ClinicFlow · cf-consent-2026-10
Privacy notice
Last updated 27 October 2026.
This notice describes what the booking site stores when you request a visit. The clinic is responsible for your medical record. ClinicFlow stores and sends data only so the clinic can run the appointment.
Information we store
- Name, mobile number, and email if you enter one.
- The doctor, date, and time you request, and whether the visit is in person or online.
- The time you accepted the patient consent, and which version you accepted.
- Payment status for the visit. Card numbers, UPI PIN, and net-banking passwords are not stored here.
- A prescription file, if the clinic uploads one after the visit. That file is private to the clinic.
Why it is used
To hold the slot, confirm or release it, send payment instructions, remind you of the visit, share a video link when there is one, and, where the clinic has switched it on, send one review invitation or a later follow-up. A separate patient-list consent is required before the clinic sends a general health update. Booking this visit does not sign you up for that.
Who receives it
- Staff and the doctor at the clinic you booked.
- The clinic's WhatsApp provider, when the clinic has connected its own WhatsApp account, to deliver the messages you agreed to.
- The clinic's payment provider, when you pay online, to collect the fee and confirm the slot.
- The clinic's Google account, when a video visit is created, to place the meeting on the calendar.
- ClinicFlow's database host, which keeps the record for the clinic.
How long, and how to correct it
The clinic keeps the appointment record for its scheduling and for the period its own clinical rules require. To correct your name, mobile number, or email, contact the clinic on the phone number published on its website. Asking the clinic to stop messages does not erase a visit that already happened.