Introduction

NextHealth (“we,” “our,” “us”) is committed to protecting your privacy and safeguarding your personal data. This Privacy Policy explains how we collect, use, store, and secure your information in compliance with the General Data Protection Regulation (GDPR) and in alignment with ISO 27001 information security standards. 

By using our website, software platforms, or services, you agree to the practices outlined in this policy.

Data We Collect

We only collect personal data necessary for the purposes of providing our services, which may include:

• Identity & contact information: name, email, phone number, organization details.
• Credentials: account registration details (encrypted).
• Health-related data: clinical, diagnostic, or medical records (with explicit consent where applicable).
• Technical & usage data: device information, IP address, log files, and analytics data.
• Billing & transactions: payment history, invoices, and account information.

Purpose of Processing

We process personal data only for lawful and transparent purposes, including:

• Delivering healthcare technology services and platform functionality.
• Enabling secure patient journeys, telehealth, and compliance monitoring.
• Enhancing and customizing services using analytics and insights.
• Meeting regulatory, security, and contractual obligations.
• Providing customer support and communication.

Legal Basis for Processing

Our data processing is based on:

• Consent: freely given, informed, and revocable at any time.
• Contractual necessity: delivering services you have requested.
• Legal obligation: compliance with applicable healthcare and data regulations.
• Legitimate interest: improving user experience, security, and service delivery.

Data Sharing & Transfers

We do not sell or trade personal data. Information may be shared with trusted service providers or regulators when required, under strict confidentiality and data protection agreements. Any international transfers are safeguarded through appropriate contractual and technical measures.

Data Retention

We retain personal data only as long as necessary for service delivery, contractual purposes, or as required by law. When data is no longer needed, it is securely deleted or anonymized.

Rights of Individuals

Under GDPR, you have the right to:

• Access your personal data.
• Request corrections or updates.
• Request deletion (right to be forgotten).
• Restrict or object to processing.
• Data portability in a structured, machine-readable format.
• Withdraw consent at any time.

Requests can be made via the contact details below.

Security & ISO 27001 Alignment

We follow ISO 27001 best practices for information security, including:

• Encryption of data in transit and at rest.
• Role-based access controls.
• Regular security audits, monitoring, and penetration testing.
• Business continuity and disaster recovery procedures.
• Employee training on confidentiality and data protection.

Cookies & Tracking

We use cookies and analytics tools to optimize our services. You can manage or disable cookies via your browser. 

Intellectual Property & Content Use

• All business processes, technology models, methodologies, and software solutions described on this website are the intellectual property of Alpha Health Group.
• Unauthorized use, reproduction, or distribution of this information is strictly prohibited by law.
• All images, graphics, and system illustrations are provided for illustrative purposes only. Actual product features may differ.

Changes to this Policy

We may update this Privacy Policy from time to time. Updates will be posted with a revised effective date.

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

• Data Protection Officer
• NextHealth – Alpha Health Group
• Data Protection Officer: dpr@alphatsm.com

Address: 101, 11th floor, Damas Tower, Al Maktoum Road, Riggat Al Buteen, Dubai, UAE