For people at clinics, hospitals, healthcare groups and other healthcare businesses that GetClinic has researched but has no relationship with
In Short
We research healthcare businesses that might want to list on the GetClinic marketplace, and we do it before we contact anyone. That research includes your name, your job title and your work contact details if you are one of the people at that business. We got that information from your employer's website, from public web searches and from healthcare listing sites, not from you. We hold it so that we can approach the right person about a possible partnership. You can tell us to stop at any time, and if you do, we stop and delete what we hold about you. Write to privacy@getclinic.com.
1. Who This Notice Is For
This Notice is for you if you work at, own, direct or manage a clinic, hospital, healthcare group or similar healthcare business, and GetClinic holds information about you because we researched that business as a possible marketplace partner. You will not have heard from us before, and you did not give us anything.
This is a different situation from the one covered by our Business Verification Privacy Notice. That Notice is for people connected with a business we are actually verifying, once a relationship has started. This Notice is for the stage before that, when there is no relationship at all.
This Notice does not cover patients, and it does not cover our patient marketplace. Those are covered by the Patient Privacy Policy. Section 13 explains when the law says we owe you this Notice and how you get it.
2. Who We Are and How to Reach Us
GetClinic, Inc., 74 E Glenwood Ave, Unit #5895, Smyrna, DE 19977, United States, is the controller of the information described in this Notice. We decide what is collected and why.
Privacy contact: privacy@getclinic.com. That address reaches a person and accepts mail from outside GetClinic. If you write to it about this Notice we will tell you what we hold about you and where it came from.
Where an EU or UK representative under Article 27 is required, current representative details are published through GetClinic's legal-information pages.
3. What Information We Hold About You
Not every record holds all of this. A typical record holds a few of these things.
Your name; your job title as published; the business you work for and, where it has several sites, which site; your work email address; your work telephone or WhatsApp number; a link to your public professional profile, such as LinkedIn.
We also hold information we produced ourselves rather than collected. That is: a category we assigned to your role, such as founder, medical director or business development; a score from 0 to 100 for how likely you are to be the right person for us to contact; a short written reason for that score; where we found evidence that you own or control the business, a short note of that evidence; and our own confidence figures for whether we correctly identified you and correctly connected you to that business.
We keep a dated research note for each business we research. That note names every person the research found, including people we did not create a separate record for.
We do not set out to collect health information about you, or anything about your private life, and nothing in our research asks for it. What we read are public business pages, so if such information is published on one of those pages it can end up in the text we store about the business. If you tell us we hold something of that kind about you, we will remove it.
4. Where We Got It
We did not get any of it from you. We got it from:
your employer's own website, most often its contact page, its about or team page, its doctor pages or its international patients page; public web searches, which we run through a third-party search tool; healthcare listing and comparison websites that publish clinic and doctor profiles; and public professional networking sites such as LinkedIn, where a search result pointed us at a page.
Professional networking sites need saying plainly, because version 1.1 of this Notice described them wrongly and was published that way. It said that we only ever record the address of a profile page. That is not what our research does. We search those sites by name for two things: your employer's company page, and the profile pages of people who work there. Where a search result points at one of those pages, our research may open the page and read it. When we run a follow-up search on a named person, it may open whatever pages that search returns, on any site.
Three limits are real, and they are why nothing from LinkedIn is in fact in our records. We never sign in, and we hold no account that would let us. We do not open a page that a site's own robots.txt file tells our crawler to stay out of. LinkedIn's robots.txt tells every crawler to stay out of every page, which we checked on September 8, 2026, so our research has never read a LinkedIn page. What we hold from LinkedIn is what a search result showed us: the address of a page, and the title and short summary the search engine displayed with it.
We have never bought, rented or exchanged a contact list, and we do not intend to. Every value we hold carries a record of the page it came from and the date we read it, and you can ask us for that record.
5. What We Do With It, and Our Lawful Basis
We use it to work out which healthcare businesses fit the GetClinic marketplace, to find the person at each one who can decide whether to list, to prepare and send a first approach about a possible partnership, and to keep track of that approach.
Where European or United Kingdom data protection law applies, our lawful basis is our legitimate interests under Article 6(1)(f): our interest in finding and approaching potential partners for a healthcare marketplace. We have written down that assessment, including the reasons why we think it does not override your interests, and we will give you a summary of it if you ask.
We do not treat this Notice, or your silence, as your consent to anything.
Separately from data protection law, the rules on sending unsolicited business messages differ from country to country, and in several countries they do not allow us to email or telephone you at all without your prior agreement. Where that is the case we do not send.
6. Automated Research and Scoring
Our research runs largely automatically. Software searches the web, reads public pages, and uses an artificial intelligence model to pull out who works at a business, what their role is and how to reach them. The same model produces the score and the written reason described in Section 3.
Two things are worth saying plainly about that.
First, it can be wrong. A model can misread a page, attach the wrong person to the wrong business, record a job you no longer hold, or state something about your ownership of a business that is not accurate. If we hold something wrong about you, tell us and we will correct or delete it.
Second, no automated decision is made about you. A person decides whether to contact anyone, and a person writes the message. The scoring only orders a list for that person to look at. Nothing here produces a legal effect on you or anything similar to one.
7. Who Else Sees It
Inside GetClinic, the research is held in our own customer relationship system, which runs on GetClinic's own servers, is reachable only from GetClinic's internal network, and requires a company sign-in. Access is limited to authorised GetClinic personnel; at the date of this Notice that is a single account.
Outside GetClinic, the information is shared with:
OpenAI, in the United States, which provides the artificial intelligence models and the web search tool our research uses. What is sent includes search queries containing your name, the text of the public pages we read about your business, and your name and job title when the model is asked to rank who we should contact; and Amazon Web Services, in Frankfurt, Germany, which hosts our systems.
We do not sell your information, we do not rent it, and we do not share it with any other company for that company's own marketing. We have not engaged any email sending, list hosting or sales automation service for this, and if we ever do, we will name it here before it receives anything.
8. Sending Information Outside Your Country
GetClinic is a United States company, and the research described above involves sending information to a service provider in the United States. Where European or United Kingdom transfer rules apply, that transfer needs a recognised legal mechanism.
We tell you this plainly because it matters: as at the date of this Notice, we have assessed that transfer and we have not yet completed the arrangements it requires. We are treating that as something to fix before we increase the amount of research we do, and you can ask us where it stands.
9. How Long We Keep It
These are our operational targets. We keep them under review and we will not keep your information longer than we need it for the purpose in Section 5.
If we research your business and never contact anyone there: we aim to delete the research within 12 months of the last time we ran it.
If we contact you or a colleague and get no reply: we aim to delete the research within 24 months of that contact.
If your business becomes a GetClinic partner: the record stops being prospect research and becomes part of our records for that relationship, which are covered by the Business Verification Privacy Notice.
If you ask us to stop: we delete what we hold about you within 30 days. We keep one minimal record of your request, which is your contact detail and the fact and date of the request. We keep that indefinitely and for one reason only, which is so that we do not research or contact you again by mistake. You can ask us to delete that too, and if you do we will, but then we cannot guarantee we will not reach you again.
10. Your Rights
Depending on where you are, you may have the right to ask us for a copy of what we hold about you, to have it corrected, to have it deleted, to have our use of it restricted, and to complain to your national data protection authority.
You also have the right to object to our use of your information. Because we rely on legitimate interests, you can object at any time on grounds relating to your situation, and we will stop unless we can show compelling grounds that override your interests.
Where you object to being contacted for marketing or partnership approaches, there is no balancing exercise. We stop, and we stop for good.
Exercising any of these rights is free, and we will not treat you differently for it.
11. How to Tell Us to Stop
Write to privacy@getclinic.com and say you do not want to be contacted, or reply to any message we send you and say so. Either works. You do not need to give a reason and you do not need to use any particular wording.
We will confirm, delete what we hold about you as described in Section 9, and add your contact detail to a do-not-contact record so that a later piece of research cannot bring you back.
12. If You Operate a Website We Visited
GetClinic runs two automated programs that read public web pages: one that reads healthcare listing and comparison sites, and one that reads clinic websites as part of the research described in this Notice. Both identify themselves in their requests as GetClinicResearchBot, and both read a site's robots.txt file and skip any page it disallows for them.
If you operate a site and want us to stop reading it, you can disallow GetClinicResearchBot in your robots.txt file, or write to privacy@getclinic.com and ask, and we will stop. Please use that address; it reaches a person.
13. When You Should Have Received This Notice
Because we did not get your information from you, the law that gives you this Notice also fixes when you get it. Under Article 14(3)(b) of the UK and EU General Data Protection Regulation, where we hold your information in order to contact you, this Notice is due at the latest at the first time we contact you. Article 14(3)(a) sets an outer limit of one month from when we obtained your information. Whichever of those comes first is the deadline.
So this is what we do. Every first message we send links to this Notice, on every channel we use: email, a message on a messaging service such as WhatsApp, a message sent through your own website's contact form, and a letter. If we telephone you first, the caller tells you at the start of the call that this Notice exists and where to read it, and we send you the link in writing afterwards.
We do not rely on the exemption in Article 14(5)(b) for cases where giving notice would take disproportionate effort. Our list is small, and we hold your information for the purpose of contacting you, which is the situation that exemption does not cover.
If we already hold information about you and have not contacted you yet, this Notice is published so that you can read it before you hear from us, and you will receive it again with the first message. Where we decide not to contact you at all, we delete what we hold about you rather than write to you about it, on the timing in Section 9.
14. Changes to This Notice
We may update this Notice as our practices or the law change. Material changes will be reflected in a new published version, and the version and date at the top of this Notice tell you which one you are reading.
Version 1.3 corrects Section 4. Versions 1.0 to 1.2 said we do not open pages on professional networking sites and only record their addresses. That was not true of our research when we published it. Section 4 now says what our research actually does and what stops it.
Privacy: privacy@getclinic.com. Legal: legal@getclinic.com.