.

The protections applicable to a transfer may depend on the countries involved, the type of information, the identity and role of the recipient, and the applicable legal requirements.

If you require further information about an international transfer relevant to your information, you may contact us using the details in Section 2.

9. Data Security

We seek to implement reasonable technical, organizational, and administrative safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, destruction, and misuse.

Depending on the nature of the information and the services involved, safeguards may include access restrictions, confidentiality commitments, secure information handling procedures, system monitoring, and contractual protections.

Access to sensitive information should be restricted to authorized individuals who require it for legitimate professional purposes.

No website, electronic transmission, or storage system can be guaranteed to be completely secure. Accordingly, although we take reasonable measures to protect information, we cannot guarantee absolute security.

10. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including service delivery, contractual administration, legal compliance, dispute resolution, and the protection of legitimate business interests.

Retention periods may vary according to:

• The type and sensitivity of the information.

• The nature and duration of the relevant client engagement or service.

• Applicable legal, regulatory, research, and contractual retention requirements.

• Whether information is required to establish, exercise, or defend legal claims.

When information is no longer required, we will take appropriate steps to delete it, securely dispose of it, or anonymize it, subject to applicable legal and contractual requirements.

Where we process records on behalf of a client, retention and deletion will also be governed by the relevant agreement and lawful client instructions.

11. Your Privacy Rights

Subject to applicable law, you may have the right to:

• Request confirmation of whether we process your personal information.

• Request access to personal information relating to you.

• Request correction or updating of inaccurate or incomplete information.

• Request deletion, erasure, or restriction of processing where legally available.

• Object to certain processing activities where the applicable law provides this right.

• Withdraw consent where processing relies on consent.

• Request information about relevant disclosures or international transfers, where legally available.

• Exercise any additional rights provided by applicable data protection legislation.

• Submit a complaint to the competent data protection authority.

To exercise these rights, contact info@mdpharma-egypt.com with the subject line “Privacy Request.”

We may request reasonable information to verify your identity and clarify your request before acting on it. We will respond in accordance with applicable legal requirements. Certain requests may be limited where information must be retained by law, is subject to legal privilege, or is controlled by a client or another organization.

Where another organization is the controller responsible for the information, we may refer your request to that organization or assist you in contacting it, as appropriate.

12. Marketing Communications

Where permitted by law, we may use professional contact details to send relevant updates concerning our services, publications, training activities, or industry developments.

Where consent is required, we will obtain it before sending the relevant communications.

You may opt out of promotional emails by using the unsubscribe mechanism provided in the message, where available, or by contacting us directly.

Opting out of promotional communications will not necessarily prevent service-related, contractual, security, or other legally required communications.

13. Third-Party Websites and Platforms

Our website may contain links to third-party websites, social media platforms, educational services, or other external resources.

These third parties operate under their own privacy policies and practices. We are not responsible for the privacy, security, content, or data-handling practices of external platforms that we do not control.

We encourage you to review the relevant third-party privacy notices before submitting personal information to those services.

14. Online Courses, Educational Activities, and Related Platforms

When you register for or participate in our courses, continuing professional development activities, or other educational services, we may process registration details, communications, participation records, assessment information, and relevant administrative records.

We use such information to administer educational activities, communicate with participants, provide services, maintain appropriate records, and fulfill applicable contractual or regulatory requirements.

Additional terms or privacy notices may apply where an educational activity is delivered through a third-party platform or a separate affiliated organization.

15. Gen Z App and Other Separate Digital Services

MD Pharma Consulting Group website references Gen Z App, a wellness-oriented digital platform. Such services may involve information that is more sensitive than the information ordinarily collected through a corporate website, including health, wellness, survey, activity, or device-related information, depending on the features used.

This Privacy Policy addresses the MD Pharma Consulting Group corporate website and its ordinary business interactions. It should not be treated as a complete privacy notice for the Gen Z App or any other separate digital service.

Where applicable, those services should provide a dedicated privacy policy explaining their data collection, purposes, permissions, retention, sharing, security, user rights, and any special protections applicable to children or other vulnerable users.

16. Children's Privacy

Our corporate website is intended primarily for business, professional, research, and educational interactions. We do not knowingly seek to collect children's personal information through ordinary website contact forms unless the collection is appropriate, lawfully authorized, and supported by any required safeguards or permissions.

Where a service is intended for children or adolescents, additional safeguards and a service-specific privacy notice may be necessary.

If you believe a child has provided personal information to us inappropriately, please contact us so that we can assess the circumstances and take appropriate action consistent with applicable law.

17. Personal Data Breaches

If we become aware of a personal data breach affecting information under our responsibility, we will assess the incident and take reasonable steps to contain, investigate, and mitigate its effects.

Where required by applicable law or contract, we will notify the relevant authority, affected individuals, clients, or other parties within the applicable timeframe and in accordance with the relevant notification requirements.

18. Applicable Laws

This Privacy Policy is intended to support compliance with applicable data protection and privacy laws, including Egypt's Personal Data Protection Law No. 151 of 2020 and its applicable executive regulations.

Other laws may apply depending on the activity, the parties involved, the location of the individuals concerned, and the nature of the processing. These may include Canadian privacy legislation where applicable, as well as other relevant national or sector-specific requirements.

Nothing in this Policy is intended to limit a right that cannot lawfully be limited or to replace any mandatory legal obligation.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, website technologies, business operations, or applicable legal requirements.

The revised version will be published on our website with an updated “Last Updated” date. Where required by law, we will provide additional notice or obtain consent before implementing material changes affecting your personal information.

We encourage you to review this Policy periodically.

20. Contact Us

For questions, requests, concerns, or complaints regarding this Privacy Policy or our handling of personal information, please contact:

MD Pharma Consulting Group regional office located in Cairo, Egypt

Email: info@mdpharma-egypt.com
Telephone: +20 2 2461 8603
Mobile: +20 110 0339245

Address: 19th Floor, North Tower, Nile City Towers, Ramlet Beau Lac, Corniche El Nile, Cairo 11624, Egypt.

Please use the subject line “Privacy Request” to help us direct your inquiry to the appropriate person.

We will review privacy inquiries and respond in accordance with applicable legal requirements.