Data controller
The legal entity providing this service, its address and contact details appear in this section.
The final text of this section must be prepared by a qualified legal adviser and verified against the applicable regulation.
Categories of data processed
Account data: name, email address, password hash, language preference.
Workspace data: clinic name, public website address, service and brand detail, sources added by the user.
Usage data: session records, audit runs, credit movements, security logs.
Clinesta does not process patient health data. The product prevents patient data from being entered through form design, upload rules and content detection.
The final text of this section must be prepared by a qualified legal adviser and verified against the applicable regulation.
Purposes and legal bases
The purpose and the legal basis for each category of data are stated separately in this section.
The final text of this section must be prepared by a qualified legal adviser and verified against the applicable regulation.
Recipients and international transfers
Recipient groups and transfer conditions, including hosting, email delivery, payment and AI providers, are listed here.
The final text of this section must be prepared by a qualified legal adviser and verified against the applicable regulation.
Retention periods
The retention period and deletion method for each category are defined here.
The final text of this section must be prepared by a qualified legal adviser and verified against the applicable regulation.
Your rights
How to make access, rectification, erasure, objection and portability requests is explained here.
The final text of this section must be prepared by a qualified legal adviser and verified against the applicable regulation.
This section must be completed by the clinic owner and their legal adviser before launch.