Privacy Policy

ClinicDigital.co ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your data when you visit our website, engage our services, or interact with us in any way.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of our services immediately.

We may collect the following categories of information:

• Personal Identifiers: Name, email address, phone number, business name, and job title provided through contact forms, consultation bookings, or direct communication.
• Business Information: Practice type, specialty, number of locations, current technology stack, and operational details shared during consultations or onboarding.
• Technical Data: IP address, browser type and version, operating system, device identifiers, referring URLs, pages visited, time spent on pages, and other diagnostic data collected automatically.
• Usage Data: Interaction patterns with our website including clicks, scroll depth, form interactions, and navigation paths.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance your experience, analyze traffic, and deliver targeted content.

We use collected information for the following purposes:

• To provide, operate, and maintain our website and services.
• To process consultation requests and respond to inquiries.
• To deliver AI-powered marketing automation, client management, and integration services through the GoHighLevel platform on your behalf.
• To personalize your experience and improve our offerings.
• To send administrative communications, service updates, and marketing materials (with your consent).
• To detect, prevent, and address technical issues, fraud, or security threats.
• To comply with legal obligations and enforce our agreements.

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Consent: Where you have given explicit consent for us to process your personal data for specific purposes.
• Contractual Necessity: Where processing is necessary for the performance of a contract with you or to take pre-contractual steps at your request.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these are not overridden by your rights and freedoms.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.

If you are a resident of the EEA, you have the following data protection rights:

• The right to access, update, or delete the information we hold about you.
• The right to rectification if your information is inaccurate or incomplete.
• The right to object to our processing of your personal data.
• The right to request restriction of processing of your personal data.
• The right to data portability in a structured, machine-readable format.
• The right to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@clinicdigital.co. We will respond to your request within 30 days.

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

• The right to know what personal information we collect, use, disclose, and sell.
• The right to request deletion of your personal information.
• The right to opt out of the sale of your personal information. We do not sell personal information.
• The right to non-discrimination for exercising your CCPA rights.

To submit a verifiable consumer request, contact us at privacy@clinicdigital.co.

We do not sell your personal information. We may share your data with the following categories of third parties:

• Service Providers: Trusted third-party vendors who assist us in operating our website, conducting business, or servicing you (e.g., GoHighLevel, hosting providers, analytics services).
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your data may be transferred as part of that transaction.

We implement industry-standard technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols.
• Encryption of sensitive data at rest.
• Regular security assessments and vulnerability testing.
• Access controls limited to authorized personnel on a need-to-know basis.
• Secure development practices and regular software updates.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When your data is no longer needed, we will securely delete or anonymize it.

Our website uses cookies and similar tracking technologies to collect and use personal information about you. You can control cookies through your browser settings and other tools. Disabling certain cookies may limit your ability to use some features of our website.

We use the following types of cookies:

• Essential Cookies: Required for the website to function and cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously.
• Marketing Cookies: Used to track visitors across websites to display relevant advertisements.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party website you visit.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly.

We reserve the right to update or modify this Privacy Policy at any time. Changes will be effective immediately upon posting to this page with an updated "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our services after modifications constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: