Legal

Privacy policy

Effective June 19, 2026. This policy explains how ChiroBooking collects, uses, and protects information from patients, chiropractors, and visitors who use the platform.

Who we are

ChiroBooking (chirobooking.online) is an online appointment booking platform for chiropractic clinics. Chiropractors create accounts, publish clinic profiles, and manage their availability. Patients find chiropractors and book appointments.
ChiroBooking is not a healthcare provider, chiropractic clinic, or medical advice service. Your chiropractor remains solely responsible for your clinical care, clinical records, diagnosis, and treatment.
Subscription billing for chiropractor accounts is processed by Paddle (paddle.com), who act as our Merchant of Record. When you purchase a subscription, you are contracting with Paddle as the seller of record. Paddle's privacy practices are described at paddle.com/legal/privacy.

Who this policy applies to

Patients who search, browse, or book appointments on ChiroBooking, including as guests.
Chiropractors and clinic staff who create and manage clinic accounts.
Visitors who access chirobooking.online without creating an account.

Information we collect

Account information — name, email address, password credentials (managed securely by Supabase Auth), account role, and optional phone number.
Clinic and practitioner details — clinic name, address, suburb, state or region, country, timezone, phone number, descriptions, services, pricing, opening hours, availability schedules, exceptions, and any other content you add to your public clinic profile.
Booking details — selected clinic, selected service, appointment date and time, booking status, patient name, email address, phone number, any notes or reason for visit you choose to provide, cancellation and reschedule activity, reminder status, and booking history.
Patient account data — notification and communication preferences, saved favourite clinics, dependent or family member booking details (where you book on their behalf), waitlist requests, and any privacy or account requests you submit.
Technical and security data — authentication session data, reCAPTCHA signals used to detect automated or abusive activity, device and browser information sent during normal web requests, application logs, audit logs, and usage data needed to operate and secure the service.
Subscription and billing data — when a chiropractor subscribes to a paid plan, payment processing is handled by Paddle. ChiroBooking receives confirmation of subscription status and plan details from Paddle but does not store your full card number or raw payment credentials in our database.

Sensitive health information

Booking notes, reasons for visit, or messages you include when booking may contain health information if you choose to include it. Only enter information that is necessary for scheduling or appointment preparation.
Do not use ChiroBooking for medical emergencies. Contact emergency services or a qualified health professional immediately for urgent medical needs.

How we use your information

Create and manage patient and chiropractor accounts, clinic profiles, services, availability, appointments, cancellations, and rescheduling.
Show public clinic profiles, services, pricing, locations, and available booking slots to patients.
Send operational messages including appointment confirmations, cancellation notices, reschedule notices, reminders, password reset emails, and important service notices.
Protect the platform from spam, abuse, fraud, double bookings, and unauthorised access.
Support users, troubleshoot technical issues, maintain audit records, improve reliability, and process chiropractor subscriptions through Paddle.
Meet our legal and regulatory obligations.

How we share your information

With your chiropractor or clinic — when you book an appointment, we share the booking details the clinic needs to prepare for and manage your appointment.
With patients — patients can see their own bookings, confirmations, appointment history, and account information. Patient names and contact details are not shown publicly.
With service providers — Supabase (database, authentication, and file storage), Paddle (subscription billing and payment processing as Merchant of Record), Resend (transactional and operational emails), Twilio (SMS appointment reminders), Google reCAPTCHA (spam and abuse prevention), and Vercel / Railway (hosting and infrastructure).
Publicly — active clinic profiles, services, pricing, locations, and available appointment slots are visible to anyone visiting ChiroBooking. Booked patient names and personal contact details are never displayed publicly.
With authorities or for legal reasons — we may share information where reasonably necessary to comply with law, enforce these terms, protect the safety of users, investigate abuse, or handle a business transfer or restructuring.

Cookies and tracking

ChiroBooking uses cookies and similar technologies to keep you signed in, protect against automated abuse (via reCAPTCHA), and understand how the platform is used. You can adjust cookie settings in your browser, though some features may not work correctly without cookies.

Your rights

Access — request a copy of the personal information we hold about you.
Correction — ask us to correct inaccurate or incomplete information.
Deletion — request that we delete your personal information, subject to legal and operational limits.
Portability — request your data in a machine-readable format where applicable.
Restriction or objection — ask us to restrict or stop processing your information in certain circumstances.
Opt-out of marketing — operational appointment messages are part of the booking service and cannot be fully opted out of while you have an active account. Marketing messages are off by default.
You can update your account profile information directly from your account settings. For other requests, contact us using the details at the bottom of this policy.

Your rights under specific laws

Australian Privacy Act 1988 (Cth) — if you are in Australia, the Australian Privacy Principles (APPs) apply to how we handle your personal information. You have the right to access and correct your personal information and to make a privacy complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have not handled your information in accordance with the APPs.
GDPR (EU and UK) — if you are in the European Economic Area or United Kingdom, you have rights under the General Data Protection Regulation, including the rights described above. Our lawful bases for processing your personal data include performance of a contract (operating your account and bookings) and legitimate interests (security, fraud prevention, and platform improvement). You may lodge a complaint with your local data protection authority.
CCPA / CPRA (California) — if you are a California resident, you have rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of personal information. We do not sell personal information.

Security and data retention

We use account authentication, row-level database access controls, server-side credentials, non-public booking records, and a privacy-safe real-time booking system that does not broadcast patient identity.
No online system can be guaranteed completely secure. Please keep your login credentials private and notify us promptly if you believe your account or booking information has been accessed without your permission.
We retain personal information for as long as needed to provide the service, maintain accurate booking records, support clinics and patients, meet legal obligations, resolve disputes, enforce agreements, and maintain security audit logs. We may retain limited records after account closure where required for these purposes.

International data transfers

ChiroBooking, its infrastructure providers, and its service providers may process your information in countries outside where you live, including Australia, the United States, and other jurisdictions. We take reasonable steps to ensure your information is protected in accordance with applicable privacy laws when transferred internationally.

Changes to this policy

We may update this policy as our product, service providers, or applicable laws change. Material changes will be reflected on this page with an updated effective date. We encourage you to review this page periodically.

Contact us

For privacy questions, access requests, corrections, or complaints, email support@chirobooking.online.
For clinical records or questions about your care, contact your chiropractor or clinic directly.
For complaints about how we have handled your personal information under the Australian Privacy Act, you may also contact the Office of the Australian Information Commissioner at oaic.gov.au.