Draft — for lawyer review before launch
Privacy Policy
What we collect
When you book an appointment, we collect your name, phone number, and email address (if provided), along with your appointment date and time. This information is used only to manage your booking.
Why we collect it
We use your information to confirm, remind you of, and allow you to manage your appointment. We do not use it for marketing and do not sell or share it with third parties, except service providers that help us send messages (see below).
Who can access it
Only clinic staff, through a password-protected admin dashboard. Confirmation and reminder messages are sent through Resend (email) and/or Twilio (SMS/WhatsApp), which process your contact details solely to deliver those messages.
How long we keep it
Booking records are retained for [X months/years — to be decided] after your appointment date, after which they are deleted or anonymized.
Your rights
Under Hong Kong's Personal Data (Privacy) Ordinance, you may request access to, or correction of, the personal data we hold about you by contacting the clinic directly.