Privacy Policy
Last revised: September 9, 2026 • Formulated in strict compliance with the Egyptian Personal Data Protection Law (Law No. 151 of 2020).
1. Commitment to Personal Data Protection
Credentia Healthcare Technologies LLC (“Credentia,” “we,” “our,” or “us”) is committed to safeguarding the personal, academic, and clinical data of medical students, healthcare professionals, and clinic partners who use our educational marketplace.
This Privacy Policy sets out how we collect, process, store, and protect your personal information in accordance with Egyptian Personal Data Protection Law No. 151 of 2020 and recognized international healthcare data standards.
2. Categories of Personal Data Collected
We collect only the information necessary to provide structured observership placements, verify medical credentials, process payments, and issue tamper-proof completion certificates:
- Full name, official university email address, and phone number.
- Medical university, academic stage (Pre-Clerkship, Clinical Clerkship, House Officer, or GP), and graduation year.
- Completed academic modules and specialty interests.
- Clinical experience records, external certifications (with verifiable credential IDs), and research publications (with DOIs).
- Statements of educational intent and rotation attendance logs.
- Preceptor name, clinical title, and medical specialty.
- Clinic or healthcare center name, physical address, and operating license details.
- Contact phone number and institutional email address.
- Curriculum descriptions, cohort schedules, and evaluation reports.
3. Candidate Profile Privacy & Access Controls
Unlike open social media platforms, Credentia maintains strict clinical confidentiality:
- Verified Preceptors Only: Student candidate profiles and clinical CVs are accessible exclusively to verified healthcare partners who have passed manual Credentia administrative vetting.
- No Public Scraping or Indexing: Public candidate URLs are strictly configured with
noindex, nofollowrobot directives, preventing automated web crawlers and search engines from indexing student personal information. - Unverified Users Gated: Unverified clinics and non-authenticated public visitors cannot view candidate profiles, contact information, or academic evaluations.
4. Cryptographic Hashing of Completion Certificates
When a student successfully completes a clinical observership and receives a certified evaluation from their attending preceptor, Credentia generates a tamper-proof credential record.
Each certificate is assigned a unique cryptographic verification token generated via cryptographically secure pseudo-random number generation (256-bit entropy). Public verification at /verify/[token] displays only the student's verified name, rotation specialty, hosting clinic, and preceptor title — safeguarding all underlying phone numbers and private student notes.
5. Your Rights Under Egyptian Law No. 151 of 2020
As a data subject under Egyptian Law No. 151 of 2020, you hold guaranteed rights regarding your personal data:
- Right to Access: You may request an export of all personal data held in your user profile.
- Right to Rectification: You can edit and correct your candidate profile, academic details, and clinical experiences at any time via your student dashboard.
- Right to Erasure (“Right to be Forgotten”): You may request the permanent deletion of your account and personal profile data, subject only to mandatory legal record-retention requirements for completed financial transactions.
- Right to Restrict Processing: You may withdraw consent for marketing communications or optional email digests at any time.
6. Data Protection Officer & Contact
To exercise your data protection rights, request account deletion, or ask questions regarding our privacy practices, contact our Data Protection Team at: