Home Privacy Policy

Privacy Policy

How we handle your personal and medical information.

Last updated: 1 January 2025  ·  Effective: 1 January 2025

1. Who We Are

BaitCare ("we", "us", or "our") is a home healthcare coordination platform registered and operating in Kuwait. We connect families with certified nursing professionals for in-home care services. Our contact details are:

  • Email: info@baitcare.com
  • WhatsApp: +965 99738268
  • Location: Kuwait City, Kuwait

2. Information We Collect

When you use BaitCare's website or book a service, we may collect:

  • Identity data: Full name, date of birth, gender, nationality.
  • Contact data: Phone number, email address, home address.
  • Medical data: Current conditions, medications, allergies, mobility status, care notes.
  • Booking data: Service type, selected dates, chosen nurse, shift preferences.
  • Payment data: Transaction reference number only (full card data is handled by Hesabe, our licensed payment gateway — we never store card numbers).
  • Technical data: Browser type, device type, IP address (collected automatically via standard web logs).

3. How We Use Your Information

We use the information you provide to:

  • Process and confirm your home care booking.
  • Match you with the most suitable certified nurse or caregiver.
  • Send booking confirmations, payment receipts, and status updates by email or WhatsApp.
  • Enable our care coordinators to contact you with scheduling details.
  • Improve our services through anonymised analytics.
  • Comply with legal obligations under Kuwaiti law.

We do not use your data for unsolicited marketing without your explicit consent.

4. Medical Data & Confidentiality

Medical information you provide is treated with the highest level of confidentiality. It is shared only with:

  • The nurse or caregiver assigned to your case, to provide appropriate care.
  • BaitCare's clinical team for care coordination and quality assurance.

Medical data is never sold, shared with third-party marketers, or used for any purpose beyond delivering your care.

5. Data Storage & Security

Your booking data is stored securely using Netlify's cloud infrastructure (ISO 27001 compliant). We apply the following protections:

  • All data transmitted over HTTPS (TLS 1.2+).
  • Access to booking records is restricted to authorised BaitCare staff only.
  • Payment processing handled exclusively by Hesabe (a licensed Kuwaiti payment gateway) — we receive only a transaction reference, never raw card data.
  • Admin access protected by HMAC-signed session tokens with expiry.

6. Data Retention

We retain your data for as long as necessary to fulfil the purposes for which it was collected:

  • Booking records: Kept for 2 years after the last service date, then permanently deleted.
  • Medical information: Retained for the duration of your care arrangement plus 12 months, then deleted.
  • Payment references: Retained for 5 years to meet Kuwaiti financial record-keeping requirements.

7. Your Rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Ask us to correct inaccurate or incomplete data.
  • Deletion: Request that we delete your data, subject to any legal retention obligations.
  • Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at info@baitcare.com or via WhatsApp at +965 99738268.

8. Cookies & Tracking

Our website uses the following browser storage:

  • localStorage: Stores your language preference and booking draft (stays on your device only).
  • sessionStorage: Temporary session state (cleared when you close your browser).

We do not use third-party advertising cookies or cross-site tracking scripts. Google Fonts and FontAwesome CDN are loaded for UI styling; standard CDN logs apply.

9. Third-Party Services

We use the following trusted service providers:

  • Hesabe — Licensed Kuwaiti payment gateway. hesabe.com
  • Resend — Transactional email delivery. resend.com
  • Netlify — Hosting and serverless functions. netlify.com
  • Google Fonts / FontAwesome — UI fonts and icons (CDN).

Each provider is bound by their own privacy policy and applicable data protection laws.

10. Children's Privacy

We provide Baby Care and infant care services. When booking care for a minor, the consenting parent or legal guardian provides information on the child's behalf. We do not knowingly collect data directly from anyone under the age of 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of BaitCare's services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us:

  • Email: info@baitcare.com
  • WhatsApp: +965 99738268
  • Address: Kuwait City, Kuwait