Privacy Policy
TODO: Final copy must be reviewed by counsel before launch. This is placeholder text only.
Data we collect
When you book an appointment we collect your name, email, phone, the time of the visit, and the service you booked. This may be considered Article 9 special-category data under GDPR because it relates to healthcare.
Legal basis
Explicit consent (Art. 9(2)(a)) and contract performance (Art. 6(1)(b)).
Sub-processors
Firebase (Google) for hosting, Brevo for email, Vercel for the web frontend. DPAs to be signed before public launch.
Your rights
Access, rectification, erasure, and portability. Contact your clinic to exercise them.