Important: This notice is not a blanket consent to use or disclose your health information. Where applicable law requires a separate consent, authorization, instruction, or other affirmative permission, GetClinic will request it separately before the relevant processing or disclosure.
1. What This Notice Covers
This notice applies when you use GetClinic as a Patient or authorized representative and provide, generate, or ask GetClinic to transmit health-related information through features such as:
- medical questionnaires, treatment requests, symptoms, medical history, medications, allergies, diagnoses, or prior procedures;
- medical photographs, scans, X-rays, laboratory results, reports, prescriptions, or other uploaded documents;
- messages with Clinics or healthcare professionals that contain health information;
- Clinic evaluation requests, consultation requests, Bookings, Treatment interests, and medical suitability information;
audio/video consultation features and consultation-related information; and
support requests or other communications that contain health information.
Health information may be treated as special-category data, sensitive personal information, consumer health data, or protected medical information depending on the law that applies.
2. Before You Select or Engage a Clinic
GetClinic follows a progressive-disclosure approach. Before you select or affirmatively engage a Clinic, we limit request-level sharing to what is reasonably necessary for marketplace routing or to determine whether a Clinic may be able to help.
Where reasonably practicable, pre-engagement information is de-identified or pseudonymized and does not include direct identifiers such as your full name, personal contact details, account credentials, or complete medical file.
GetClinic does not make your complete medical file available to all Clinics merely because you use the marketplace.
3. When You Choose or Engage a Clinic
When you select a Clinic, request an evaluation, send a message, book a consultation, or otherwise ask a Clinic to provide services, GetClinic may transmit information reasonably necessary for that request. Depending on what you provide and the service you request, this may include:
- your name, contact details, age or date of birth, and other identifying information;
- the Treatment or procedure you are interested in and your requested timing;
- medical history, symptoms, medications, allergies, prior procedures, or other health information you provide;
- medical photographs, scans, X-rays, test results, reports, or other documents you choose to share;
messages, consultation information, and information needed to prepare a Clinic Offer or Booking; and
other information you specifically ask GetClinic to transmit to that Clinic.
Sharing is tied to the Clinic you choose, the feature you use, and the service you request, unless another disclosure is required by law or is legally permitted to protect vital interests in an emergency.
4. What the Selected Clinic Does With the Information
The Clinic you select is an independent healthcare provider. Once the Clinic receives your information for its own healthcare purposes, it may become an independent controller or equivalent regulated healthcare entity. The Clinic may use the information for matters such as medical evaluation, consultation, diagnosis, Treatment planning, informed consent, medical records, billing, aftercare, and legal or regulatory obligations.
GetClinic does not control the Clinic’s medical decisions or legally required clinical records. The Clinic may provide you with its own privacy notice, consent forms, or medical-record rules.
5. Why GetClinic Processes Health Information
GetClinic processes health information only for legitimate marketplace, safety, legal, and user-requested purposes, which may include:
- providing the marketplace feature or service you requested;
- routing your request and enabling communication with a selected Clinic;
- supporting Clinic evaluation, consultation, Booking, payment, refund, and marketplace records;
- providing document-upload, messaging, and consultation technology;
- protecting accounts, preventing fraud or misuse, and maintaining platform security;
responding to privacy requests, complaints, disputes, or legal obligations; and
other compatible purposes permitted by applicable law.
Where the EU GDPR, UK GDPR, or another law treats health information as specially protected data, GetClinic relies on both an applicable ordinary lawful basis and any additional special-category condition, consent, authorization, or other legal requirement that applies. Contract necessity by itself is not treated as an unlimited basis for special-category health-data processing.
6. What GetClinic Does Not Do
We do not sell Patient health information.
We do not use Patient health information, private medical uploads, or private Patient-Clinic messages for targeted advertising or cross-context behavioral advertising.
We do not place advertising pixels or equivalent cross-context advertising trackers in authenticated medical-document, consultation, or private health-information areas.
We do not authorize service providers acting on our behalf to use Patient health information for their own advertising or unrelated general-purpose model training.
We do not treat uploading a medical photograph, scan, or testimonial for healthcare purposes as permission to use it for advertising or promotion.
We do not intentionally record a medical consultation without an applicable lawful basis and any notice or permission required by law.
We do not disclose your complete health file to every Clinic on the marketplace.
7. Your Choices, Consent and Withdrawal
You control whether to provide optional health information and which Clinic you choose to engage. However, a Clinic may be unable to evaluate or treat you safely without information it reasonably requires.
Where GetClinic asks for consent or authorization, you may withdraw it as permitted by applicable law. Withdrawal does not make prior lawful processing unlawful, and it may prevent GetClinic or the Clinic from continuing a feature or service that requires the information.
You should not upload another person’s health information unless you are legally authorized to act for that person or otherwise have a lawful basis to provide it.
8. Service Providers and Access Controls
GetClinic may use contracted service providers for hosting, storage, communications, video, security, support, and other infrastructure. Where they process health information on GetClinic’s instructions, they are subject to applicable confidentiality, security, and data-processing obligations.
Access to health information is limited according to role and business need, and GetClinic uses reasonable technical and organizational safeguards appropriate to the sensitivity of the information. No online service can guarantee absolute security.
9. Retention and Deletion
GetClinic retains Patient health information only for as long as reasonably necessary for the purpose for which it was collected, applicable legal obligations, security, disputes, and the retention framework described in the Patient Privacy Policy. As an indicative operational target, health data held by GetClinic for marketplace purposes is generally targeted for deletion or de-identification around 24 months after the last relevant Patient interaction, unless a shorter or longer period is required or justified.
A Clinic may have separate legal obligations to retain clinical records for longer periods. A deletion request to GetClinic does not automatically delete medical records the Clinic is independently required or permitted to retain.
10. Your Privacy Rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, withdrawal of consent, information about recipients, or other privacy rights. U.S. state consumer-health-data rights may also apply.
Requests may be submitted to [email protected] or through available in-product privacy controls. GetClinic may need to verify your identity before completing a request.
For broader information about your rights and GetClinic’s practices, read the Patient Privacy Policy and the standalone Consumer Health Data Privacy Policy.
11. Minors and Authorized Representatives
A parent, guardian, or other legally authorized representative may provide or authorize sharing of health information for another person where permitted by applicable law and the Clinic. GetClinic may request reasonable evidence of authority before acting on a privacy request or sharing instruction.
12. Contact
GetClinic, Inc.
74 E Glenwood Ave, Unit #5895
Smyrna, DE 19977, United States
Privacy: [email protected]
General Support: [email protected]
Website: https://www.getclinic.com
Recommended In-Product Acknowledgment
For upload / Clinic-sharing screens
“I understand that the health information I choose to provide may be processed by GetClinic to provide the service I request and shared with the Clinic(s) I choose to engage, as described in the Health Data Privacy & Sharing Notice and Patient Privacy Policy.
Where separate consent or authorization is required by law, GetClinic will request it separately.”
This acknowledgment is not the separate consent required by applicable consumer-health-data law; where such consent is required, it is requested as a distinct affirmative step.
Relationship to other notices. This notice is a short, contextual explanation of Patient health-data handling. The Patient Privacy Policy provides the broader privacy framework. The Consumer Health Data Privacy Policy provides additional consumer-health-data disclosures and rights where applicable. If a transaction, jurisdiction, or type of health information requires a separate consent or authorization, that separate instrument controls for that consent or authorization.