This is a template — please have a lawyer review before production use.
1. Introduction
This policy explains what data OCA-Clinic collects, how we use it, and what rights you have. It applies to clinics using our service and their patients whose data is processed through it.
2. Data we collect
Account data (name, email, phone, clinic), patient and clinical data entered by clinic staff, billing data (invoices, payments), and technical data (IP, device, logs).
3. How we use data
To deliver the service, process e-invoices with tax authorities where applicable, send operational communications, provide support, and improve the product.
4. Sharing
We do not sell your data. We share data with sub-processors (hosting, email delivery, tax authority integrations) strictly to provide the service, and when required by law.
5. Cookies and analytics
Necessary cookies maintain your session and preferences. Marketing analytics and session replay are disabled on this clinical service. Optional application error reporting retains a limited operational envelope; deployment owners must approve the vendor, region and retention before enabling it.
6. Retention
We keep data while your account is active and for a limited period after cancellation, then delete or anonymize it unless longer retention is required by law.
7. Security
Security controls depend on the deployment. Ask your clinic for its approved storage, backup, access and privacy arrangements.
8. Your rights
You can access, export, correct, or request deletion of your data. Contact privacy@oca-clinic.com to exercise these rights.
9. Contact
Questions about privacy? Email privacy@oca-clinic.com.