Privacy Policy.

Cligo is a platform that helps patients find clinics, book appointments, join walk-in queues and attend video visits, and helps clinics run those services. This policy explains how we handle personal information when you use the Cligo website and apps.

Clinics on Cligo are independent healthcare providers. When a clinic treats you, it is responsible for the care it gives and for the clinical records it keeps about you; Cligo stores and processes those records on the clinic's behalf. The clinic's own privacy notice may also apply.

Account information. Your name, email address, phone number and password. We store passwords only as secure hashes and never in readable form.

Patient profile. Details you choose to add, such as date of birth, gender, emergency contact, allergies, current medications and a profile photo.

Care information. Your appointments, queue tickets, and video-visit sessions, plus what clinic staff record about your care: consultation notes, diagnoses, prescriptions, referrals and medical records. It also includes documents you or a clinic upload.

Clinic and staff information. For clinics: the clinic's name, address, opening hours, services and staff accounts. For doctors: professional details such as specialty and credentials shown on public profiles.

Location. If you allow it, your browser shares your approximate location so we can show clinics near you. We use it for that search and don't keep a location history.

Technical and security information. IP address, browser type, and records of sign-ins and of who viewed or changed sensitive information (audit logs). We use these to keep accounts secure and to investigate misuse.

• To create and secure your account, and to verify your email address.
• To let you find clinics, book appointments, join queues and attend video visits.
• To give the clinics you choose the information they need to care for you.
• To send the notifications you've asked for, such as booking confirmations, queue updates and visit reminders.
• To prevent fraud and abuse, enforce our Terms, and meet legal obligations.
• To understand, in aggregate, how the service is used so we can improve it.

Clinics you use. When you book or join a queue at a clinic, that clinic's staff can see what they need for your visit. Access within a clinic depends on the person's role. For example, a receptionist doesn't see the same clinical detail as your doctor.

Cligo staff. A small number of our administrators can access accounts to provide support, verify clinics and keep the platform safe. Their access to sensitive information is logged.

Service providers. We use trusted companies to run the service: database and cloud hosting, file storage, email, text-message and push-notification delivery, video calls and maps. They process information only on our instructions and only to provide their service.

When the law requires it. We may disclose information if required by law, or to protect someone's life, safety or rights.

We do not sell your personal information, and we do not use your health information for advertising.

Video visits are streamed between you and the clinic through our video provider. Cligo does not record video visits. Your doctor may write notes about the visit, which become part of your clinical record.

We use one essential cookie to keep you signed in. It can't be read by scripts on the page and is sent only to our sign-in service. We don't use advertising or cross-site tracking cookies.

Clinic maps are provided by Google Maps, which may set its own cookies and receive your IP address when a map loads. Google's use of that information is covered by Google's privacy policy.

Information is sent over encrypted connections. Access is limited by role, sensitive actions are recorded in audit logs, sign-in attempts are rate-limited, and our logs exclude passwords, tokens and clinical content. No system is perfectly secure, so please use a strong, unique password and tell us right away if you think your account has been compromised.

We keep account information while your account is open. Clinical records may need to be kept for a period set by healthcare record-keeping laws, even after you close your account; the clinic that created them decides this. Audit logs are kept for security and legal purposes. When information is no longer needed, we delete or anonymise it.

Depending on where you live, you may have the right to:

• see the personal information we hold about you and get a copy of it;
• correct information that is wrong or incomplete;
• ask us to delete your account and information, subject to records we or a clinic must keep by law;
• object to or restrict certain uses of your information.

You can edit your profile and notification preferences in your account at any time. For anything else, email [email protected]. To change a clinical record, contact the clinic that created it. We'll also help you reach them.

You can add your children and your parents to your account as family profiles, and book visits, join queues and keep health details for them. A family profile has no login of its own: it is managed from your account, and the information you add about that person is processed as described in this policy.

When you add a child, you confirm that you are their parent or legal guardian. When you add a parent, you confirm that they have agreed to you managing their appointments and health records. We record the date of that confirmation.

Clinics treating a family member see who manages their profile and how to reach you. Notifications about a family member's care come to you.

You can hand a family profile over to the person it belongs to at any time. They set their own password, their visits, records and documents go with them, and from then on you can no longer see or manage them. You can also remove a family profile; clinics keep their records of past care, as they do for any patient.

You must be 18 or older to create an account. A parent or guardian may use their account to arrange care for a child, and is responsible for the information they provide about that child.

Our service providers may process information in countries other than yours. Where that happens, we take steps to ensure the information keeps a comparable level of protection.

We may update this policy as Cligo changes. We'll change the date at the top of this page and, if the changes are significant, tell you by email or in the app before they take effect.