Privacy policy

Last updated September 2026

Two kinds of data

Clinicket handles two separate things and treats them differently. Clinic data is everything a clinic puts into the system — patients, appointments, clinical records, payments. The clinic is the controller of that data (its data fiduciary under the Digital Personal Data Protection Act, 2023); we process it on their instructions and for no other purpose. Account data is what we hold about the clinic as our customer: the users, their email addresses, billing details and the logs of their use of the product. We are the controller of that.

What we collect

For account data: name, work email, role, the clinic they belong to, and authentication records. For billing: the details required to raise and settle an invoice. For operating the service: request logs, error reports and an audit trail of record access.

What we do not do

We do not sell data. We do not share it with advertisers or data brokers. We do not use clinic or patient data to train models. Our staff look at a clinic’s records only to resolve a support request that clinic has raised.

How long it is kept

Clinic data is kept for as long as the account is active and for 90 days after it closes, so a clinic that leaves and changes its mind does not lose its records. After that it is deleted. A clinic can ask for immediate deletion instead, and we will do it.

Your rights

A patient exercising their rights should contact their clinic, which controls their record. A clinic exercising its rights over account data can contact us directly. Either way, export is available without asking anyone: everything comes out as CSV from Settings.

Requests about personal data, and complaints about how we handle it, go to support@pioneerregis.com. We will acknowledge within two working days and respond within the period the applicable law allows.

Contacting us

Questions about this document, or a request under it, go to support@pioneerregis.com. We aim to acknowledge within two working days.