Information Used

The portal stores the practitioner’s full legal name, contact details, professional license number, licensing authority and applicable expiry, verification decisions, personal UAE IBAN and account-holder name. It also stores referrals, clinical treatment values, payment events, reward credits, clawbacks, forfeitures, payout allocations and transfers, and versioned Terms acceptance with its timestamp, IP address, user agent and content hash. These records support participation checks, administration and reward payments.

Private Access

Partners see only their own profile, card, referrals, rewards, and payout requests. Authorized Harmony administrators can view partner activity for management and support.

Patient Contact

Patient referral details should be submitted only when the patient has agreed to be contacted by Harmony Medical Group. Referral records include patient name, UAE mobile, optional patient email, requested treatment, selected branch, referral notes and journey status, and operational clinical-payment and reward information.

Security

The portal uses authenticated access, role-based permissions and encrypted storage for personal IBAN and bank account-holder details. Partners see masked IBANs. Authorized administrators may inspect bank details for verification and payment. Bank details and professional license numbers are excluded from ordinary integration/audit payloads; referral synchronization does not send them to Zoho.

Sessions and referral attribution

The portal processes IP addresses, browser user agents and authenticated session information for account access, verification and activity records. Its session and attribution cookies preserve navigation and first/latest referral attribution. When present, captured campaign identifiers include UTM source, medium, campaign, term and content; gclid, gbraid, wbraid, fbclid, ttclid, msclkid and sc_click_id, together with landing/current/referrer URLs. Attribution cookie persistence is separate from reward eligibility; rewards do not expire after 90 days.

Financial verification

Insurance records include formal claim or pre-authorization decisions and approved amounts. BNPL records include the provider, invoice and authorized amounts, transaction reference, authorization date, and the administrator's Accounting verification decision and supporting reference note. Internal BNPL evidence records are encrypted. Optional supporting PDF or image files are stored privately and can be downloaded only by authorized administrators; downloads are audited. These files and internal notes are excluded from ordinary notifications and Zoho referral synchronization. Preliminary and final monthly payout preparation emails to Accounting include partner identity, payout amounts, status and masked bank details, not full IBANs or patient clinical notes.

Partner acquisition links

When enabled, an Admin's acquisition QR link records the first valid acquisition touch in this browser. An encrypted first-party cookie contains only an opaque reference, with no patient data, Admin database ID or marketing identifiers. It lasts up to 90 days from that first touch, without extending on repeat visits. Later links do not replace the first touch. This operational acquisition record is separate from advertising attribution.

When an acquired Partner later submits a patient referral and Zoho enrichment is enabled, Harmony may include only the Partner's effective acquiring Admin name as the Admin acquisition identity in the referral synchronization sent to Zoho CRM for operational source reporting. This feature does not send this Admin acquisition identity to Google or Meta. QR tokens, acquisition link IDs, claim identifiers, browser hashes, acquisition cookies and internal Admin database IDs, including original and effective Admin IDs, are not sent as part of that referral attribution.

When a new account is created with a valid QR claim, that claim is reserved to the account and removed from the browser. If recording the acquisition is interrupted, Harmony can recover it from that account-bound reservation without assigning the claim to another person. Email, professional and bank verification, current account restrictions and historical eligibility milestones are separate records. Deleting cookies, blocking storage, private browsing or using another browser or device can prevent pre-registration attribution; we do not use fingerprinting or IP matching to recover it. A shared QR does not prove who handed it over.

Shared global and per-link issuance limits can temporarily suppress new QR capture while activation remains available. Request sampling and security-event limits are separate from claim issuance. These controls do not identify unique people or assign ownership using IP addresses.

Authorized Harmony Admins can view all partner acquisitions and related referral counts for operational reporting. Only Super Admins can correct acquisition, manage links, export acquisition reports and inspect sensitive acquisition events. Corrections retain original evidence and an audit trail; they do not transfer patients or change reward entitlement. Browser request counts are not counts of unique people or proven camera scans. Registered attribution does not expire with the browser cookie.

Operational integrations

Referral synchronization sends the configured referral/contact and attribution fields to Zoho CRM after the local referral is saved. Configured email providers deliver verification codes and account, policy, referral and financial notifications. Hosting and security infrastructure processes requests and operational logs needed to run the portal.