Privacy policy · IXXO Med

For the IXXO Med app see the app privacy policy.

Introduction

IXXO Cart Ltd (“we,” “our,” “us”) provides IXXO Med, practice management software for private medical practices and clinics, and the ixxomed.com website (“Services”).

This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website, create an account, or use our Services.

By using our website or Services, you agree to this Privacy Policy. If you do not agree, do not use our Services.

Data Controller

The data controller responsible for your personal data is:

IXXO Cart Ltd, HE 417548Registered address: 90, Arch. Makariou III, 7060 Livadia, Larnaca, CyprusOffice: Leoforos Archiepiskopou Makariou 44, Alison Court, Office 104, 7102 AradippouPhone: +357 24 637230Office in Germany: An der Strunde 20A, 51465 Bergisch Gladbach, Germany, +49 157 36500265Email: privacy@ixxo.com

Data We Collect

We collect and process the following categories of personal data:

a. Information you provide directly

Name, email address, company name, and password (for creating an IXXO Med account)
Billing and payment information (processed securely by third party providers)
The details you send through the demo request form on ixxomed.com (name, practice, specialty, number of doctors, mobile, email, city, practice address, current software, demo language, the way and time of the demonstration, and message). They are sent by email to demo@ixxomed.com, entered in IXXO's customer management system and kept to answer your request. We send a confirmation with the time of the demonstration to your email. Until you send the form, what you type is kept only in your own browser.
The details you send through the Recommend IXXO Med to your doctor form on ixxomed.com (first name, last name, optionally your email, your doctor's name, the clinic and town, and whether we may tell the clinic that you asked). We use them only to contact that clinic about IXXO Med and, if you gave us your email, to tell you when your doctor joins. If you do not tick that we may tell the clinic, your name is never given to the clinic and our team sees only how many patients asked and their town. If you neither tick nor give an email, we do not keep your name at all. We delete these details after 24 months.
Files or attachments uploaded to your account

b. Information collected automatically

IP address, browser type, operating system, device identifiers (in the server's logs)
Pages visited, in the server's logs.
Visit counting without cookies: the ixxomed.com website counts visits with its own counter on our own server, without third party tools. For each page view only the page, the name of the website you came from (not its full address), the page language, whether the screen is a phone, tablet or desktop, and the day and hour are recorded. If you arrive through a link with campaign tags (for example utm_source or ref in the address), these tags are counted too and then removed from the address bar. The country is looked up on our server from your IP address, in a local copy of the free DB-IP country database (IP Geolocation by DB-IP). The address is used only for that moment. Where this is not possible, the region of your browser's language setting is used instead. To count a demo or trial request for the source of the visit, and to know the last page of a visit, your browser keeps a small note in sessionStorage. It stays in this browser tab only, is deleted when you close the tab, is not a cookie and identifies no one. The note itself is not sent; only the source of the visit and the previous page go with the counts. Your IP address, your browser details and any identifier are not stored, and two visits cannot be linked to each other on the server. We keep only daily totals, for 13 months, to know which pages and campaigns are useful (legitimate interest). If your browser sends Do Not Track or Global Privacy Control, nothing is counted.
The ixxomed.com website uses no tracking cookies. The fonts are hosted on our own server, so the website loads nothing from Google or other third parties.

c. Information from third parties

We may receive limited data from third party services you connect to IXXO Med, such as payment gateways or integrations (e.g., Google, Stripe).

To be completed by IXXO's lawyer: Patient data that practices enter into the IXXO Med software: IXXO Cart Ltd processes it as a processor on behalf of each practice (GDPR article 28, data processing agreement), and it includes health data, which is special category data (GDPR article 9).

Legal Basis for Processing

We process personal data under the following lawful bases as defined by the EU General Data Protection Regulation (GDPR):

Contractual necessity: To provide and maintain the Services you request
Legitimate interest: To improve our platform, ensure security, and prevent fraud
Legal obligation: To comply with accounting, tax, or regulatory requirements
Consent: For optional communications, such as the demo request

How We Use Your Data

Your data is used to:

Create and manage user accounts
Process payments and provide invoices
Respond to support and demo requests
Send important system notifications and updates
Monitor usage and improve functionality
Ensure the security of our Services
Comply with applicable laws and regulations

We do not sell or rent your personal data.

Data Sharing

We only share your data with:

Service providers who help operate our platform (hosting, payments, communication tools)
Legal authorities if required to comply with law or court orders
Business successors if our company is merged or acquired

All processors are contractually bound to handle your data securely and in compliance with GDPR.

International Data Transfers

Your personal data may be transferred to and processed outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards, such as the EU Commission's Standard Contractual Clauses (SCCs), are in place.

Data Retention

We keep your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When you delete your account, we delete or anonymize your data within a reasonable period unless retention is required for legal obligations.

To be completed by IXXO's lawyer: how long demo requests and server logs are kept, and the hosting provider and country.

Data Security

We apply industry standard security measures to protect your data, including:

Encryption (HTTPS/TLS)
Access controls and authentication
Regular audits and monitoring

While we take all reasonable precautions, no system is completely secure. You use our Services at your own risk.

Your Rights (under GDPR)

You have the following rights regarding your personal data:

Access: Request a copy of your data
Rectification: Correct inaccurate information
Erasure: Request deletion of your data (“right to be forgotten”)
Restriction: Limit how your data is processed
Portability: Receive your data in a structured format
Objection: Object to data processing based on legitimate interests
Withdrawal of consent: For processing based on consent

To exercise these rights, contact us at privacy@ixxo.com

We may request proof of identity before fulfilling your request.

To be completed by IXXO's lawyer: the right to lodge a complaint with the Commissioner for Personal Data Protection in Cyprus.

Cookies

The ixxomed.com website uses no cookies for its visitors, and no tracking tools. It only counts visits as totals, without cookies and without personal data, as described above. Strictly necessary cookies are used only on the sign in pages of the website editor and for signed in administrators (session and security). The IXXO Med software uses cookies for essential functionality.

You can disable or manage cookies in your browser settings. However, disabling cookies may affect some features of our Services.

Children's Privacy

Our Services are not intended for children under 16 years of age. We do not knowingly collect personal data from minors. If you believe we have collected such data, contact us immediately for removal.

Third Party Links

Our website may contain links to third party websites or services. We are not responsible for their privacy practices. Review their policies before interacting with them.

Changes to This Policy

We may update this Privacy Policy from time to time. Your continued use of our Services after an update means you accept the revised terms.

Contact Us

If you have questions, requests, or complaints about this Privacy Policy or our data practices, contact: