Privacy policy

Who we are

ClinicMira is a product of LogicMira, Inc., a corporation registered in Delaware, United States (“ClinicMira”, “we”, “us”). Our registered office is c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA. That address is for service of legal documents; for anything about this policy please email contact@clinicmira.com, which reaches us directly.

We are the controller of the information described here. In this policy personal information means information about an identified or identifiable individual, and covers what UK law calls personal data.

What this policy covers

This policy covers the clinicmira.com website — the marketing pages, the enquiry form and the live chat widget. It applies wherever you are, including Australia, New Zealand, the United Kingdom and the United States.

It does not cover the ClinicMira platform itself. Personal and health information that clinics, employers and candidates enter into the platform is handled under the written agreement between ClinicMira and the organisation that holds the account. In that context the organisation is the controller and ClinicMira acts as its processor on documented instructions. If you are a worker or candidate asking about your own health records, contact the clinic that arranged your appointment.

What we collect, and why

Information you give us

When you submit the enquiry form we collect your first and last name, work email address, organisation, the enquiry type you select and the message you write. We use it solely to respond to your enquiry and to route it to the right person.

If you use the live chat widget, we receive the messages you send and any contact details you choose to provide in the conversation.

Please do not send health information, patient records or other sensitive information through the enquiry form or live chat. Neither channel is intended for clinical data.

Information we collect automatically

• Aggregate usage analytics. We measure page views and basic performance through Vercel Analytics. It does not use cookies and does not build a profile of you across sites.
• Anti-abuse checks. When you submit the form we hold a one-way hash of your IP address and email address in server memory for a short period, purely to rate-limit repeated submissions. The underlying values are not written to disk by us, and the hashes are discarded when the window closes.
• Your theme preference. If you switch between light and dark mode, that choice is stored in your own browser and is never transmitted to us.
• Live chat session data. The chat widget sets storage in your browser so a conversation survives a page reload.

We do not use advertising cookies, we do not run ad-network trackers, and we do not sell or share personal information for cross-context behavioural advertising.

Our lawful basis

Where UK or European data protection law applies, we rely on our legitimate interests in responding to business enquiries, operating a secure website and preventing abuse of our forms. We have considered your interests and rights and believe this processing is what you would reasonably expect when contacting a supplier. Where we instead rely on your consent — for example if you ask to receive material from us — you can withdraw it at any time.

Who we share it with

We share personal information only with the service providers that operate this website on our behalf, under contract, and only so they can perform that function:

• Chatwoot — hosts our live chat and receives enquiry form submissions as support conversations.
• Resend — delivers the notification email that alerts our team to a new enquiry.
• Vercel — hosts the website and provides aggregate analytics.

We may also disclose information where the law requires it, or to establish or defend a legal claim.

Where your information is handled

We are a United States company and our providers process data on infrastructure located in several countries, including the United States. If you are in Australia, New Zealand or the United Kingdom, your information will be handled outside your country, and recipients may not be subject to the same privacy laws.

Where UK law requires a transfer mechanism, we rely on the safeguards offered by our providers, including standard contractual clauses and the UK International Data Transfer Addendum where applicable. You can ask us for details of the safeguards that apply to a particular transfer.

How long we keep it

We retain enquiry correspondence for 24 months, after which it is deleted or de-identified, unless we are required to keep it longer to meet a legal obligation or to resolve a dispute.

Security

The site is served over HTTPS, credentials for our providers are held as server-side secrets rather than in the browser, and access to enquiry correspondence is limited to team members who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Wherever you are, you can ask us to give you a copy of the personal information we hold about you, correct it if it is wrong, or delete it. Email contact@clinicmira.com and we will respond within the period your local law allows. We may need to verify your identity first. If we refuse a request we will tell you why. Exercising these rights is free and we will not treat you differently for doing so.

Depending on where you live, you may have further rights:

• United Kingdom. Under the UK GDPR you may also request restriction of processing, object to processing carried out on the basis of legitimate interests, and request portability of information you provided to us. You may complain to the Information Commissioner’s Office at ico.org.uk.
• Australia. The Australian Privacy Principles give you rights of access and correction. You may complain to the Office of the Australian Information Commissioner at oaic.gov.au.
• New Zealand. The Privacy Act 2020 gives you rights of access and correction. You may complain to the Office of the Privacy Commissioner at privacy.org.nz.
• United States. Some states, including California, give residents rights to know, delete and correct personal information, and to opt out of its sale or sharing. We do not sell or share personal information, so there is nothing to opt out of, but you may still exercise the other rights by emailing us.

Complaints

If you believe we have mishandled your personal information, contact us at contact@clinicmira.com and we will investigate. If you are not satisfied with our response, you may complain to the regulator for your country listed above.

Children

This website is aimed at businesses and is not directed at children. We do not knowingly collect personal information from children through it.

Changes to this policy

We may update this policy as the product and our providers change. The date at the top of this page shows when it was last revised. Material changes will be highlighted here.

Contact

Questions about this policy can go to contact@clinicmira.com, or use the contact form.