Privacy Policy

Last updated: 24 January 2026

1. Introduction

This Privacy Policy explains how the Consultation Form ("we", "us", "our") collects, uses, and protects personal data. We are committed to protecting your privacy and handling your data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. Data Controller

The Platform acts as a data processor for Clinics who use our service. Each Clinic is the data controller for the patient consultation data they collect through the Platform. For queries about patient data, please contact the relevant Clinic directly.

3. Data We Collect

Clinic Account Data

When you register as a Clinic, we collect:

  • Clinic name and contact details
  • Administrator username and password (encrypted)
  • Email address for notifications
  • Payment and billing information (processed by Stripe)

Patient Consultation Data

Patient data is collected by Clinics through consultation forms. This data is stored securely and is accessible only to the Clinic that collected it. We do not access or use patient data except as necessary to provide the Platform service.

Technical Data

We automatically collect technical information including IP addresses, browser type, and usage statistics to maintain and improve the Platform.

4. How We Use Your Data

We use collected data to:

  • Provide and maintain the Platform service
  • Process payments and manage subscriptions
  • Send important service notifications
  • Respond to support requests
  • Improve the Platform's functionality and security
  • Comply with legal obligations

5. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encrypted data transmission (HTTPS)
  • Secure password hashing
  • Regular security audits
  • Access controls and authentication
  • Secure database storage

6. Data Sharing

We do not sell or share your data with third parties except:

  • Payment processing through Stripe (payment data only)
  • When required by law or legal process
  • To protect our rights or prevent harm

7. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Data portability
  • Withdraw consent where applicable

To exercise these rights, please contact us through our contact page.

8. Data Retention

We retain Clinic account data for as long as your account is active. Patient consultation data is retained according to the Clinic's requirements and applicable legal obligations. Upon account termination, data may be deleted after a reasonable retention period.

9. Cookies

We use session cookies to maintain your login state. These cookies are essential for the Platform to function and do not track your activity across other websites.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Platform. The "Last updated" date at the top indicates when changes were made.

11. Contact

For questions about this Privacy Policy or to exercise your data protection rights, please contact us through our contact page.