Scope
This policy explains how Horizon HealthCare, publisher of Cabinext, processes personal data on cabinext.ma, during commercial requests and when providing the application. It supplements contracts, processing schedules and practice-specific instructions.
Roles and responsibilities
For the website, Horizon HealthCare acts as controller for received requests. For patient records managed in Cabinext, the medical practice generally determines purposes and acts as controller, while Horizon HealthCare acts as service provider or processor depending on the contract.
Website and prospect data
We may process identity, contact details, specialty, city, number of practices, demonstration preferences, message content, technical connection information, request source and communication history.
Professional account data
Cabinext may process professional names, contact details, role, practice, settings, authentication data, login logs, actions, subscriptions, invoices, support requests and preferences.
Patient data
On behalf of a practice, Cabinext may host identification data, contact information, appointments, clinical notes, history, allergies, diagnoses, prescriptions, documents, results, billing and other information selected by the professional.
Voice dictation and AI
When dictation is enabled, audio may be processed to generate text. Technical arrangements, providers, processing location and retention must be described in contractual documentation or feature settings. The doctor must review and validate generated text.
Purposes
Data is used to provide and secure the site and application, manage accounts, appointments and records, generate documents, send requested reminders, bill, support users, prevent abuse, correct errors and comply with legal or contractual obligations.
Legal grounds and permissions
Processing may rely on contract performance, pre-contractual steps, consent where required, legitimate interests in security and service improvement, and legal obligations. Practices must verify the authorizations and formalities applicable to health data.
Recipients and providers
Access is limited to authorized practice users, authorized Horizon HealthCare personnel and providers necessary for hosting, communications, support, supervision, payment or dictation. Applicable providers should be disclosed contractually or on request.
International transfers
This page makes no blanket promise regarding the location of every processing operation. Any international transfer must be assessed and supported by the formalities, safeguards and information required under Moroccan law.
Retention
Commercial requests are retained for a reasonable period after the last exchange. Accounts are kept during the relationship and for necessary closure, claim and legal periods. Patient data is retained according to practice instructions and applicable professional rules.
Security
Cabinext implements encryption, access controls, logical separation, backups, logging, updates and incident-management procedures. Practices must also protect passwords, devices, networks and exports.
Individual rights
Under Law 09-08, individuals may request access and correction and may object to certain processing for legitimate reasons. Requests concerning a patient file should generally be sent first to the responsible practice.
Exercising rights
Requests may be sent to contact@cabinext.ma or Horizon HealthCare, 146 rue Maamoura, 14000 Kenitra, Morocco. Proportionate identity verification may be requested.
Security incidents
Suspected compromise should be reported immediately. Horizon HealthCare investigates, contains impact, restores service and informs relevant practices according to applicable obligations and contracts.
Children
Cabinext is not intended for minors to create professional accounts. Medical data about minors may be processed by a practice in the course of care and under the professional’s responsibility.
Marketing
Commercial messages are sent to people who requested information or where outreach is permitted. Messages should provide an easy opt-out mechanism.
Changes
This policy may change to reflect features, providers, legal requirements or security measures. The update date appears at the top.
Contact and complaints
Questions: contact@cabinext.ma or +212 708 034 740. Individuals may also contact the CNDP if they believe their rights have not been respected.