Last updated: February 2026.
This Privacy Policy explains how Infinity Medical Group ("IMG", "we", "our") collects, uses, stores and protects personal information — including health information — when you visit our website, contact us, or use any of our services across Infinity Medical Center, Infinity Medical Lab, and Infinity Pharmacy & Wellness in Somalia.
1. Information we collect
We collect only what is necessary to provide care and run our website:
- Contact details — name, email, phone, organisation — submitted through our contact and booking forms.
- Health information — only when you intentionally share it with our clinical teams as part of a consultation, diagnostic test, or pharmacy service. Health data is treated as special-category information.
- Website usage data — anonymous metrics about which pages are visited, device type, and approximate region. We never sell this data.
2. Lawful basis
We process personal data under one of the following lawful bases:
- Consent — when you submit a form, subscribe, or accept non-essential cookies.
- Provision of healthcare — for diagnosis, treatment, pharmacy fulfilment and follow-up care.
- Legitimate interest — to keep our website secure and improve our services.
- Legal obligation — to meet medical record-keeping and reporting duties under Somali law.
3. How we use your information
- To respond to your enquiry, schedule appointments, and deliver clinical care.
- To send confirmation emails and follow-ups about a service you have requested.
- To safeguard our website (rate-limiting, abuse detection, audit logs).
- To improve our services through anonymous usage analysis. We do not run profiling or automated decisions that produce legal effects.
4. Health data (special category)
Any clinical information shared with our medical teams is held under strict confidentiality. It is only accessible to authorised IMG clinicians and support staff directly involved in your care. Health data is never shared with third parties for marketing.
5. Retention
We retain contact-form messages for up to 24 months unless you request earlier deletion. Clinical records are retained for the period required by Somali healthcare regulation. Website analytics data is retained for up to 14 months.
6. Third parties
We use a small set of trusted processors strictly to operate the website (e.g., transactional email delivery for appointment confirmations). We do not sell or rent personal data. A current list of processors is available on request.
7. Cookies
Essential cookies are required for the site to function. Analytics and marketing cookies are off by default and only enabled if you accept them. You can change your preferences at any time from the cookie banner or via the Cookie Policy page.
8. Your rights
Subject to Somali data-protection rules, you have the right to:
- Request a copy of the personal data we hold about you.
- Ask us to correct inaccurate data.
- Request deletion of data we no longer need to keep.
- Object to processing based on legitimate interest.
- Withdraw consent for non-essential processing at any time.
9. Security
We apply organisational and technical safeguards including encryption in transit, access controls, audit logging and least-privilege administration. No system is perfectly secure, but we take reasonable steps to protect your information.
10. Contact
For privacy questions, requests, or complaints, contact us at info@infinitymg.so.