Privacy Policy
Effective Date: 19 March 2026
At IVF FELLOW, protecting your privacy and securing your sensitive medical data is our highest priority. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in full compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
1. Introduction
IVF FELLOW (registered in the Republic of Bulgaria) acts as the Data Controller for the personal data collected through our website, Patient Portal (B2C), and Clinic Portal (B2B). As an independent prescription procurement agent, we process your data solely to facilitate the coordination and delivery of your prescribed medical treatments from certified European pharmacies.
2. Data We Collect
To provide our specialized services, we must collect and process certain personal and special category (medical) data:
2.1 Identity & Contact Data
Full name, date of birth, billing and delivery addresses, email address, and telephone numbers.
2.2 Special Category Data (Medical Information)
Medical prescriptions, treatment protocols, clinic details, treating physician's information, and details of the medications required. Under GDPR Article 9, this data is processed strictly for the provision of healthcare facilitation with your explicit consent.
2.3 Financial Data
Transaction references and payment status. Note: We do not store your credit card details. All payments are processed securely via our PCI DSS-compliant partners.
2.4 Technical Data
IP address, browser type, device information, and portal usage analytics, collected via cookies to ensure security and improve our platform.
3. How We Use Your Data
We process your data for the following purposes:
-
Service Delivery: To verify your prescription, coordinate with partner pharmacies, and arrange secure cold-chain logistics.
-
Communication: To provide real-time updates on your order status via email, WhatsApp, or Viber.
-
Legal Compliance: To maintain necessary records as required by EU pharmaceutical regulations and Bulgarian tax laws.
4. Data Sharing & Disclosure
We do not sell, rent, or trade your personal data. We only share your information with trusted third parties essential for fulfilling your order:
-
Certified Pharmacies: Your prescription and identity are shared exclusively with the licensed EU pharmacy fulfilling your order.
-
Logistics Providers: Delivery details are shared with certified couriers for secure transport and customs clearance.
-
Your Clinic: (If applicable/authorized) to align protocols and verify dosages.
All our partners are bound by strict Data Processing Agreements (DPAs) and operate within the European Economic Area (EEA), ensuring full GDPR compliance.
5. Data Security
We implement robust technical and organizational measures to protect your data, including end-to-end encryption (SSL/TLS) for data transmission, secure server hosting within the EU, and restricted access protocols ensuring only authorized medical coordinators can view your prescription files.
6. Data Retention
We retain your personal and medical data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by strict EU legal and regulatory obligations regarding pharmaceutical dispensing and financial record-keeping.
7. Your GDPR Rights
Under the GDPR, you possess the following rights regarding your personal data:
-
Right to Access: Request a copy of the data we hold about you.
-
Right to Rectification: Request correction of inaccurate or incomplete data.
-
Right to Erasure: Request deletion of your data (subject to our legal retention obligations).
-
Right to Restrict Processing: Request a temporary halt on processing your data.
-
Right to Portability: Request transfer of your data to another provider.
8. Contact Us
If you wish to exercise any of these rights or have questions about how we handle your privacy, please contact our Data Protection Officer (DPO) at:
Email: privacy@ivf-fellow.com