Last revised: September 9, 2026 • Formulated in strict compliance with the Egyptian Personal Data Protection Law (Law No. 151 of 2020).
1. Commitment to Personal Data Protection
Credentia Healthcare Technologies LLC (“Credentia,” “we,” “our,” or “us”) is committed to safeguarding the personal and professional data of the students, interns, early-career professionals and organisations who use Credentia.
This Privacy Policy sets out how we collect, process, store, and protect your personal information in accordance with Egyptian Personal Data Protection Law No. 151 of 2020 and recognized international healthcare data standards.
2. Categories of Personal Data Collected
We collect the information needed to run your account, show you opportunities you are eligible for, handle applications and payments, and keep the records the law and our users rely on:
Members (students, interns and early-career professionals):
Full name, email address and, if you add it, phone number.
Profession, career stage, academic year (if you are an undergraduate), faculty and graduation year.
A licence or syndicate number, if you choose to provide one. It is recorded as you gave it; we do not yet check it with the issuing body.
Profile details you add: headline, biography, interests, completed modules, experience, certifications, research and languages.
Applications you submit, including your statement, and records of completed placements and evaluations.
Documents you choose to upload (for example a CV, student card, graduation certificate, syndicate card or ID). They are stored privately and opened only through links that expire after two minutes; every opening is recorded and shown to you.
Verification records: what was checked, against which source, by whom, when, and until when it is valid.
Your sharing settings and what you say you are open to.
Organisations and their team members:
Organisation name, type, address and description.
Each team member’s name, email address, role and title.
Opportunities posted, and decisions on applications and evaluations.
If you send the partner request form on our homepage: the organisation’s name, location and specialty, and the phone or WhatsApp number you give. We use them only to contact you about Credentia.
Records we keep about how the platform is used:
Your consent decisions — what you agreed to, when, and the wording version you saw.
Which organisations viewed your profile, when, and on what basis.
That you downloaded your data (not the contents), and any correction requests you make.
Security records, such as sign-in attempts used to stop password guessing.
Payment records for paid observerships. Card details are handled by our payment provider, Paymob, and never reach Credentia.
3. Who Can See Your Profile
Hidden by default: nobody can find you in the candidate directory unless you choose to be discoverable. You can change that at any time from your privacy settings.
Organisations you apply to can see your application and profile, because they cannot consider an application without it.
Verified organisations only: only organisations a Credentia administrator has reviewed can search the directory, and only for members who opted in.
Every view is recorded: when an organisation views your profile, we record which one, when and why, and you can see it in your privacy settings.
Your profile link: you choose who can open it — only you (the default), verified organisations, signed-in members, or anyone with the link. Organisations that open it are recorded, and you can see them.
Not indexed: profile pages carry noindex, nofollow, so search engines do not list them.
4. Verification of Completion Certificates
When a student completes a clinical observership and receives an evaluation from their attending preceptor, Credentia records a completion certificate in its registry.
Each certificate is assigned a unique verification token generated with a cryptographically secure random number generator (256-bit entropy). The token is a random identifier used to look the record up; it is not a digital signature, and it does not by itself prove that a printed certificate has not been altered. Public verification at /verify/[token] displays only the student's verified name, rotation specialty, hosting clinic, and preceptor title — safeguarding all underlying phone numbers and private student notes.
5. Your Rights Under Egyptian Law No. 151 of 2020
As a data subject under Egyptian Law No. 151 of 2020, you hold guaranteed rights regarding your personal data:
Right to Access: Download a complete copy of everything Credentia holds about you, in one click, from your privacy settings.
Right to Rectification: Edit most details yourself from your profile, or ask us to correct anything you cannot change directly from your privacy settings.
Right to Withdraw Consent: Turn discoverability and optional emails on or off at any time from your privacy settings. Withdrawing takes effect immediately.
Right to Erasure (“Right to be Forgotten”): You may request the permanent deletion of your account and personal profile data, subject only to mandatory legal record-retention requirements for completed financial transactions. How long each kind of record is kept is published in our retention schedule.
6. Data Protection Officer & Contact
To exercise your data protection rights, request account deletion, or ask questions regarding our privacy practices, contact our Data Protection Team at: