Privacy Policy

2. Personal Data We Collect

2.1 Via this marketing website

• Name, email address, phone number, and business name submitted via our enquiry form;
• IP address and browser user-agent (collected automatically for spam detection);
• Cookies necessary for form submission and security.

2.2 Via the platform (Client accounts)

When we set up a Client account, we collect the clinic name, administrator name, and email address. Within the platform, Clients collect their own patients' data. We act as a data processor for that data; the Client is the data controller.

3. How We Use Your Data

• Enquiry form submissions — to respond to your enquiry and, if relevant, set up a trial account;
• Client account data — to provide, maintain, and improve the Service;
• IP address / user-agent — to detect and prevent spam and abuse (we do not use this for advertising);
• Communication — to send service-related emails (onboarding, notifications, billing).

4. Legal Basis for Processing

• Enquiry form — legitimate interests (responding to a business enquiry);
• Client accounts — performance of a contract;
• Security / spam signals — legitimate interests (protecting the platform from abuse).

5. Data Retention

• Marketing enquiries are retained for 2 years, or until you ask us to delete them;
• Client account data is retained for the duration of the subscription and deleted within 90 days of cancellation, unless we are required by law to retain it longer;
• Platform activity logs and audit records are retained for 12 months.

6. Data Sharing

We do not sell your personal data. We may share data with:

• Email service providers — to send transactional emails. They process data only on our instruction;
• Legal authorities — where required by law.

7. Your Rights

• Access your personal data;
• Correct inaccurate data;
• Request deletion ("right to be forgotten");
• Object to processing or request restriction;
• Data portability (where applicable);

To exercise these rights, contact us at faizan@jfali.com. We will respond within 30 days.

8. Security

We implement technical and organisational measures to protect your data, including encrypted connections (HTTPS), encrypted session storage, rate limiting on form submissions, and access controls limiting who can view submitted data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify Clients via email. The "last updated" date at the top of this page will always reflect the most recent revision.