Clinosa trust pack
Privacy Policy
Last updated 5 July 2026. This UK-facing summary is intended for clinics evaluating Clinosa and for pet owners using Clinosa-hosted booking or portal surfaces.
Company Details
- Legal entity
- Clinosa Ltd
- Trading name
- Clinosa
- Jurisdiction
- Registered in England and Wales
- Privacy contact
- [email protected]
Company number and registered office must be confirmed before the first signed customer.
Who this policy covers
This policy covers Clinosa's veterinary practice-management platform, public clinic websites hosted by Clinosa, the online booking flow, customer portal, lab portal, and operational support surfaces used by UK veterinary clinics and their clients.
Controller and processor roles
For clinic records, appointment requests, client communications, invoices, clinical notes, and patient data, the clinic is normally the data controller and Clinosa acts as processor. Clinosa is controller for its own buyer, account, billing, security, website analytics, and support records.
Data we process
Clinosa may process clinic profile data, staff account data, pet-owner contact details, patient and appointment records, booking requests, pre-visit intake answers, invoices, payment references, portal activity, support requests, audit trails, security events, and delivery logs for email or SMS service messages.
Booking data and consent
Public booking forms collect the details needed for the clinic to assess and respond to an appointment request. The booking consent checkbox records acknowledgement that the clinic may use those details for booking coordination and follow-up service communication.
Email and SMS messaging
Clinosa supports service communications such as appointment confirmations, reminders, intake follow-up, portal invitations, receipts, and operational notices. Marketing messages require a separate clinic-controlled consent basis and are not treated as implied by booking consent.
Hosting and subprocessors
Clinosa uses Supabase for database, authentication, and storage; Stripe for payments; Twilio for SMS and messaging capabilities; Resend for email delivery; and a VPS host for production application infrastructure. Some subprocessors may process data outside the UK, so Clinosa relies on contractual safeguards, scoped access, encryption in transit, and least-privilege operational access.
Data export and deletion
Portal users can access privacy actions where enabled, and clinics can request export, correction, deletion, or restriction support from Clinosa. Because veterinary records are controlled by the clinic, Clinosa may need to route pet-owner requests back to the clinic before acting.
Retention
Clinical, appointment, invoice, consent, and communication records are retained according to the clinic's operational and legal retention duties. Clinosa retains security, audit, webhook, privacy-request, and support logs only for as long as needed for service operation, investigation, compliance, and dispute handling.
Your Rights
- Access the personal data held about you.
- Ask for inaccurate data to be corrected.
- Request deletion or restriction where the law allows it.
- Request a portable export of data controlled by Clinosa or supported through the clinic.
- Object to non-essential processing or withdraw optional consent.
Legal Review Status
This policy is a product and operational summary, not legal advice. It must be reviewed against the final company details, subprocessors, and customer contract pack before the first signed customer.