Privacy notice

Initial draft · Updated October 10, 2026

Who this notice covers

This notice describes the Amanah Medical website, inquiry forms, public member directory, and restricted administration portal. Amanah Medical is the contact for your information. Contact info@amanahmedicalcare.com with privacy questions. Mailing address: 980 N Michigan Ave Ste 1090 #733359, Chicago, Illinois, 60611, United States. The exact registered legal entity name is being confirmed for this initial draft.

Information we collect

Physician inquiries collect name, email, specialty, practice country and state or province, contribution interests, optional availability and languages, your public-directory choice, and your optional email-updates choice. Hospital inquiries collect the contact’s name and email, organization, role, location, interests, optional institutional needs, and your optional email-updates choice. We also record submission time, follow-up status, privacy notice version, and private staff notes.

The submission service uses a hashed network address and keyed email fingerprints and counters to limit repeated submissions. Hashing does not make this information anonymous. Hosting and backend providers may process connection information such as IP addresses and request logs to deliver and protect the service.

Why we use it

We use inquiry details to respond, send a welcome email acknowledging physician signups and hospital inquiries, coordinate potential participation, manage follow-up, and protect the forms against abuse. Authorized administrators use the separate portal to review inquiries. Where applicable, processing relies on handling your requested inquiry, legitimate operational and security interests, or consent. If you separately opt in to email updates, we also send Amanah news, volunteer opportunities, and partnership updates. Subscribing is optional and does not affect your inquiry. Existing inquiries without this consent are not subscribed. Each update includes an unsubscribe link; withdrawing this consent stops updates without affecting essential replies about your inquiry.

Your public name is your choice

The directory defaults to keeping your name private. Selecting “Yes, publish my name” authorizes automatic publication of your name only after a successful physician signup. We record that choice, its version, and its date. Email addresses, location, specialty, answers, and staff notes are not returned by the directory.

Public names can be viewed and copied by anyone, including search engines. Contact us to withdraw permission or correct a name; withdrawal does not affect earlier lawful use. We can remove the listing from our site but cannot guarantee removal of independent copies or search caches. Existing private inquiries are not automatically published.

Service providers and access

Convex provides the database, form endpoint, and administrator authentication. GitHub Pages hosts the public site and admin frontend. When automated welcome emails are enabled, Brevo receives physician or hospital-contact names, email addresses, and welcome-message content to send these emails and process delivery records. For optional email updates, Brevo also stores subscribed email addresses, campaign membership, delivery and bounce records, and unsubscribe preferences. We record the time and wording version of your consent and keep suppression records to respect unsubscribes. Campaign links may be tracked by Brevo to report engagement. Other form answers and private staff notes are not shared for campaigns or included in these emails. REIMAGE BUSINESS SOLUTIONS provides website development and technical support and may have authorized access when needed to maintain the service. Fonts and photographs are served with the website. These services may process information in countries other than your own, including the United States. We do not sell inquiry details or use them for cross-site advertising.

Protecting your information

Connections use HTTPS. Signup names, email addresses, form answers, and private staff notes are encrypted before they are stored in our application database. Authorized administrators can access decrypted information for follow-up. Encryption keys are held in server-side configuration. If you opt into the public directory, your name is deliberately made public. Administrator passwords use a salted hash with a separate server-side pepper, and the portal requires sign-in again after 30 minutes without activity.

Storage and retention

Inquiries, notes, and public-directory consent records currently remain in the database until removed by an authorized operator; no automatic retention cutoff is configured. Rate-limit records are reused, but their expiration window does not itself delete a database record. A formal retention schedule is being established. Contact us to request deletion; necessary legal, security, or dispute records and provider backup copies may be retained where applicable.

The public site remembers dismissal of its storage notice in your browser for up to 180 days. It also remembers a video pause preference until you play the video again or clear site storage. The admin portal uses browser storage for authentication. Read the cookies and storage notice.

Your choices and requests

Depending on your location, you may have rights to access, correct, delete, receive a copy of, object to, or restrict use of your information, withdraw consent, or complain to a privacy regulator. Email info@amanahmedicalcare.com with your request. We may ask for proportionate identity verification before disclosing or changing a private record. You can inquire without making your name public.

Keep clinical information out of these forms

These forms are intended for adult professional inquiries, not patient care or children’s accounts. Do not submit patient records, health histories, identification documents, or other sensitive clinical information. No internet service can promise absolute security. If you submitted information in error, contact us.

Changes

We will update this notice as practices change. A materially new use or expansion of public directory fields requires a fresh assessment and, where needed, a new choice from you.