Privacy Policy

Dr Calim's Wellness Centre ("DrCalims", "we", "us") operates the DrCalims wellness assessment platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We collect information you provide directly to us, such as when you create an account, book an assessment, complete intake forms, or communicate with our team. This may include your name, email address, phone number, date of birth, gender, and health-related assessment data.

We also automatically collect certain information when you use the Service, including device identifiers, browser type, IP address, usage statistics, and cookies. This technical information helps us maintain and improve the Service.

DrCalims uses Google APIs (including Google Sign-In / OAuth 2.0) to authenticate users. When you sign in with Google, we request access to basic profile information such as your name and email address to create and manage your account.

Our use of information received from Google APIs is limited to providing and improving the Service. We do not sell, rent, or share Google API data with any third party for marketing or advertising purposes.

We adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only access Google API scopes that are necessary for the Service to function, and we do not use Google API data to serve personalised advertising.

You may revoke DrCalims's access to your Google account at any time through your Google Account security settings. Revoking access does not delete data already stored in our system; to request deletion of your data, see the "Your Rights" section below.

We use the information we collect to: (a) provide, operate, and maintain the Service; (b) create and manage your account; (c) process and schedule wellness assessments and appointments; (d) generate wellness reports and recommendations; (e) communicate with you about your assessments, results, and follow-ups; (f) respond to your enquiries and provide support; and (g) comply with legal obligations.

Health assessment data is used solely to generate your wellness reports, track progress over time, and provide personalised lifestyle recommendations. Your assessment data is never used for advertising or sold to third parties.

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

Service Providers: We may share information with trusted third-party service providers who assist us in operating the Service (e.g., cloud hosting, email delivery, analytics). These providers are bound by confidentiality obligations and are only permitted to use your data to provide services to us.

Legal Compliance: We may disclose your information if required by law, court order, or government regulation, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to the protections of this Privacy Policy.

We retain your personal and assessment data for as long as your account is active or as needed to provide the Service. If you request deletion of your account, we will permanently remove your personal data from our active systems within 30 days, except where we are legally required to retain certain records.

Health assessment records may be subject to regulatory retention requirements. We will inform you of any mandatory retention period applicable to your records at the time of any deletion request.

We implement industry-standard technical and organisational measures to protect your personal information, including encrypted data transmission (TLS/SSL), role-based access controls, and regular security reviews.

Access to your health assessment data is restricted to authorised practitioners and administrators within your clinic who have a legitimate need to access it. All access is logged and auditable.

No method of transmission or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access & Portability: You may request a copy of the personal data we hold about you in a structured, machine-readable format.

Rectification: You may request correction of inaccurate or incomplete personal data.

Erasure: You may request deletion of your personal data, subject to legal retention requirements.

Restriction & Objection: You may request that we restrict or stop processing your personal data in certain circumstances.

Withdrawal of Consent: You may withdraw consent for data processing at any time, including revoking Google API access through your Google Account settings.

To exercise any of these rights, contact us using the details in the "Contact Us" section below.

We use cookies and similar tracking technologies to operate and improve the Service. Cookies are small data files stored on your device that help us remember your preferences and analyse usage patterns.

You can control cookies through your browser settings. Disabling cookies may affect some features of the Service.

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: