Draft for legal review. The legal entity, governing law, privacy contact, retention periods, and rights-request process are still to be confirmed.
1. Information we handle
We handle information needed to operate a public osteopathy directory and provider workspace, including User identity details, public profile content, booking information, messages, uploads, analytics, and technical information such as theme preferences and cookies.
2. Public profiles
Public profiles may include a provider's name, credentials, description, practice locations, offerings, contact details, testimonials, articles, FAQs, events, and social links. Providers choose what they publish, and Clients should avoid sharing sensitive information in public areas.
3. Booking requests and Client profiles
Booking requests can include a Client's name, phone, optional email, requested offering, practice location, preferred time, and notes. A service provider receives and manages the resulting Appointment and its private Client profile for that practice.
4. Provider workspace data
Provider onboarding and workspace features may process profile details, credentials, availability, messages, uploads, notifications, and analytics so service providers can manage their practice and respond to Clients.
5. Retention, rights, and contact
The final policy should state retention, deletion, access, correction, export, objection, security, cookie, international-transfer, and privacy-contact details after the legal owner confirms them. The current implementation does not yet record policy-version consent history.