Privacy Policy
Welcome to Nxt Clinic
At Nxt Clinic, we are committed to protecting the privacy of our users and handling their information and data responsibly and securely.
This Privacy Policy explains what types of information we may collect when you use the Nxt Clinic Platform, how we use, protect, and share that information, and certain rights and choices available to you regarding your information.
By using Nxt Clinic, you acknowledge that you have read and understood this Privacy Policy.
## 1. Scope of This Privacy Policy
This Privacy Policy applies to information collected or processed through:
* The Nxt Clinic website.
* The Nxt Clinic Platform, applications, and interfaces.
* Clinic management services.
* Accounts used to access the Platform.
* Services and features associated with the Platform.
Nxt Clinic may contain data entered by clinics, physicians, staff members, and other users, including information relating to patients.
## 2. Information We Collect
We may collect different types of information depending on how you use the Platform and the Services you access.
### 2.1 Account Information
Account information may include:
* Name.
* Phone number.
* Email address, where provided.
* Login credentials.
* Account and permission information.
* User role within a Clinic.
* Information about the Clinic or organization associated with the account.
We do not store passwords in a form that allows us to read them as plain text. Passwords are handled using appropriate security mechanisms.
### 2.2 Clinic and Physician Information
Users may provide information relating to a Clinic or physician, including:
* Clinic name.
* Physician name.
* Medical specialty.
* Contact information.
* Clinic address.
* Working hours.
* Services provided.
* Information required to manage the account and subscription.
### 2.3 Staff and User Information
When a Clinic adds users or staff members to the Platform, we may process information necessary to create their accounts, manage access, and provide the Services.
The Clinic is responsible for ensuring that it has an appropriate legal basis to provide employee or staff information to the Platform.
## 3. Patient and Medical Information
Nxt Clinic may allow Clinics and physicians to store and manage patient information through the Platform.
Depending on what a Clinic or physician enters into the Platform, this information may include:
* Patient name.
* Phone number and contact information.
* Basic identification information.
* Appointment information.
* Medical records.
* Medical notes.
* Diagnoses or treatment-related information.
* Prescriptions or information related to medical care.
* Documents or files uploaded to the Platform.
* Other information entered by the Clinic in connection with providing healthcare services.
### Nxt Clinic's Role in Patient Data
Nxt Clinic provides the software infrastructure and tools that help Clinics manage this information.
Nxt Clinic does not generally determine the medical content entered by a Clinic or the specific medical purpose for which that information is used.
The Clinic and physician, as applicable and subject to applicable law, are responsible for:
* Ensuring that the collection of patient information is lawful.
* Obtaining required consents or authorizations where applicable.
* Ensuring the accuracy of the information.
* Using the information for lawful purposes.
* Determining who is authorized to access patient information.
* Complying with applicable privacy, data protection, and healthcare laws and regulations.
## 4. Information Collected Automatically
When you use the Platform, certain technical information may be collected automatically, including:
* IP address.
* Browser type.
* Device type.
* Operating system.
* Session information.
* Login and logout times.
* Technical information related to system performance and security.
* Error and event logs.
This information is primarily used to operate, maintain, improve, and secure the Platform and to detect unauthorized or abusive activity.
## 5. How We Use Information
We may use the information we collect for the following purposes:
* Creating and managing user accounts.
* Providing and operating Nxt Clinic Services.
* Managing Clinics, users, and permissions.
* Providing patient, appointment, and medical-record management features.
* Processing subscriptions and payments.
* Sending service-related notifications and messages.
* Communicating with users regarding their accounts or Services.
* Providing technical support.
* Improving Platform performance and developing new features.
* Detecting and preventing fraud and misuse.
* Protecting the security of the Platform and its infrastructure.
* Investigating technical issues and security incidents.
* Complying with legal and regulatory requirements.
* Enforcing or protecting our legal rights and obligations.
## 6. Legal Bases for Processing
Where required by applicable law, we process personal information based on an appropriate legal basis, which may include:
* Performing a contract or providing Services requested by the User.
* User consent where consent is required.
* Compliance with legal obligations.
* Protecting the security of the Platform and preventing misuse.
* Legitimate interests, where permitted by applicable law.
* Any other lawful basis permitted under applicable law.
## 7. How We Share Information
We do not sell users' personal information.
We may share or provide access to certain information in the following circumstances:
### 7.1 At the Direction of the User or Clinic
Information may be processed or made available to authorized users within a Clinic according to the permissions established by the Clinic.
### 7.2 Service Providers
We may rely on third-party companies and service providers that help us operate the Platform, including:
* Hosting and infrastructure providers.
* Database services.
* Messaging and notification services.
* Email service providers.
* Payment providers.
* Security and monitoring services.
* Other technical service providers necessary to operate the Platform.
These providers may process information only to the extent necessary to provide the applicable services and subject to the relevant contractual and legal requirements.
### 7.3 Legal Requirements
We may disclose information when required by law, court order, or valid legal request, or when disclosure is reasonably necessary to protect our rights, the rights of our users, or the security of the Platform.
### 7.4 Business Transactions
If Nxt Clinic is involved in a reorganization, merger, acquisition, sale of assets, or similar business transaction, certain information may be transferred as part of that transaction, subject to applicable legal requirements.
## 8. WhatsApp and External Communication Services
Nxt Clinic may use external communication or messaging services to provide certain communication and notification features.
When these features are used, certain information necessary to send messages or process communication requests may be processed, such as phone numbers, message content, and technical information associated with the request.
Processing performed through third-party service providers may also be subject to their own privacy policies and terms, depending on the service being used.
## 9. Payments and Subscriptions
When you use Paid Services, information relating to your subscription and payment may be processed.
This information may include:
* Plan type.
* Subscription status.
* Subscription start and end dates.
* Billing information.
* Information relating to payment transactions.
Payments may be processed through third-party payment providers. Such providers may collect and process payment information in accordance with their own privacy policies and terms.
Nxt Clinic does not need to store complete payment card information when the payment is processed entirely through an external payment provider.
## 10. Cookies and Tracking Technologies
Nxt Clinic may use cookies and similar technologies to operate the Platform, improve the user experience, and enhance security.
Cookies may be used to:
* Maintain login sessions.
* Remember certain user settings.
* Protect accounts and sessions.
* Improve Platform performance.
* Understand how certain parts of the Platform are used.
* Detect unusual activity or attempts to misuse the Platform.
You may control certain types of cookies through your browser settings. However, disabling necessary cookies may affect some Platform functionality.
## 11. Information Security
We implement reasonable technical and organizational measures designed to protect information against:
* Unauthorized access.
* Unlawful use.
* Unauthorized modification.
* Unauthorized disclosure.
* Loss or damage.
Security measures may include access controls, permission management, secure communications, and other safeguards appropriate to the nature of the Services.
However, no method of transmitting or storing information over the Internet can be guaranteed to be completely secure. Therefore, we cannot guarantee that information will be protected against every possible security risk.
## 12. Data Retention
We retain personal information and data for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, or protect our rights and legitimate interests.
Retention periods may vary depending on:
* The type of information.
* The nature of the Service.
* Account status.
* Legal requirements.
* Backup requirements.
* The need to resolve disputes or investigate security incidents.
When there is no longer a legitimate need to retain information, it may be deleted, anonymized, or otherwise disposed of using appropriate procedures, subject to applicable laws and requirements.
## 13. Account and Data Deletion
Users may be able to request deletion of their account or certain information associated with it, depending on the options made available by Nxt Clinic.
Complete or immediate deletion may not always be possible, including where certain information is:
* Required by law.
* Necessary to fulfill legal or financial obligations.
* Required to resolve a dispute or protect legal rights.
* Stored in backups that require a reasonable period to be replaced or deleted.
When dealing with patient information, the Clinic or entity that originally collected the information may be responsible for determining when and how such information should be deleted, subject to applicable law.
## 14. User Rights
Depending on applicable law, users may have rights regarding their personal information, which may include:
* The right to know what information is being processed.
* The right to request access to personal information.
* The right to request correction of inaccurate information.
* The right to request deletion where permitted by law.
* The right to object to certain processing activities.
* The right to request restriction of processing in certain circumstances.
* The right to withdraw consent where processing is based on consent.
* The right to request a copy of certain information where required by law.
We may require verification of identity before processing requests relating to personal information.
Certain rights may be limited or unavailable in specific circumstances as permitted or required by applicable law.
## 15. Patient Data Access Requests
When patient information is stored within a Clinic or physician account, the Clinic or physician may be the party primarily responsible for managing the relationship with the patient regarding that information.
If you are a patient and wish to access, correct, or request deletion of your medical information, you may need to contact the Clinic or physician that collected or entered the information.
Nxt Clinic may assist with data-related requests according to its role, legal obligations, and applicable agreements.
## 16. Children's Information
Nxt Clinic is not directly intended for use by children.
If information relating to a child is collected through a Clinic's use of the Platform, the Clinic or entity collecting the information is responsible for ensuring that an appropriate legal basis or parental or guardian consent exists where required by applicable law.
## 17. Data Transfers and Storage
Information may be stored or processed through service providers or infrastructure located in countries or regions different from the country in which the User is located.
Where applicable, we take appropriate measures required by law regarding the transfer and protection of personal information.
## 18. No Sale of Personal Information
Nxt Clinic does not sell users' or patients' personal information to third parties for commercial purposes.
Information may be processed by service providers necessary to operate the Platform and provide the Services, as described in this Privacy Policy.
## 19. Communications and Notifications
We may use user contact information to send:
* Account-related notifications.
* Security-related messages.
* Subscription and payment notifications.
* Important Service updates.
* Technical support communications.
* Information necessary to operate the Services.
Marketing communications may be sent only where permitted by applicable law or where the required consent has been obtained.
## 20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to Nxt Clinic Services, legal requirements, or our data-processing practices.
When material changes are made, we may notify Users through the Platform, email, or other appropriate communication methods.
The date of the latest update will be indicated in the updated version of this Privacy Policy.
We encourage Users to review this Privacy Policy periodically to remain informed about how their information is handled.
## 21. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the way we handle personal information, you may contact us through the official contact methods provided by Nxt Clinic.
At Nxt Clinic, we are committed to protecting the privacy of our users and handling their information and data responsibly and securely.
This Privacy Policy explains what types of information we may collect when you use the Nxt Clinic Platform, how we use, protect, and share that information, and certain rights and choices available to you regarding your information.
By using Nxt Clinic, you acknowledge that you have read and understood this Privacy Policy.
## 1. Scope of This Privacy Policy
This Privacy Policy applies to information collected or processed through:
* The Nxt Clinic website.
* The Nxt Clinic Platform, applications, and interfaces.
* Clinic management services.
* Accounts used to access the Platform.
* Services and features associated with the Platform.
Nxt Clinic may contain data entered by clinics, physicians, staff members, and other users, including information relating to patients.
## 2. Information We Collect
We may collect different types of information depending on how you use the Platform and the Services you access.
### 2.1 Account Information
Account information may include:
* Name.
* Phone number.
* Email address, where provided.
* Login credentials.
* Account and permission information.
* User role within a Clinic.
* Information about the Clinic or organization associated with the account.
We do not store passwords in a form that allows us to read them as plain text. Passwords are handled using appropriate security mechanisms.
### 2.2 Clinic and Physician Information
Users may provide information relating to a Clinic or physician, including:
* Clinic name.
* Physician name.
* Medical specialty.
* Contact information.
* Clinic address.
* Working hours.
* Services provided.
* Information required to manage the account and subscription.
### 2.3 Staff and User Information
When a Clinic adds users or staff members to the Platform, we may process information necessary to create their accounts, manage access, and provide the Services.
The Clinic is responsible for ensuring that it has an appropriate legal basis to provide employee or staff information to the Platform.
## 3. Patient and Medical Information
Nxt Clinic may allow Clinics and physicians to store and manage patient information through the Platform.
Depending on what a Clinic or physician enters into the Platform, this information may include:
* Patient name.
* Phone number and contact information.
* Basic identification information.
* Appointment information.
* Medical records.
* Medical notes.
* Diagnoses or treatment-related information.
* Prescriptions or information related to medical care.
* Documents or files uploaded to the Platform.
* Other information entered by the Clinic in connection with providing healthcare services.
### Nxt Clinic's Role in Patient Data
Nxt Clinic provides the software infrastructure and tools that help Clinics manage this information.
Nxt Clinic does not generally determine the medical content entered by a Clinic or the specific medical purpose for which that information is used.
The Clinic and physician, as applicable and subject to applicable law, are responsible for:
* Ensuring that the collection of patient information is lawful.
* Obtaining required consents or authorizations where applicable.
* Ensuring the accuracy of the information.
* Using the information for lawful purposes.
* Determining who is authorized to access patient information.
* Complying with applicable privacy, data protection, and healthcare laws and regulations.
## 4. Information Collected Automatically
When you use the Platform, certain technical information may be collected automatically, including:
* IP address.
* Browser type.
* Device type.
* Operating system.
* Session information.
* Login and logout times.
* Technical information related to system performance and security.
* Error and event logs.
This information is primarily used to operate, maintain, improve, and secure the Platform and to detect unauthorized or abusive activity.
## 5. How We Use Information
We may use the information we collect for the following purposes:
* Creating and managing user accounts.
* Providing and operating Nxt Clinic Services.
* Managing Clinics, users, and permissions.
* Providing patient, appointment, and medical-record management features.
* Processing subscriptions and payments.
* Sending service-related notifications and messages.
* Communicating with users regarding their accounts or Services.
* Providing technical support.
* Improving Platform performance and developing new features.
* Detecting and preventing fraud and misuse.
* Protecting the security of the Platform and its infrastructure.
* Investigating technical issues and security incidents.
* Complying with legal and regulatory requirements.
* Enforcing or protecting our legal rights and obligations.
## 6. Legal Bases for Processing
Where required by applicable law, we process personal information based on an appropriate legal basis, which may include:
* Performing a contract or providing Services requested by the User.
* User consent where consent is required.
* Compliance with legal obligations.
* Protecting the security of the Platform and preventing misuse.
* Legitimate interests, where permitted by applicable law.
* Any other lawful basis permitted under applicable law.
## 7. How We Share Information
We do not sell users' personal information.
We may share or provide access to certain information in the following circumstances:
### 7.1 At the Direction of the User or Clinic
Information may be processed or made available to authorized users within a Clinic according to the permissions established by the Clinic.
### 7.2 Service Providers
We may rely on third-party companies and service providers that help us operate the Platform, including:
* Hosting and infrastructure providers.
* Database services.
* Messaging and notification services.
* Email service providers.
* Payment providers.
* Security and monitoring services.
* Other technical service providers necessary to operate the Platform.
These providers may process information only to the extent necessary to provide the applicable services and subject to the relevant contractual and legal requirements.
### 7.3 Legal Requirements
We may disclose information when required by law, court order, or valid legal request, or when disclosure is reasonably necessary to protect our rights, the rights of our users, or the security of the Platform.
### 7.4 Business Transactions
If Nxt Clinic is involved in a reorganization, merger, acquisition, sale of assets, or similar business transaction, certain information may be transferred as part of that transaction, subject to applicable legal requirements.
## 8. WhatsApp and External Communication Services
Nxt Clinic may use external communication or messaging services to provide certain communication and notification features.
When these features are used, certain information necessary to send messages or process communication requests may be processed, such as phone numbers, message content, and technical information associated with the request.
Processing performed through third-party service providers may also be subject to their own privacy policies and terms, depending on the service being used.
## 9. Payments and Subscriptions
When you use Paid Services, information relating to your subscription and payment may be processed.
This information may include:
* Plan type.
* Subscription status.
* Subscription start and end dates.
* Billing information.
* Information relating to payment transactions.
Payments may be processed through third-party payment providers. Such providers may collect and process payment information in accordance with their own privacy policies and terms.
Nxt Clinic does not need to store complete payment card information when the payment is processed entirely through an external payment provider.
## 10. Cookies and Tracking Technologies
Nxt Clinic may use cookies and similar technologies to operate the Platform, improve the user experience, and enhance security.
Cookies may be used to:
* Maintain login sessions.
* Remember certain user settings.
* Protect accounts and sessions.
* Improve Platform performance.
* Understand how certain parts of the Platform are used.
* Detect unusual activity or attempts to misuse the Platform.
You may control certain types of cookies through your browser settings. However, disabling necessary cookies may affect some Platform functionality.
## 11. Information Security
We implement reasonable technical and organizational measures designed to protect information against:
* Unauthorized access.
* Unlawful use.
* Unauthorized modification.
* Unauthorized disclosure.
* Loss or damage.
Security measures may include access controls, permission management, secure communications, and other safeguards appropriate to the nature of the Services.
However, no method of transmitting or storing information over the Internet can be guaranteed to be completely secure. Therefore, we cannot guarantee that information will be protected against every possible security risk.
## 12. Data Retention
We retain personal information and data for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, or protect our rights and legitimate interests.
Retention periods may vary depending on:
* The type of information.
* The nature of the Service.
* Account status.
* Legal requirements.
* Backup requirements.
* The need to resolve disputes or investigate security incidents.
When there is no longer a legitimate need to retain information, it may be deleted, anonymized, or otherwise disposed of using appropriate procedures, subject to applicable laws and requirements.
## 13. Account and Data Deletion
Users may be able to request deletion of their account or certain information associated with it, depending on the options made available by Nxt Clinic.
Complete or immediate deletion may not always be possible, including where certain information is:
* Required by law.
* Necessary to fulfill legal or financial obligations.
* Required to resolve a dispute or protect legal rights.
* Stored in backups that require a reasonable period to be replaced or deleted.
When dealing with patient information, the Clinic or entity that originally collected the information may be responsible for determining when and how such information should be deleted, subject to applicable law.
## 14. User Rights
Depending on applicable law, users may have rights regarding their personal information, which may include:
* The right to know what information is being processed.
* The right to request access to personal information.
* The right to request correction of inaccurate information.
* The right to request deletion where permitted by law.
* The right to object to certain processing activities.
* The right to request restriction of processing in certain circumstances.
* The right to withdraw consent where processing is based on consent.
* The right to request a copy of certain information where required by law.
We may require verification of identity before processing requests relating to personal information.
Certain rights may be limited or unavailable in specific circumstances as permitted or required by applicable law.
## 15. Patient Data Access Requests
When patient information is stored within a Clinic or physician account, the Clinic or physician may be the party primarily responsible for managing the relationship with the patient regarding that information.
If you are a patient and wish to access, correct, or request deletion of your medical information, you may need to contact the Clinic or physician that collected or entered the information.
Nxt Clinic may assist with data-related requests according to its role, legal obligations, and applicable agreements.
## 16. Children's Information
Nxt Clinic is not directly intended for use by children.
If information relating to a child is collected through a Clinic's use of the Platform, the Clinic or entity collecting the information is responsible for ensuring that an appropriate legal basis or parental or guardian consent exists where required by applicable law.
## 17. Data Transfers and Storage
Information may be stored or processed through service providers or infrastructure located in countries or regions different from the country in which the User is located.
Where applicable, we take appropriate measures required by law regarding the transfer and protection of personal information.
## 18. No Sale of Personal Information
Nxt Clinic does not sell users' or patients' personal information to third parties for commercial purposes.
Information may be processed by service providers necessary to operate the Platform and provide the Services, as described in this Privacy Policy.
## 19. Communications and Notifications
We may use user contact information to send:
* Account-related notifications.
* Security-related messages.
* Subscription and payment notifications.
* Important Service updates.
* Technical support communications.
* Information necessary to operate the Services.
Marketing communications may be sent only where permitted by applicable law or where the required consent has been obtained.
## 20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to Nxt Clinic Services, legal requirements, or our data-processing practices.
When material changes are made, we may notify Users through the Platform, email, or other appropriate communication methods.
The date of the latest update will be indicated in the updated version of this Privacy Policy.
We encourage Users to review this Privacy Policy periodically to remain informed about how their information is handled.
## 21. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the way we handle personal information, you may contact us through the official contact methods provided by Nxt Clinic.