1. Who We Are

Data Controller: Healthclino Limited.

Operating location: Madrid, Spain.

Website: https://www.healthclino.eu.

Email: info@healthclino.com.

For data-protection purposes, HealthClino acts as a controller for personal data processed for the operation of its platform, subject to the specific roles and arrangements applicable to individual healthcare services.

2. What Information We Collect

Depending on how you use HealthClino, we may collect identity and contact information, health information, appointment and consultation information, payment-related information, and technical information.

2.1 Identity and Contact Information

This may include: first and last name; date of birth; gender where relevant; email address; telephone number; postal address; country of residence; and identity or passport information where legally or clinically required.

2.2 Health Information

Because HealthClino provides healthcare services, we may process special-category health information, including: symptoms; reason for consultation; medical history; allergies; current medications; previous diagnoses; treatment information; consultation notes; medical reports; laboratory results; images or documents submitted for clinical assessment; prescriptions; medical certificates; referrals; and other information necessary for healthcare.

Health information is processed only where an applicable legal basis under data-protection law permits such processing.

3. Appointment and Consultation Information

We may process: appointment date and time; selected service; selected clinician; consultation status; communications with support; messages exchanged through the platform; technical information relating to video or telephone consultations; and consultation-related documentation.

Unless specifically stated and lawfully permitted, HealthClino does not treat general technical session metadata as a recording of the consultation itself.

4. Payment Information

Payments may be processed through third-party payment providers such as Stripe.

HealthClino does not intentionally store complete payment-card numbers on its own servers.

We may receive and retain information such as: transaction amount; currency; payment status; payment date; transaction/reference ID; and billing information where required.

Payment providers may process payment information under their own privacy policies.

5. Technical Information

When you use our website or platform, we may automatically collect certain technical information, including: IP address; browser type; device type; operating system; language preferences; approximate location derived from technical information; pages visited; referring pages; date and time of access; security logs; cookie identifiers; and similar technical information.

6. Why We Use Your Information

We may process your information to: provide online medical consultations; schedule and manage appointments; connect patients with healthcare professionals; assess whether a service can be provided remotely; facilitate clinical documentation; facilitate prescriptions where legally and clinically appropriate; provide medical certificates where clinically appropriate; process payments; send booking confirmations and consultation links; communicate with patients about their care; provide customer support; verify identity where required; prevent fraud and misuse; maintain platform security; comply with legal and regulatory obligations; maintain healthcare records; improve our services; analyse website performance where permitted; and send marketing communications where legally permitted and where consent is required.

7. Legal Bases

Depending on the processing activity, the applicable legal basis may include: performance of a contract; compliance with a legal obligation; provision of healthcare or management of healthcare services where permitted by applicable law; explicit consent where required; and legitimate interests, where permitted and appropriately balanced against your rights.

For special-category health information, HealthClino relies on an applicable Article 9 GDPR condition, which may include explicit consent or processing necessary for the provision or management of healthcare by persons subject to professional confidentiality, as applicable to the relevant service.

8. Healthcare Professionals

Your relevant information may be made available to the healthcare professional responsible for your consultation.

Healthcare professionals are expected to maintain professional confidentiality and use patient information only for legitimate healthcare purposes.

9. Service Providers

We may use trusted service providers to operate HealthClino, including providers for: cloud hosting; website infrastructure; payment processing; email delivery; video consultation technology; authentication; security; analytics; customer support; data storage; and technical maintenance.

These providers receive only the information necessary for their respective services, subject to applicable contractual and legal safeguards.

10. Legal and Regulatory Disclosures

We may disclose personal information where necessary to: comply with applicable law; respond to a lawful request from a competent authority; protect patients or other individuals; investigate suspected fraud or abuse; establish, exercise or defend legal claims; or meet healthcare, tax, accounting or regulatory obligations.

11. International Transfers

Some service providers may process personal information outside the European Economic Area.

Where applicable, HealthClino will use appropriate legal safeguards for international transfers, such as adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms.

12. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to legal, healthcare, tax and regulatory requirements.

Clinical documentation may need to be retained for legally required periods even when a patient requests deletion.

Where Spanish healthcare law applies, clinical documentation is subject to statutory retention requirements, including applicable minimum retention periods under Law 41/2002.

After the applicable retention period expires, information may be securely deleted, anonymised or otherwise handled in accordance with applicable law.

13. Your GDPR Rights

Subject to applicable legal limitations, you may have the right to: access your personal data; request correction of inaccurate data; request deletion; request restriction of processing; object to certain processing; request data portability; withdraw consent where processing is based on consent; object to direct marketing; and lodge a complaint with a competent data-protection authority.

Deletion may be restricted where information must legally be retained, particularly healthcare records.

14. How to Exercise Your Rights

To submit a privacy request, contact: info@healthclino.com.

Please provide sufficient information to allow us to identify your request.

For security reasons, we may need to verify your identity before responding.

We generally respond to valid GDPR requests within the applicable statutory period.

15. Security

HealthClino uses appropriate technical and organisational measures designed to protect personal information from: unauthorised access; accidental loss; destruction; alteration; unauthorised disclosure; and other unlawful processing.

Security measures may include access controls, encryption where appropriate, authentication controls, secure infrastructure and confidentiality obligations.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

16. Children

HealthClino services may be subject to age restrictions depending on the specific service and applicable law.

Where healthcare is provided to a minor, the appropriate parent, guardian or legally authorised person may be required to provide consent or participate in the process.

Do not submit a child's health information unless you are legally authorised to do so.

17. Marketing

Where required by law, HealthClino will obtain consent before sending promotional communications.

You can unsubscribe from marketing communications at any time.

Service-related communications, such as appointment confirmations and clinically relevant messages, are not marketing communications.

18. Cookies

HealthClino uses cookies and similar technologies.

Please read our separate Cookie Policy for details about cookie categories, purposes, third-party technologies and how to manage your preferences.

19. Third-Party Websites

HealthClino may contain links to third-party websites or services.

We are not responsible for the privacy practices of third-party websites.

You should review their privacy policies before providing personal information.

20. Changes to this Privacy Policy

We may update this Privacy Policy when our services, technology or legal requirements change.

The latest version will always be published on this page.

21. Contact

HealthClino / Healthclino Limited.

Operating location: Madrid, Spain.

Email: info@healthclino.com.

Website: https://www.healthclino.eu.