Privacy Policy

Account & Identity Information

When you or your clinic administrator creates an account, we collect your name, email address, role, and authentication credentials managed through our secure identity provider.

Patient Health Information

Hospinn stores clinical records, appointment histories, treatment plans, billing data, and documents uploaded by authorised clinic staff. This data is subject to applicable healthcare privacy regulations.

Usage & Technical Data

We automatically collect log data including IP addresses, browser type, pages accessed, timestamps, and error reports to operate, secure, and improve the platform.

Service Delivery

We use your data to provide, maintain, and improve the Hospinn platform — including managing appointments, generating reports, processing billing, and enabling communication between staff and patients.

Security & Fraud Prevention

Usage data and access logs are used to detect and prevent unauthorised access, abuse, and security threats to the platform and the data it holds.

Communications

We may send service-related notifications such as appointment reminders, subscription updates, or critical security alerts. We do not send unsolicited marketing without your explicit consent.

No Sale of Personal Data

We do not sell, rent, or trade your personal or patient data to any third party under any circumstances.

Service Providers

We share data only with trusted sub-processors who help us operate the platform — such as cloud hosting, authentication, and payment processing — under strict data processing agreements.

Legal Obligations

We may disclose information if required to do so by law, court order, or a valid regulatory request, and will notify you where legally permissible.

Encryption

All data is encrypted in transit using TLS 1.2+ and at rest using industry-standard encryption. Backups are also encrypted.

Access Controls

Access to patient data is governed by role-based permissions. Only authorised staff within a clinic can access that clinic's records. Flizitt personnel access production data only under strict access policies.

Incident Response

In the event of a data breach affecting your information, we will notify affected parties in accordance with applicable law and take immediate steps to contain and remediate the incident.

Access & Correction

Authorised users may request a copy of their personal data or request corrections to inaccurate information by contacting us at the address below.

Data Deletion

Clinic administrators may request deletion of their account and associated data, subject to legal retention requirements that may apply to healthcare records.

Data Portability

Upon request, we can provide an export of your clinic's data in a machine-readable format to facilitate migration to another system.

Essential Cookies

We use session cookies strictly necessary for authentication and security. These cannot be disabled without breaking core platform functionality.

Preference Storage

User interface preferences such as theme (light/dark) and sidebar state are stored in browser local storage and never transmitted to our servers.

Privacy Enquiries

For any questions, concerns, or requests regarding this Privacy Policy or the handling of your data, please contact us at support@flizitt.com. We aim to respond within 5 business days.