Privacy Policy

Curofyx (“we,” “our,” or “us”) operates a clinic reputation-management SaaS platform, helping UK and US clinics and healthcare providers automate patient review requests, monitor their reputation across platforms like Google, Trustpilot and Doctify, and respond to reviews.

We are committed to protecting your privacy and ensuring the security of your personal and medical information.

1. Information We Collect

We may collect the following types of information:

a. Personal Information

  • Name, phone number, email address
  • Organisation details (your clinic's name and address)
  • Billing and account details

b. Patient Contact & Review Data

  • Patient names and contact details entered by your clinic, used solely to send review requests on your behalf
  • Reviews and ratings pulled from connected platforms (Google, Trustpilot, Doctify, and others you connect)

We do not collect or store clinical records, prescriptions, diagnostic results, or any medical treatment data — Curofyx is a reputation-management platform, not a clinical system.

c. Technical Data

  • IP address, browser type, device details
  • Usage behavior within the platform

2. How We Use Information

We use collected data to:

  • Provide and maintain our SaaS services
  • Send and track automated patient review requests on your clinic's behalf
  • Monitor and help you respond to reviews across connected platforms
  • Improve platform performance and features
  • Communicate updates, alerts, and support responses
  • Ensure compliance with UK GDPR and other applicable data protection regulations

3. Data Security

We implement industry-standard safeguards including:

  • End-to-end encryption (where applicable)
  • Secure cloud infrastructure
  • Role-based access controls
  • Regular security audits

However, no system is 100% secure, and users share data at their own risk.

4. Data Sharing

We do not sell your data.

We may share data:

  • With authorized users within your organization
  • With third-party service providers (hosting, analytics)
  • When required by law or regulatory authorities

5. Data Retention

We retain data:

  • As long as your account is active
  • As required by healthcare compliance laws
  • Until requested deletion (subject to legal obligations)

6. Your Rights

You may:

  • Access and update your data
  • Request deletion (where legally permitted)
  • Withdraw consent (may affect service usability)

7. Cookies & Tracking

We use cookies for:

  • Session management
  • Analytics
  • Improving user experience

(See Cookie Policy for details)

8. Third-Party Services

We may integrate with:

  • Payment gateways
  • Cloud hosting providers
  • Analytics tools

Each has its own privacy policy.

9. Changes to Policy

We may update this policy periodically. Continued use implies acceptance.

10. Governing Law

This policy is governed by the laws of England and Wales. Curofyx processes personal data of UK patients and clinics in accordance with UK GDPR and the Data Protection Act 2018, under the supervision of the Information Commissioner's Office (ICO). For US clinics, we align our practices with HIPAA — see our HIPAA Compliance page for details.

11. Contact

For privacy-related concerns:

Email: info@curofyx.com