Privacy policy
TEMPLATE NOTICE (delete this box before launch). This is a general privacy policy template, not legal advice. Replace the bracketed items, have it reviewed by a qualified professional for your country (for example GDPR, UK GDPR, HIPAA or local health-data law), and translate it into every language you enable. The wording in square brackets is a placeholder.
Last updated: [DATE]
1. Who we are
[CLINIC LEGAL NAME], [ADDRESS] ("we", "us") operates this website and the online appointment service. You can contact us at [PRIVACY CONTACT EMAIL].
2. What we collect when you book
- Required: your full name and phone number.
- Optional: your email address and any note you choose to add.
- Appointment data: the service, date and time you choose, and a booking reference.
We do not require an account or password to book. Please do not put detailed medical information in the notes field.
3. Why we use it
To arrange, confirm and manage your appointment, to contact you about it, and to run the clinic safely. If you give an email address we use it to send a booking confirmation. We do not sell your data and do not use it for advertising.
4. Who can see it
Only authorised clinic staff can see appointment details. Other website visitors can only see that a time is "booked"; they never see names, phone numbers or emails.
5. Service providers
Our website is hosted by [HOSTING PROVIDER]. If email confirmations are enabled, your email address and booking details are passed to our email provider [EMAIL PROVIDER, e.g. your SMTP host or Resend] solely to deliver the message. If you load the interactive map, your browser connects to OpenStreetMap (openstreetmap.org), which may receive your IP address.
6. How long we keep it
Appointment records are kept for [RETENTION PERIOD, e.g. 24 months] and then permanently erased. [Adjust to your legal record-keeping duties.]
7. Your rights
Depending on where you live you may have the right to access, correct, delete, restrict or object to the use of your data, and to complain to your data protection authority. Contact us at the address above to exercise these rights.
8. Cookies and storage
The public website does not use tracking or advertising cookies. It may store your language choice in your browser. Staff members who sign in to the admin area receive a strictly necessary session cookie.
9. Security
We protect data with access controls, encrypted connections and limited retention. No online service can be guaranteed to be 100% secure.
10. Changes
We may update this policy and will change the date above when we do.