Privacy Policy

1. Introduction

ClinicPro ("we", "our", or "us") operates the ClinicPro clinic management platform available at clinicprocare.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the platform.

2. Information We Collect

We collect information you provide directly to us, including:

• Account registration data (name, email address, password hash)
• Clinic and practice information you enter into the platform
• Patient records and appointment data entered by authorised clinic staff
• Payment and billing information processed through our payment partners
• Communications you send to our support team

We also collect certain information automatically when you use the platform, including IP address, browser type, device identifiers, pages visited, and session duration.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the ClinicPro platform
• Process transactions and send related information
• Send administrative messages, security alerts, and support responses
• Monitor and analyse usage patterns to improve the platform
• Detect, investigate, and prevent fraudulent or unauthorised activity
• Comply with legal obligations

4. Data Isolation and Multi-Tenancy

ClinicPro is a multi-tenant platform. Each clinic's data is strictly isolated at the database level using tenant identifiers derived from authenticated sessions. No clinic can access another clinic's data. Platform administrators have access only to aggregate operational metrics and are prohibited from accessing individual patient records.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us. Certain data may be retained for longer periods where required by applicable law or for legitimate business purposes such as fraud prevention.

6. Sharing of Information

We do not sell your personal information. We may share information with:

• Service providers who assist in operating the platform (hosting, payment processing, email delivery) under strict data processing agreements
• Law enforcement or regulators when required by applicable law or valid legal process
• Successor entities in the event of a merger, acquisition, or sale of assets, with prior notice to affected users

7. Security

We implement industry-standard security measures including HMAC-SHA256 JWT authentication, bcrypt password hashing, HTTPS with HSTS, CSRF protection, rate limiting, and role-based access controls. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Cookies

We use strictly necessary cookies to maintain your authenticated session (HttpOnly, SameSite=Strict). We also use a CSRF cookie for request validation. We do not use third-party tracking or advertising cookies without your explicit consent. You can manage cookie preferences through the cookie consent banner displayed on your first visit.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict certain processing activities
• Data portability (receive your data in a structured, machine-readable format)

To exercise any of these rights, please contact us at the address below.

10. Children's Privacy

The ClinicPro platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the platform after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: