What this notice covers
This covers the information you give us through this website — by booking a demo, starting an AlliedWell Solo practice, or sending a message. We are the personal information controller for that data, under Republic Act 10173, the Data Privacy Act of 2012.
It does not cover patient records inside a clinic’s AlliedWell account. Those belong to that clinic. The clinic is the controller of its patients’ information and we process it on their instruction, under our agreement with them. If you are a patient asking about your own records, ask your clinic — they hold them, and they can act on your request.
What we collect, and why
When you submit a form on this site we collect only what the form asks for:
- Your name, email and mobile number — so we can reply to you.
- Your clinic name, city, number of therapists and branches — so the demo is about your situation rather than a generic one, and so we know which plan to talk about.
- What you are running on today, and what is hardest — so we can be useful on the call instead of guessing.
- Anything you type in the message box — whatever you choose to tell us.
We ask for your consent on the form itself, and we do not pre-tick that box. Consent is the basis we rely on, and you can withdraw it at any time.
What we do not do
- We do not sell your information, and we do not share it with advertisers.
- We do not add you to a marketing list you did not ask to join.
- We do not use your details to build a profile of you or your clinic.
- We do not load fonts, analytics or embeds from third parties that would disclose your IP address without you being told on this page first.
Who else sees it
Your submission is stored in our own systems, hosted with Supabase. The website itself is served as static files by our hosting provider, which records ordinary server logs. Nobody outside AlliedWell reads your enquiry.
⚠️ To be completed before launch: name the hosting provider and the region the data is stored in, and add any scheduling or spam-protection service once one is chosen — each of those has to be named here before it is added to the site, not after.
How long we keep it
If you become a customer, your details become part of your account and are governed by our agreement with your clinic. If you do not, we keep your enquiry only as long as the conversation is realistically alive.
⚠️ To be completed before launch: state a specific retention period for enquiries that do not convert, and hold to it. “As long as necessary” is not a period.
Your rights
Under the Data Privacy Act you may ask us to:
- tell you what information we hold about you;
- correct anything that is wrong;
- delete it;
- give you a copy in a portable form;
- stop processing it, by withdrawing your consent.
Write to [email protected] and we will act on it. You also have the right to complain to the National Privacy Commission.
Keeping it safe
Enquiries are stored in a database where access is enforced record by record, not by hiding a screen, and every change is written to an audit trail. The same approach protects clinic records inside the product.
Contact
⚠️ To be completed before launch: the registered entity name and address, and the named Data Protection Officer. An email address alone does not satisfy the requirement.
Changes
If this notice changes we update the date at the top. If a change is significant — a new third party seeing your data, say — we will say so plainly rather than quietly revise the page.