Policies
Privacy policy.
Draft placeholder — must be reviewed and completed before collecting personal data.
Information we collect
[List only the data the clinic actually needs, the purpose for collecting it, and the lawful basis/consent process after legal review.]
How information is used
[Explain appointment handling, payment verification, patient communication and authorised staff access.]
Storage and retention
[Add approved retention periods, security controls, backup process and deletion/contact process.]
Your choices
[Add how visitors can request access, correction or deletion where applicable.]
Contact
[Add the clinic's official privacy contact.]
This draft is not legal advice and is not ready for production. Have the clinic review it for applicable Sri Lankan privacy and healthcare requirements.