Privacy Policy

Last updated: 12 August 2026

Your health information is the most private thing you will ever share with anyone. This explains plainly what we hold and what we do with it.

What we collect

When you book: your name, phone number and, if you give it, your email address.
When you become a patient: your date of birth, national ID, address, and the health information you and our clinicians record — history, examination findings, X-rays, treatment notes.
When you pay: the amount, the date and a reference. See the card section below.
When you visit this website: standard technical information, and analytics described below.

Your card details

We never see or store your card number. Card payments are taken on our bank's own secure payment page. We receive only confirmation that a payment succeeded, its amount and a reference — never the card number, expiry date or security code.

Why we hold it

To provide your care safely, and to keep the clinical record Omani healthcare regulation requires us to keep.
To arrange, confirm and remind you of appointments.
To take payment and keep proper financial records.
To answer you when you contact us.

Who can see it

The clinicians and staff involved in your care, and no one else in the clinic.
Your insurer or sponsoring organisation, where your care is billed to them — and only what is needed for that claim.
Our bank's payment provider, for the payment itself.
Anyone we are legally required to disclose to.

We do not sell your information, and we do not share it for anyone else's marketing.

This website

This site uses Google Analytics and Google Tag Manager to understand which pages are useful, a Meta (Facebook) pixel to measure our advertising, and a chat widget so you can message us. These may set cookies. You can refuse cookies in your browser; the site still works.

How long we keep it

Clinical records are kept for as long as Omani healthcare regulation requires. Booking and payment records are kept as long as needed for accounting and tax. Enquiries that do not become appointments are not kept indefinitely.

Your rights

You may ask what we hold about you, ask us to correct anything wrong, and ask for a copy of your records. Write to info@cbpsj.com or speak to reception. We may need to confirm your identity first — that protection is for you.

The CBP patient app

Our app lets existing patients book and reschedule visits, message reception, see what the clinic shares with them and follow their home exercises. To do that, the app holds:

Your sign-in: your email address and a securely scrambled password (or your Google sign-in), and the app language you chose.
The details you type to link your clinic file — name, national ID or resident card number, date of birth and mobile number — which reception uses to check the file is yours.
Copies of what the clinic shares with you: appointments, past visits, care plan progress, billing documents, reports, X-ray and posture images, and home exercises.
What you send: messages, documents and photos, exercise ticks, and "It hurt" / "Too easy" feedback.
A notification code for your phone, so we can tell you about appointments and replies.

These copies are kept by our cloud provider, Supabase, in an encrypted database in its Mumbai (India) region, and travel to your phone over encrypted connections. Each person can see only their own file and the family files the clinic links to their account. We do not sell this information, use it for advertising or share it with anyone else. Face ID or fingerprint sign-in happens on your phone only — we never receive it. The app does not use advertising or tracking tools.

Deleting your app account

You can delete your app account at any time inside the app: Settings › Delete my account. This removes your sign-in, the files you sent from the app and the app's copies of your records straight away. Your clinical record at the clinic is kept, because Omani healthcare regulation requires it — you can still ask about it as described under "Your rights". If you cannot use the app, see how to ask us to delete your app account.

Keeping it safe

Records are held on systems inside the clinic, reached only by named staff with their own sign-in, and every access is logged. Information sent between your device and us travels encrypted.

Contact

CBP Precision Spine Center, 336 18th November Street, Azaiba, Muscat 130, Sultanate of Oman — +968 7277 7796, info@cbpsj.com.