1. Who we are and who this concerns
The personal data operator is Inlife Group LLP, BIN 170940025764, registered in the Republic of Kazakhstan. Director — Dulat Makhmutzhanov. The service is available at doctor.nola.kz.
This policy concerns three categories of users:
- Website visitors at doctor.nola.kz — those who read the landing page or submit a demo request
- Client clinics — medical centers that use the platform
- Clinic patients — those whose data the clinics enter into the platform
2. What data we process
From website visitors:
- Name and phone number, if you submitted a demo request
- IP address, browser type, country (via standard analytics)
- Cookies, see Section 7
From client clinics:
- Clinic name, BIN, registered address, banking details
- Email, phone number, and representative's name
- Clinic staff data (for creating user accounts)
From clinic patients:
- Full name, date of birth, gender, IIN
- Contact details (phone, WhatsApp, email)
- Medical data: examinations, images in DICOM format, doctors' reports
- Visit history, payments, correspondence with the front desk
3. Why we need this data
- To operate the platform and provide services to clinics
- To contact prospective clients at their own request (demo, consultation)
- To issue invoices and execute contracts
- To improve the product based on anonymized analytics
- To comply with the requirements of the legislation of the Republic of Kazakhstan (for example, accounting reporting)
4. Whom we share data with
Under normal circumstances — no one. Exceptions:
- At the request of a court or a government authority in the manner established by the legislation of the Republic of Kazakhstan
- Payment services (acquiring) — only transaction data, without medical information
- The cloud infrastructure provider — data is transmitted in encrypted form; the provider does not have access to the content
We do not transfer data outside the Republic of Kazakhstan. All servers are located in data centers in Kazakhstan.
5. Where and how we store data
- Channel encryption: TLS 1.3 for all connections
- Storage encryption: AES-256 for the image archive and backups
- Access control: roles (front-desk operator / technologist / radiologist / accountant / admin), activity log
- Backups: daily, with 30 days of history
- Retention period: patient data is stored while the clinic remains a client + 6 months after termination of the contract (to allow for the return of data)
6. Your rights
Under the law of the Republic of Kazakhstan "On Personal Data and Its Protection," you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of data (the right to be forgotten)
- Withdraw your consent to processing
- Appeal our actions to the authorized body
For clinic patients: requests should be directed to the clinic that stores your data. The clinic will contact us if it needs technical assistance.
7. Cookies and analytics
On doctor.nola.kz we use the minimum necessary cookies:
- Technical — for the operation of the website (authentication, saving settings)
- Analytical — to understand which sections are read so we can improve the content (Google Analytics or an equivalent, anonymized)
We do not use third-party marketing or advertising cookies.
8. Contact us
For questions regarding the processing of personal data:
Email: hello@nola.kz
WhatsApp: +7 705 555 12 70
The person responsible for the processing of personal data is a representative of Inlife Group LLP. The response time for a written request is up to 30 days.