Privacy Policy

Everest Minds for Digital Transformation ("Everest Minds", "we", "us") operates the Clinera MDT platform. This Privacy Policy describes how personal data is handled in connection with the platform.

1. Who We Are

Everest Minds for Digital Transformation is a limited liability company registered in Cairo, Egypt (Commercial Register No. 158704), with offices at Cairo Business Plaza, North 90th Street, New Cairo, Cairo, Egypt.

2. Our Role

Clinera MDT is provided to healthcare institutions ("Clients") for clinical collaboration purposes. The Client institution is the data controller for patient data processed on the platform. Everest Minds acts as a data processor, processing personal data on behalf of and under the instructions of the Client.

Where a third party sponsors account subscriptions for the Client, the sponsor does not have access to patient data or platform clinical content.

3. What Data Is Processed

The following categories of personal data may be processed through the platform, as entered by authorised Client staff:

• Patient demographics (name, age, gender, contact details, national ID where applicable)
• Medical history and clinical records
• Diagnosis and treatment information
• Platform user account information (name, email, role) for Client staff

4. How Data Is Used

Personal data is processed for the following purposes:

• Facilitating multidisciplinary team meetings and clinical collaboration
• Patient case management and documentation
• AI-assisted data extraction from uploaded medical documents (where enabled)
• Platform administration, support, and maintenance

5. AI Features

Clinera MDT includes AI-assisted features that process document content to extract structured data fields. These features use third-party AI models (cloud-based or self-hosted, depending on the deployment configuration). AI outputs are always presented to the clinician for review and confirmation before being saved. Everest Minds does not use client data to train AI models.

6. Data Storage and Security

Hosting, data location, infrastructure access, and any subprocessors are defined for each Client deployment. Available patterns may include managed cloud in an agreed region, private cloud, or infrastructure controlled by the Client. Documented technical controls include:

• AES-256 encryption at rest
• TLS encryption in transit
• Role-based access controls
• Institutional account isolation
• Backup, monitoring, and recovery procedures configured for the selected deployment

Final controls, retention periods, recovery objectives, and support access are governed by the applicable services agreement, statement of work, and data processing agreement.

7. Data Sharing

Patient data is processed by Everest Minds only as required to provide the contracted service and under the Client's instructions. It is not shared with sponsors. Approved infrastructure or service providers may process data only where authorised for the deployment and subject to the applicable contractual safeguards. Sponsors may receive aggregated, non-identifiable usage metrics only with the Client's prior written consent.

8. Data Retention

Retention, backup retention, export, legal hold where applicable, and deletion timelines are agreed with the Client based on applicable law, clinical requirements, and the selected deployment model. The contractual exit plan defines what happens to Client data when the service ends.

9. Your Rights

Individuals whose data is processed through the platform may exercise their data protection rights (access, rectification, erasure, restriction, portability, objection) by contacting their healthcare institution (the data controller). The Client institution may contact Everest Minds for technical assistance in fulfilling such requests.

10. Legal Basis

The legal basis for processing depends on the applicable jurisdiction and the Client's relationship with the data subject. Data protection frameworks, including GDPR where applicable, may impose additional requirements. Everest Minds processes patient data under the Client's instructions where it acts as data processor.

11. Website Analytics and Campaign Measurement

This public marketing website is separate from the Clinera clinical platform and is not intended for patient or clinical information. Please do not submit patient data through this website, email links, or meeting-booking tools.

We use Vercel Web Analytics and Speed Insights to understand aggregate website traffic and performance. Vercel Web Analytics is designed to provide anonymous, aggregated reporting without third-party cookies.

If you choose "Accept" in the website consent banner, we may also load the LinkedIn Insight Tag on Clinera's business-to-business marketing pages. LinkedIn may receive the page URL, referrer, IP address, device and browser information, and timestamp so that we can measure campaign performance, understand aggregate professional audience categories, and build business audiences. We do not intentionally send names, email addresses, patient data, or clinical information through this tag.

Campaign parameters such as source, medium, campaign, and creative may be stored for the duration of your browser session and passed to our Calendly booking link for attribution. Calendly processes booking information under its own privacy terms. You can change your LinkedIn analytics choice at any time using the "Cookie Settings" link on our marketing pages.

12. Contact

For questions about this Privacy Policy or data protection matters:

Everest Minds for Digital Transformation
Email: privacy@everestminds.com
Address: Office M607, Cairo Business Plaza, North 90th Street, New Cairo, Cairo, Egypt