Privacy policy

Zheen Portal · Zheen Private Hospital, Erbil · Last updated 29 October 2026

Who we are

Zheen Portal (zheenportal.com) is the internal hospital information system of Zheen Private Hospital, Erbil, Kurdistan Region, Iraq. The hospital is responsible for the information in it. Contact: zheenportal@gmail.com.

Information about staff

For each staff account we keep the name, role, department, work email, an optional recovery Gmail address, and a record of sign-ins and actions (an audit trail required for patient safety).

Google sign-in

If a staff member chooses to sign in with Google, we receive only their Google account identifier, email address and name, through Google's standard sign-in (OpenID Connect). We use these only to link the Google account to the staff account the hospital created and to sign that person in. We do not request access to Gmail, Drive, contacts, calendars or any other Google data. The staff member, or an administrator, can unlink the Google account at any time. Use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements.

Information about patients

Staff record patients' medical information to provide care. It is kept on servers controlled by the hospital, is visible only to staff whose role needs it, and every access and change is logged. Medical records are corrected or amended, never silently deleted, because the law and patient safety require a complete record.

Messages and email

The portal sends password-recovery codes by email. WhatsApp reminders are opened by hospital staff from the patient's phone number on file; message content never includes results or diagnoses.

Sharing

We do not sell information or use it for advertising. We share it only with the services that run the portal for us (hosting, encrypted backups, email delivery), when the law requires it, or with the patient's consent.

Security and retention

Connections are encrypted, backups are encrypted, and staff accounts are protected by passwords, optional PINs and audit logs. Staff account data is kept while the person works at the hospital and as long afterwards as the audit trail requires; medical records are kept for the period required by law.

Your choices

Staff and patients can ask to see or correct their information by writing to zheenportal@gmail.com or by asking at the hospital reception.