Privacy policy

This Privacy Policy defines how personal data is collected and processed on the medihub.az website. Data is processed in accordance with the Law of the Republic of Azerbaijan «On Personal Data».

Data controller

The controller of personal data is «Medihub.az» MMC. Contact: info@medihub.az.

Accounting documents for an order (invoice, e-qaimə, delivery and acceptance acts) are issued by the supplier company named on that order; the data those documents require is passed to that company for this purpose.

What data we collect

  • Name, surname, phone number, email and delivery address — to receive and fulfil orders;
  • legal name and TIN for organisations — for invoices and e-invoices;
  • qualification details in professional-account applications — to verify professional status;
  • when you register as a patient, your doctor's name and clinic — to review your application and open the compression garment prices;
  • for the framework contract, your FİN (individuals) or VÖEN (organisations) and address — to conclude the contract and name the party on documents;
  • the sending of OTP codes and confirmation facts during order and document confirmations — phone number, date and time, IP address, device information, the document identifier and the delivery result — recorded for the registration of legally significant transactions.

Browsing history

While you are signed in, the pages and products you view are recorded against your account and kept for up to 400 days. This is used internally only — to help select the right product for you and to improve the catalogue; it is not shared with any third party and is not used for advertising. Write to us if you would like these records deleted.

AI assistant

Conversations with the «Have a question?» assistant on this site (message texts and any files you attach) are passed to an external AI service provider (Anthropic) to generate replies and are processed on servers located abroad. Do not include medical documents, identifying or health-related sensitive information in the chat. Guest users’ conversation texts are not stored in our journal — only technical records (message length, time) are kept. If you are signed in, part of your question and of the reply (up to 800 and 1500 characters respectively) is kept in our internal journal together with your name, so we can check the quality of the assistant’s answers and support you. For that reason, do not type health-related or sensitive personal information into the chat. When you send a request to an operator from the assistant, the name, contact details and message you provide are forwarded to our team by email and SMS.

Cookies and analytics

Essential cookies support your session, basket and language choice. We use Google Analytics 4 (Google Ireland Limited) to measure site usage; Google processes this analytics data.

Analytics storage is denied by default. Where the consent banner is shown, analytics cookies are enabled only after you accept. The current regional setting enables analytics storage for visitors in Azerbaijan without showing the banner.

The Google tag may load and send cookieless signals while analytics storage is denied. Advertising storage and personalisation remain disabled. You can delete site cookies in your browser; where consent is requested, you can then decline it on your next visit.

How the data is used

Data is used solely for order fulfilment, delivery, documentation (acts, invoices), legally required record-keeping and contacting you. We do not sell data to third parties; it is shared only to the extent necessary to provide the service (e.g. the courier) and in cases provided by law.

Payment data security

Your card details are neither collected nor stored on medihub.az. When you pay by card you are redirected to the secure page of the payment organisation (YIĞIM — DRAKARİS LLC); the card number, expiry date and security code (CVV) are entered only there and are never transmitted to our servers. The payment organisation operates in accordance with the international PCI DSS standard.

Your order may store the payment result (successful or unsuccessful), its date, amount, transaction number, the card type (for example Visa) and the last four digits of the card number. This information cannot be used to make a payment.

If you choose to save your card for later payments, our site stores no card number — only a token issued by the payment organisation and the last four digits. That token is meaningful only to the payment organisation; the card number cannot be reconstructed from it. You can delete a saved card from your account at any time.

All payment operations are carried out over an encrypted channel (TLS).

Who the data is shared with

Only to the extent needed to fulfil your order, and only with the following:

  • The courier service — your name, phone number and delivery address, solely to carry out the delivery.
  • The payment organisation — where you pay by card, the data needed to process the payment. You enter your card details directly on the payment organisation's own page; medihub.az never sees or stores them.
  • The supplier company — according to the goods in your order, in order to issue the invoice and other accounting documents.
  • The company providing the site's technical infrastructure — to run the site and its database.
  • The company providing the AI assistant — only if you use the assistant, and only the text of that conversation.

We share your data with no one else and we do not sell it; the only exceptions are cases provided for by law.

How long data is kept

  • Data forming part of orders and accounting documents — 5 years from the end of the reporting period (Tax Code Art. 71.4). During that period we cannot delete it at your request, because the law requires it to be kept.
  • Account and basket data — until the account is closed or consent is withdrawn.
  • The text of AI-assistant conversations — up to 12 months.
  • Browsing history and technical records — up to 400 days.

Once the period ends, the data is destroyed or archived in accordance with the law.

Your rights and how to exercise them

You have the right to know what data about you has been collected, and to require its correction, the cessation of its processing and — save in cases established by law — its destruction. These rights are exercised free of charge.

Send a request to info@medihub.az or call +994 10 252 40 59. We answer within 7 working days; where information must be obtained from a third party the period may be extended by a further 7 working days, and you are told so. If we refuse, we give the reason in writing within 5 working days. Anyone to whom we previously passed your data is notified of a correction or deletion within 3 working days.

Accounting records that must be kept by law are retained for the respective period.

The consent given at registration and when you place an order

When you register and when you place an order you are asked to consent to the collection and processing of personal data. The consent is given under Article 8 of the Law of the Republic of Azerbaijan «On Personal Data». Without it we cannot accept the order, because your data is necessary to fulfil, deliver and document it.

Whom the consent concerns: the consent is given by the person placing the order, and it is recorded together with the name, surname, phone number and order number you supply, along with the moment it was given, the version of the text and the language. Consent is only given while signed in, so your identity is established by your account.

Who collects it: «Medihub.az» MMC (operator of medihub.az), info@medihub.az, +994 10 252 40 59.

What data: name and surname; phone and e-mail; delivery address (including plus code) and, where needed, the name of your workplace or clinic; when you register as a patient, your doctor's name and clinic; for the framework contract, your FİN or VÖEN and address; the contents, date, amount and status of the order; confirmation of payment; records of order and document confirmation by SMS; technical records; and, if you use the AI assistant, the text of that conversation.

For what purposes: accepting, processing and delivering the order; making and confirming payment; issuing accounting documents; contacting you about the order; handling returns, exchanges and warranty claims; and the record-keeping the law requires. Advertising and marketing messages are not covered by this consent — separate consent is taken for those.

What operations: recording, systematisation, updating, alteration, retrieval, storage, transfer to those listed above, anonymisation and destruction.

Transfer outside Azerbaijan: the site and its database are held on servers in the USA, and the text of AI-assistant conversations is transferred to the USA for processing. By giving consent you agree, under Article 14.3 of the Law, to that transfer, knowing and accepting that the level of legal protection of data in those countries may differ from the level established by Azerbaijani law.

Data that may relate to health: information about the goods you order (sutures, meshes, implants, compression garments) may be regarded as relating to your health. By giving consent you also consent to the processing of such information for the purposes above. We do not ask you for a diagnosis or any other medical information.

After the retention period ends: once the periods set out above under “How long data is kept” expire, the data is destroyed; anything the law requires to be archived is transferred to the archive in the prescribed manner. If the subject dies, the data is retained or destroyed in the manner established by law.

How long it lasts and how to withdraw it: the consent lasts until the retention periods above expire, or until you withdraw it. You may withdraw it at any time, without giving reasons, by writing to info@medihub.az. After withdrawal we stop processing the data and immediately stop passing it to third parties. Documents the law requires us to keep are retained until that period expires. Withdrawal does not affect the lawfulness of processing carried out before it, and may make delivery of an order already in progress impossible.

Platform owner

The medihub.az platform is operated by its .

The companies your data is shared with

In the cases listed above, data is shared with the following companies:

  • Courier service: Wolt, Bolt
  • Payment organisation: YIĞIM — DRAKARİS LLC
  • Supplier companies: «Altis Medical» MMC, «Avenorica Medical» MMC, «Sutura Nova» MMC, «Virtus Chirurgie» MMC
  • Site technical infrastructure: Automattic Inc. (WordPress.com), USA
  • AI assistant: Anthropic PBC, USA

Sellers

Sales on the medihub.az platform are carried out by different companies depending on the product group. To get in touch with the sellers, write to us.

  • «Altis Medical» MMC

    • Registered name: «Altis Medical» MMC
    • Legal form: MMC
    • VÖEN: 1009590661
    • Legal address: AZ1054, Bakı şəhəri, Binəqədi rayonu, Qasımbəy Hacıbabəyov küç., ev 34, mənzil 36
    • Legal representative: Əhmədov Vidadi Bayraməli oğlu
    • Email: info@altismedical.az

  • «Avenorica Medical» MMC

    • Registered name: "AVENORİCA MEDİCAL" Məhdud Məsuliyyətli Cəmiyyəti
    • Legal form: MMC
    • State registration date: 25.09.2026
    • VÖEN: 2009981091
    • Legal address: AZ1149, Bakı şəhəri, Xətai rayonu, Əhmədli ştq, Məzahir Rüstəmov küç., ev 24, mənzil 13
    • Legal representative: Eyvazov İlqar Binnət oğlu
    • Email: info@medihub.az
    • Phone: +994 50 342 98 44

  • «Sutura Nova» MMC

    • Registered name: «Sutura Nova» MMC
    • Legal form: MMC
    • VÖEN: 1009306881
    • Legal address: AZ1054, Bakı şəhəri, Binəqədi rayonu, Qasımbəy Hacıbabəyov küç., ev 34/36
    • Legal representative: Əhmədov İbrahim Vidadi oğlu
    • Email: info@suturanova.az

  • «Virtus Chirurgie» MMC

    • Registered name: «Virtus Chirurgie» MMC
    • Legal form: MMC
    • VÖEN: 1303601241
    • Legal address: AZ1054, Bakı şəhəri, Binəqədi rayonu, Qasımbəy Hacıbabəyov küç., ev 34/36
    • Legal representative: Əhmədov Vidadi Bayraməli oğlu
    • Email: info@virtuschirurgie.com