Privacy Policy

1. Data Collection

We collect personal information (such as names and phone numbers) and medical information (such as health history and diagnostic requests) necessary to facilitate professional healthcare services and clinical appointments.

2. Data Security & Service Providers

• Access control: Patient records and portal requests are confidential. Appointment requests are accessible only to approved staff; medical registration records are not available to public visitors or ordinary signed-in users.
• Credentials: Staff account passwords are stored as secure hashes, not readable passwords. Staff should use strong passwords and keep their sign-in details private.
• Service providers: Lovable Cloud supports website hosting, data storage, and staff sign-in. When staff request an AI-assisted confirmation draft, appointment information is processed by the connected AI service to prepare the message for staff review. Staff can open a prefilled WhatsApp message or call a patient; messages are not sent automatically.

3. Third-Party Sharing

We do not sell patient information. Information may be processed by the service providers described above to operate the website and support appointment communication. Other disclosures are made with your consent, where required by law, or to protect public health and human life. If you choose WhatsApp, your communication is also subject to WhatsApp’s privacy practices.