How we use your details
This notice explains what happens to the information you give us through this website. It is written in plain language. If anything is unclear, call or email the clinic.
Last updated: 27 October 2026
Who is responsible for your data
Dr Assan Maghsoudlou, Senior Orthopaedic Surgeon, practising in Limassol, Cyprus, is the controller for the personal data described here. To contact the practice about your data: info@drassan.com or +357 25 731 213.
What we collect, and why
| When | What | Why |
|---|---|---|
| You send an appointment request through the form | Your name, WhatsApp number, email address, what the request is about, preferred language, an optional short message, and the time you agreed to be contacted | To reply to you and arrange an appointment at your request, and to send you one automatic confirmation email |
| You email or call the clinic | What you tell us | To answer you |
| You visit the website | Technical data such as IP address and browser type, kept briefly in the hosting provider's server logs | To keep the website secure and working |
The website uses Vercel Web Analytics to count visits and see which pages are read, so that we can keep the site working well. It does not use cookies, does not follow you from one website to another, and does not store your IP address or build a profile of you. It records the page visited, the referring site, and general device and country information. The website does not use advertising or tracking tools. Our fonts are hosted on our own site.
What your request is about (for example "Knee or hip" or "Sports injury"), and anything you write in the message, is health-related information, which the law treats as a special category of personal data. We ask for it only so that the right person can reply, and we use it only to deal with your request.
Please do not send medical records through the form
The form is for appointment requests only. Do not include medical records, test results, images or detailed health information. Bring them to your consultation, or ask the practice how to share them securely. The form is not monitored for urgent problems. In an emergency, call 112.
Our legal basis
We use the details in your appointment request because you asked us to take steps before an appointment, and because you agreed to be contacted when you ticked the box on the form. You can withdraw that agreement at any time.
Who receives your details
- The practice, who read and answer your request.
- Service providers that help deliver the website and the form: our website host (Vercel) and our email delivery provider (Resend). Both are based in the United States, so your details may be processed outside Cyprus and the European Economic Area, under the safeguards those providers offer for such transfers. They process data only to provide these services.
- We do not sell your details or use them for marketing.
How long we keep them
We keep your request only as long as needed to deal with it and any follow-up, and no longer than the practice's records policy requires. If no appointment results, the request is deleted. Server logs are kept by the hosting provider for a short period.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or move it to another service. You can object to our use of it, and withdraw your agreement to be contacted at any time. Write to info@drassan.com. If you are unhappy with how we handle your data, you can complain to the Office of the Commissioner for Personal Data Protection in Cyprus.
Security
The website uses an encrypted connection (HTTPS). Appointment requests are sent directly to the practice's email inbox, and personal details are never placed in web addresses. Access to the inbox is limited to authorised practice staff.
Maps, video and other services
The map in the contact section loads from Google only when you choose to show it. Before you do, nothing is sent to Google. See the cookie notice.
Patient testimonials
Patient testimonials on this website are published only with the patient's written consent. A patient can withdraw that consent at any time by contacting the practice at info@drassan.com, and the testimonial will then be removed. The videos are hosted on this website itself and do not set cookies.
The chat assistant
The chat assistant on this website is an automated tool that runs in your browser. What you type into it is not sent to us, stored, or shared, and it cannot give medical advice. If you choose a button that opens WhatsApp, a phone call or an email, you are then using that service, and the clinic will see your number or address when you contact it.
The digital contact card
The digital card does not collect personal data. Saving the contact file stores Dr Assan's details on your own device. Questions typed into the card's chat assistant are answered in your browser and are not sent to us.
Changes to this notice
If we change how we use your data, we will update this page and the date above.