Privacy Policy

Effective date: Sr 2025
Website: clinifo.com
Company: Clinifo
Contact: [email protected]

1) Who we are

Clinifo (“Clinifo,” “we,” “us,” or “our”) provides marketing and automation services for clinics. This Policy explains how we collect, use, share, and protect personal information when you visit clinifo.com, receive our communications, or use our services.

2) Scope & roles

We may act as:

Controller (or “business”) for data we collect about website visitors, leads, and clients.

Processor/Service Provider for data we handle on behalf of clinic clients (e.g., leads, messages, bookings).

3) Information we collect

Contact & account data: name, email, phone, clinic name, role, login details.

Marketing & communications: form submissions, bookings, support requests, preferences, survey responses.

Usage & device data: IP address, browser/device info, pages viewed, referrals, UTM tags, interactions (via cookies/pixels).

Client content (on your behalf): messages, leads, appointments, call logs/recordings (if enabled), review requests.

Billing: billing contact, subscription plan. Payment card data is processed by our payment processor; we do not store full card numbers.

4) How we use information

Provide, maintain, and improve websites, funnels, automations, and support.

Communicate with you (onboarding, service notices, support, and—where permitted—marketing).

Measure performance and ROI; prevent fraud/abuse; ensure security.

Comply with legal obligations and enforce agreements.
Legal bases (GDPR/UK GDPR): contract, legitimate interests (e.g., service improvement/security), consent (e.g., certain marketing cookies), and legal obligation.

5) Cookies and tracking

We use cookies and similar tech (e.g., analytics, ad pixels) to understand usage and improve campaigns. You can control cookies in your browser and, where required, via our cookie banner.

6) Sharing and disclosures

Vendors/Processors: hosting, CRM/automation, analytics, payments, communications, conferencing, and ad platforms. Vendors are bound by appropriate safeguards and our instructions.

Clients: when services involve processing for your clinic, relevant data is shared with you (the client).

Legal/Safety: to comply with law, protect rights, security, and prevent abuse.

Business transfers: in connection with a merger, sale, or reorganization.

7) International transfers

Your information may be processed outside your country. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses).

8) Data retention

We retain information as needed to provide services, meet legal obligations, resolve disputes, and enforce agreements. You may request deletion/export subject to applicable law and your plan.

9) Security

We use commercially reasonable administrative, technical, and physical safeguards. However, no method of transmission or storage is 100% secure.

10) Your rights

GDPR/UK GDPR: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Request via [email protected]. You may also complain to your supervisory authority.
California (CCPA/CPRA): right to know, delete, correct, and opt out of “sale”/“sharing” of personal information. We do not knowingly “sell” personal information. To exercise rights, contact [email protected]. We will not discriminate for exercising rights.
Email/SMS marketing: you may opt out at any time using unsubscribe links or by contacting us.

11) Children’s privacy

Our website/services are not directed to children under 16, and we do not knowingly collect their personal information.

12) Changes to this Policy

We may update this Policy; the new version will include an updated effective date. If changes are material, we’ll provide additional notice where appropriate.

13) Contact us

Email: [email protected]