{"data":{"document":"privacy_policy","title":"Privacy Policy","app":"Laravel","version":"1.0.0","effective_date":"2026-01-01","last_updated":"2026-01-01","jurisdictions":["Lebanon (Law No. 81\/2018)","European Union \/ EEA (GDPR \u2013 Regulation (EU) 2016\/679)","United Kingdom (UK GDPR & Data Protection Act 2018)","United States \u2013 California (CCPA \/ CPRA)","Canada (PIPEDA)","Other jurisdictions (general international data-protection principles)"],"contact":{"company":"Elyvia","email":"privacy@elyvia.com","dpo_email":"dpo@elyvia.com","address":"Beirut, Lebanon"},"sections":[{"key":"introduction","title":"Introduction","body":["This Privacy Policy explains how Elyvia (\"Elyvia\", \"we\", \"us\", or \"our\") collects, uses, discloses, stores, and protects your personal data when you use our mobile applications, websites, and related services (collectively, the \"Services\").","We are committed to processing personal data lawfully, fairly, and transparently. This policy is drafted to comply with the Lebanese Law No. 81\/2018 on Electronic Transactions and Personal Data, the European Union General Data Protection Regulation (GDPR), and equivalent data-protection laws in the jurisdictions where we operate.","By using the Services, you acknowledge that you have read and understood this Privacy Policy. Where your consent is required by law, we will ask for it separately and you may withdraw it at any time."]},{"key":"data_controller","title":"Who We Are (Data Controller)","body":["Elyvia acts as the \"data controller\" (or, where applicable, the data processor on behalf of a business that uses our platform) for the personal data described in this policy.","For any privacy-related questions, requests, or complaints, you can contact us using the details provided in the \"Contact Us\" section below. Where required, we have designated a Data Protection Officer (DPO) who can be reached at the DPO email address listed below."]},{"key":"data_we_collect","title":"Personal and Sensitive User Data We Collect","body":["We collect only the personal data we need to provide and improve the Services. Depending on how you use Elyvia, this may include:","Identity and contact data: name, email address, phone number, and account credentials.","Profile data: your role (e.g. caregiver, business owner, staff, patient guardian), preferences, language, and theme settings.","Patient and care data: information about the animals\/patients under your care that you choose to add, such as species, breed, and care notes.","Booking and transaction data: appointments, orders, invoices, and payment status. Full card details are handled by our payment providers and are not stored on our servers.","Communications: messages exchanged through in-app chat, support requests, and notifications.","We do not knowingly collect data from children under the age of 13 (or the minimum age of digital consent in your jurisdiction) without verifiable parental consent."]},{"key":"sensitive_and_device_data","title":"Sensitive User Data and Device Data","body":["To be transparent about how we treat sensitive user and device data (as required by app-store policies such as the Google Play User Data policy), we disclose the following:","Location data: approximate or precise location, collected only after you grant the relevant device permission, to show nearby businesses and support delivery\/booking flows. You can revoke this permission at any time in your device settings.","Camera and photos: accessed only when you choose to scan a barcode, upload an image, or attach a file. We do not access your camera or media in the background.","Device and identifiers: device model, operating system version, app version, language, IP address, and app\/device identifiers used for security, fraud prevention, and analytics.","Usage data: app interactions, searches, viewed items, and crash\/diagnostic logs used to maintain, secure, and improve the Services.","Push notification tokens: used to deliver appointment, chat, and order notifications you have opted into.","We do not sell sensitive user or device data, and we do not use it for purposes unrelated to delivering and improving the Services."]},{"key":"permissions","title":"Device Permissions","body":["The app requests device permissions only when needed for a specific feature, and explains the reason at the point of request:","Location: to find nearby businesses and support booking\/delivery.","Camera: to scan barcodes and capture images you choose to upload.","Photos\/Storage: to attach images or documents you select.","Notifications: to send alerts about appointments, orders, and chat messages.","You can grant or revoke any permission at any time through your device settings; some features may not work without the related permission."]},{"key":"how_we_use_data","title":"How and Why We Use Your Data","body":["We use personal data for the following purposes:","To create and manage your account and authenticate you securely.","To provide core features such as bookings, appointments, orders, invoicing, chat, and recommendations.","To personalise your experience, including content and product recommendations.","To communicate with you about your account, bookings, security alerts, and service updates.","To improve, troubleshoot, and secure the Services, including fraud prevention and abuse detection.","To comply with legal obligations and enforce our terms."]},{"key":"legal_basis","title":"Legal Bases for Processing (GDPR & Law No. 81\/2018)","body":["Where the GDPR or comparable laws apply, we rely on one or more of the following legal bases to process your personal data:","Contract: processing necessary to provide the Services you request (e.g. managing bookings and orders).","Consent: where you have given clear consent (e.g. optional location access, marketing communications). You may withdraw consent at any time.","Legitimate interests: to secure, maintain, and improve the Services, provided your rights do not override those interests.","Legal obligation: where processing is required to comply with applicable law, including the Lebanese Law No. 81\/2018."]},{"key":"sharing_disclosure","title":"How We Share Your Data","body":["We do not sell your personal data. We share data only as needed to operate the Services:","With businesses you interact with on the platform (e.g. a clinic or service provider you book with) to fulfil your requests.","With service providers (processors) who host our infrastructure, process payments, send notifications, or provide analytics, under contracts that require them to protect your data.","With authorities or third parties where required by law, court order, or to protect the rights, safety, and security of users and the public.","In connection with a merger, acquisition, or asset sale, subject to this Privacy Policy continuing to apply to your personal data."]},{"key":"international_transfers","title":"International Data Transfers","body":["Your data may be processed in countries other than your own, including on cloud infrastructure located within the European Union.","Where personal data is transferred across borders, we apply appropriate safeguards required by applicable law, such as the European Commission's Standard Contractual Clauses and equivalent mechanisms, and we ensure recipients provide an adequate level of protection consistent with Lebanese Law No. 81\/2018 and the GDPR."]},{"key":"data_retention","title":"Data Retention","body":["We keep personal data only for as long as necessary to fulfil the purposes described in this policy, including to comply with legal, accounting, or reporting obligations.","When data is no longer needed, we delete it or irreversibly anonymise it. Retention periods vary by data type (for example, transaction records may be retained longer to meet tax and audit requirements)."]},{"key":"data_deletion","title":"Account and Data Deletion","body":["You can request deletion of your account and associated personal data at any time, either from within the app account settings or by contacting us at the email address listed below.","Once we verify your request, we will delete or irreversibly anonymise your personal data, except where we are required to retain certain information to comply with legal, tax, accounting, fraud-prevention, or dispute-resolution obligations.","We aim to action verified deletion requests within the timeframe required by applicable law. We will let you know once your request has been completed."]},{"key":"your_rights","title":"Your Privacy Rights","body":["Subject to applicable law, you have the following rights over your personal data:","Right of access: obtain a copy of the personal data we hold about you.","Right to rectification: correct inaccurate or incomplete data.","Right to erasure: request deletion of your data (\"right to be forgotten\").","Right to restriction: limit how we process your data in certain circumstances.","Right to object: object to processing based on legitimate interests or direct marketing.","Right to data portability: receive your data in a structured, commonly used, machine-readable format.","Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior processing.","For California residents, this includes the right to know, delete, correct, and opt out of the \"sale\" or \"sharing\" of personal information under the CCPA\/CPRA, and the right not to be discriminated against for exercising these rights.","To exercise any right, contact us using the details below. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data-protection authority."]},{"key":"data_security","title":"Data Security","body":["We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit, access controls, and regular security reviews.","No method of transmission or storage is completely secure. In the event of a personal data breach that is likely to affect your rights, we will notify the competent authorities and affected users as required by applicable law."]},{"key":"cookies_tracking","title":"Cookies and Similar Technologies","body":["Our web services may use cookies and similar technologies to keep you signed in, remember preferences, and measure performance.","You can control non-essential cookies through your browser or device settings. Disabling some cookies may affect the functionality of the Services."]},{"key":"childrens_privacy","title":"Children's Privacy","body":["The Services are intended for a general audience and are not directed to children under the age of 13 (or the minimum age of digital consent in your jurisdiction, whichever is higher).","We do not knowingly collect personal data from children under 13. In line with the U.S. Children's Online Privacy Protection Act (COPPA), the GDPR provisions on children's data, the Google Play Families policy, and Lebanese Law No. 81\/2018, we require verifiable parental or guardian consent before knowingly collecting any personal data from a child.","If we learn that we have collected personal data from a child under 13 without the required parental consent, we will delete that data as quickly as possible.","If you are a parent or guardian and believe your child has provided us with personal data, please contact us using the details below and we will take steps to remove it."]},{"key":"changes","title":"Changes to This Policy","body":["We may update this Privacy Policy from time to time. When we make material changes, we will update the \"Last Updated\" date and, where required, notify you or request renewed consent.","Your continued use of the Services after an update becomes effective constitutes acceptance of the revised policy, to the extent permitted by law."]},{"key":"contact","title":"Contact Us","body":["If you have questions about this Privacy Policy or wish to exercise your rights, please contact us using the details provided with this document.","You may also contact our Data Protection Officer for matters specifically relating to the protection of your personal data."]}]}}