Privacy

Salma Med, based in Ramallah, Palestine, decides how the information described on this page is used. The website is built and maintained on Salma Med's behalf by Rosey Co.

To reach us about anything on this page, use salmamedical9@gmail.com or the phone and WhatsApp numbers on the contact page. We have not appointed a separate data protection officer; this address is the contact for privacy requests.

We use enquiry, order and workshop information to respond to you, check that a professional licence is appropriate where required, arrange supply or training, and keep a reliable record of our dealings. The usual legal bases are taking steps at your request, performing or preparing for an agreement, our legitimate interest in running a safe professional supply business, and compliance with a legal obligation where one applies.

We use consent for non-essential analytics, advertising measurement and marketing communications. You can withdraw consent at any time, and withdrawal does not affect processing that took place before you withdrew it.

The public site has no customer account or public login. We collect the details you submit in an enquiry, workshop, invitation or job form, and limited technical information that hosting and security systems need to deliver and protect the site.

Please do not put patient names, photographs, medical histories or other patient health information into a form. The site is not designed to receive special-category health data.

Depending on the form, we may receive:

• Your name, so we know who we are replying to.
• Your email address, so we can reply.
• Your phone number, because in practice most of this business is done over WhatsApp and a call is usually faster than an email.
• Your confirmation that you are happy for us to contact you about your enquiry.

Enquiries are sent to us by email and, where configured, recorded in our private Supabase workspace so we can manage follow-up and access them securely. Access is restricted to people who need it for the business. The site is hosted on Vercel and email is delivered through Resend.

We intend to place the Supabase project in an EU region, such as Frankfurt, for primary data storage. An EU project region is a residency choice, not a guarantee that every support, security or subprocess activity stays in the EU. Vercel and other providers may process service data in the United States or other countries under their data-processing terms and appropriate transfer safeguards.

We keep enquiries and related records for as long as we are dealing with them and for a reasonable period afterwards for follow-up, accounting, legal claims and regulatory obligations. We delete or anonymise them when they are no longer needed. We do not keep them to build a marketing profile.

We use service providers as processors or service providers where they handle information on our instructions: Vercel for hosting and delivery, Supabase for the private enquiry workspace where enabled, and Resend for transactional email. We select providers with appropriate security and data-processing terms and limit what each receives.

Google Analytics and Microsoft Clarity are loaded only after you allow analytics in the cookie controls. Google Analytics tells us which pages are visited and how people found the site. Microsoft Clarity shows how pages are used, through heatmaps and recordings of clicks, scrolling and page movement, so we can fix pages that confuse people. Google and Microsoft may process this information under their own privacy terms and may act as independent controllers for some uses.

We also use Vercel Web Analytics, which counts page visits without cookies and without identifying you. It records the page, the referring site, and your country, browser and device type.

The Meta Pixel is not active on the site. If it is added, it will be loaded only after marketing consent, and this page will say so. We will not intentionally send patient health information to Google, Microsoft or Meta.

We do not sell your details. We do not share them with the manufacturers whose products we carry, or with anyone else, unless you ask us to or the law requires it.

Advertising tags are not active on the public site. Google Analytics and Microsoft Clarity stay blocked until you allow analytics, and you can withdraw that choice at any time from the cookie settings link in the footer.

The site sets one cookie of its own, which remembers whether you are reading in English or Arabic. Without it the site would forget your choice on every page.

Your answer to the cookie banner is kept in your browser's local storage rather than in a cookie. It stays on your device and is never sent to us.

If you allow analytics, Google Analytics and Microsoft Clarity set their own cookies, such as _ga, _clck and _clsk, to tell one visit from another. They are not set if you decline.

The cookie policy page covers this in more detail, and the cookie settings link in the footer lets you change your answer at any time.

Salma Med is based in Palestine and some providers may process information outside the European Economic Area. Where the GDPR applies, we use the transfer mechanism and safeguards required by applicable law, which may include an adequacy decision, Standard Contractual Clauses or another lawful safeguard. You can ask us for more information about the safeguards relevant to your request.

If you apply for a role through this site, your application is emailed to us in the same way as an enquiry and is not stored on the website. Anything you attach is passed on with the email and is not saved to the site.

Where the GDPR applies, you can ask for access, correction, deletion, restriction or portability, and you can object to processing based on legitimate interests or direct marketing. You can also withdraw consent at any time. We may need to verify your identity before acting, and we aim to respond without undue delay and normally within one month.

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. We will do so unless we are required to keep it or have an overriding lawful reason to retain it.

You can also simply not use the form. The WhatsApp number and the phone number reach us directly, and a message on WhatsApp is covered by WhatsApp's own terms rather than by this page.

This site is aimed at licensed medical practitioners and is not intended for children.

If what we do with your information changes, this page changes with it, and the date below changes too.