AvMedSup is under construction — we're building the global AME directory. Stay tuned!
AvMedSup

Privacy Policy

Last updated: 4 June 2026

1. Introduction

AvMedSup (“we,” “us,” or “our”) operates the website at avmedsup.com (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit, use, or otherwise interact with the Service.

We are a small, independent directory. We do not sell personal data and we do not run third-party advertising. The Service is operated from the United Arab Emirates. By using the Service you agree to the practices described in this policy.

2. Information We Collect

We collect only the information needed to operate the Service:

  • Information you provide directly: when you submit the contact form (name, email address, subject, message) or sign up for the newsletter (email address).
  • Browser location (optional):if you click “Use my location” on the map page, your browser sends your coordinates to our server to centre the map. Coordinates are not stored in our database; they are used only for the immediate search and discarded.
  • Server logs: our hosting provider (Vercel) records standard request metadata (IP address, user agent, referring URL, timestamp) for security, abuse prevention, and rate-limiting purposes. Our database (Supabase) records timestamps on form submissions.
  • Cookies: we do not set first-party tracking or analytics cookies. We do not use Google Analytics, Meta Pixel, or similar third-party trackers.

3. How We Use Your Information

  • To respond to messages you send us via the contact form.
  • To send you newsletter emails (only after you sign up; you can unsubscribe at any time).
  • To operate rate-limiting and prevent abuse of our API endpoints.
  • To diagnose technical issues and improve the Service. We do not build user profiles or perform automated decision-making.

4. Third-Party Services

We rely on a small set of trusted infrastructure providers. Each may process your data on our behalf:

  • Supabase (database & auth): stores contact form submissions and newsletter signups. See supabase.com/privacy.
  • Vercel (hosting): serves the website and runs API routes. See vercel.com/legal/privacy-policy.
  • OpenStreetMap & Nominatim (maps & geocoding): tile servers receive your IP address and the map area you view; Nominatim may receive address queries. See osmfoundation.org privacy policy.
  • Amazon Associates (future): if we enable affiliate links on the supplements reference, Amazon will set cookies when you click through. See amazon.com/privacy.

5. Cookies

We do not use first-party cookies for tracking, analytics, or advertising. The only cookies that may be set are those placed by third parties (e.g., Amazon) if you choose to click an outbound affiliate link. You can block or delete cookies in your browser at any time without losing access to the Service.

6. Data Retention

  • Contact submissions: retained indefinitely so we can refer back to your message; deleted on request.
  • Newsletter signups: retained until you unsubscribe, verified-deletion is requested, or the list is purged as part of a Service shutdown.
  • Server logs: retained for up to 30 days by our hosting provider for security and rate-limiting.

7. Your Rights

Depending on where you live, you may have some or all of the following rights:

  • Access: request a copy of the personal data we hold about you.
  • Correction: ask us to correct inaccurate data.
  • Deletion: ask us to delete your data, subject to legal retention obligations.
  • Unsubscribe:remove yourself from the newsletter at any time by replying “unsubscribe” to any newsletter email.
  • Complaint: lodge a complaint with a data protection authority. The United Arab Emirates has enacted Federal Decree-Law No. 45 of 2021 on Personal Data Protection; the relevant authority is the UAE Data Office within the Telecommunications and Digital Government Regulatory Authority.

To exercise any of these rights, email contact@avmedsup.com. We respond within 30 days.

8. International Data Transfers

Our database and hosting infrastructure are provided by Supabase and Vercel, which may store and process data in the United States, the European Union, or the Asia-Pacific region. By using the Service, you acknowledge that your information may be transferred to and processed in countries other than your country of residence. Our providers publish their own transfer mechanisms (Standard Contractual Clauses, etc.) which we rely on.

9. Children’s Privacy

The Service is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Security

We use industry-standard measures to protect your data: HTTPS everywhere, rate-limiting on all public endpoints, parameterised database queries, Row Level Security on all database tables, and server-side input validation. No method of transmission over the internet, however, is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be announced by a notice on the homepage for at least 14 days before they take effect.

12. Contact

Questions or concerns about this policy? Email contact@avmedsup.com.