Privacy & safety

Health information deserves higher boundaries.

This site limits what its forms request, explains what each field is for, and keeps study participation and publication consent outside the public intake form.

Not a public profileBooking requests and raw research intakes are not displayed on the website or sold for advertising.

No public patient profiles

Booking requests and research ideas are restricted submissions, never a public community feed.

Minimize before collecting

Research intake uses broad age, country, timeframe, and topic fields—never dates of birth, addresses, records, or uploads.

Review, then remove

New research intakes receive a 90-day review deadline. A production deletion and withdrawal process still requires operational oversight.

Booking requests

The booking form asks for a name, reply email, preferred visit type, date window, and an optional short reason. It is intentionally not a medical-history form.

PurposeArrange and confirm a requested consultation

Avoid enteringID documents, detailed health records, test results, prescription images, payment data

VisibilityAuthorised scheduling or clinical reviewers only

Research-interest intake

The community form accepts a minimal, structured experience or research idea from an adult. Required content includes a contribution type, broad health area, title, and short de-identified description. Age band, country, timeframe, impact, what might help, and a research question are optional.

ContactPreferred name and email are optional and requested only when a person chooses at least one follow-up permission

Raw textRestricted intake for human privacy review; it is not automatically anonymous simply because direct identifiers were removed

Not used forDiagnosis, treatment, emergency response, advertising, automatic study enrolment, or automatic publication

Technical separationContact is stored in a linked table in the same database service. This is pseudonymization, not an access-control guarantee or irreversible anonymization

Contact permission is not research consent

The form records three separate optional choices: contact about the specific submission, contact about a future study, and contact about a possible anonymous quotation or case story. None of them enrols a person in research or authorizes publication.

Publication is a later decision. If identifiable material might ever be published, the person must be shown the exact material and complete a separate written publication-consent process. A study must also use its own informed-consent process unless an appropriate ethics body has approved another lawful approach.

ICMJE participant protection HHS informed-consent guidance

No public file uploads

The public research-intake form does not accept attachments. Do not send records, test results, scans, prescription labels, photographs, PDFs, or screenshots. Removing a visible name does not reliably remove metadata or other identifying details.

Do not paste a medical record into a text box. If a future approved study needs documents, it should provide an invitation-only, purpose-built secure process with its own consent and retention rules.

Retention and hosting

New research intakes receive an expiry marker 90 days after submission so they can be reviewed for deletion, closure, or lawful linkage to an approved project. Automated purging is not yet active, so this marker must be backed by a documented operational deletion process before the intake is used at scale.

The current Cloudflare D1 database reports an APAC operating region and no jurisdiction pin. That is not a guarantee of UAE data residency. If UAE health-data rules apply, the site owner must confirm localization, transfer, legal basis, controller details, and health-authority requirements before collecting identifiable patient health information.

Safety boundaries

Website content is educational only. Forms are not monitored as emergency channels and do not create a doctor-patient relationship by themselves. A booking request is not confirmed until the clinic responds. Research submissions do not receive clinical advice.

For an emergency, severe or rapidly worsening symptoms, or immediate risk of harm, contact your local emergency service or attend the nearest appropriate emergency facility.

Governance that still needs an owner

Before a formal study recruits through this website, the owner should publish the legal data controller, privacy-request route, applicable jurisdiction, verified hosting/transfer position, final retention schedule, withdrawal process, incident contact, and ethics or institutional approval details. Reviewer access should be protected with strong authentication and auditable roles.

The form includes same-origin checks, a streamed 36 KB body limit, strict field limits, attachment rejection, identifier-pattern warnings, and a honeypot. The live Cloudflare zone also rate-limits `/api/` requests per IP. Turnstile should be added before high-volume promotion or formal study recruitment.

Want to contribute a research question?

Use the minimal intake only after reading these boundaries. Keep clinical records and identifying details out.

Open research intake