Privacy Policy

TODO: this is a draft outline, not a finished legal document. It must be reviewed and completed by the practice's legal/compliance counsel against applicable law (e.g. HIPAA in the US, GDPR in the EU/UK, or local equivalents) before publishing.

What we collect

TODO: describe the data collected through this site's forms — the consultation request form (name, phone, email, condition/joint, coarse pain duration, prior treatment, preferred contact time, note) and the general contact form (name, email, phone, message) — plus any analytics data collected sitewide.

How we use it

TODO: describe how submissions are used (to follow up and schedule care), who has access internally, and confirm that detailed medical history is never collected through this public site — only gathered later through a secure, compliant intake process.

Data retention and security

TODO: describe retention period, encryption at rest, access controls, and deletion policy for consultation-request data, consistent with applicable health-privacy law.

Your rights

TODO: describe applicable rights (access, correction, deletion, etc.) based on the jurisdiction(s) this practice operates in.

Contact

Questions about this policy can be sent to TODO: hello@example.com.