Privacy Policy
How SpringOne handles and protects information.
Last updated: October 6, 2026
1. Introduction
This Privacy Policy explains how Spring Clinic ("we", "us") handles information in SpringOne, its internal clinic operations Android application.
2. Scope
This policy applies to SpringOne and this website. It covers authorized staff users and patients whose information is managed in the app.
3. Information We Collect
- Account and staff information (name, contact details, role, staff ID)
- Patient and visit information entered by authorized staff
- Uploaded documents and images
- Follow-up and communication records
- Application activity and security / audit information
4. How We Use Information
To operate clinic workflows, manage patient care, coordinate staff, maintain records, provide support, and keep the platform secure.
5. Healthcare / Patient Information
Patient information is entered and accessed only by authorized staff for care and clinic operations, under applicable confidentiality obligations.
6. Staff Information
Staff information is used to create accounts, assign permissions, and maintain accountability for actions in the app.
7. Data Access and Permissions
Access is role-based and permission-controlled. Staff see only the modules and data required for their work.
8. Data Storage
Information is stored using secure cloud infrastructure. Storage location: [Clinic to confirm hosting region].
9. Data Security
We apply technical and organizational measures such as authentication, permissions, restricted sharing and audit logging. No system can be guaranteed to be completely secure.
10. Data Sharing
We do not sell information. Information may be shared only where required for care, by law, or with service providers who support the platform.
11. Third-Party Services
SpringOne may rely on services such as cloud hosting, authentication, messaging (e.g. WhatsApp) and email delivery. [Clinic to list providers]
12. Cookies / Analytics
This website does not use advertising cookies. [Clinic to confirm any analytics tools]
13. Data Retention
Information is retained as long as needed for clinic operations and as required by medical-record and legal obligations. Retention period: [Clinic to define].
14. User Rights
Subject to applicable law, you may request access to, correction of, or deletion of your information. Submit a Privacy / Data Request.
15. Data Deletion
You can request deletion through the Data Deletion Request page. Some records may need to be retained for legal or medical reasons.
16. Children's / Minor Information
SpringOne is not used by children. Information about minor patients is handled by authorized staff with appropriate guardian involvement as required by law.
17. International Data Transfer
Where information is processed outside your country, we take steps to ensure appropriate safeguards. [Clinic to confirm]
18. Changes to Privacy Policy
We may update this policy. The "Last updated" date above will reflect the latest version.
19. Contact Information
Spring Clinic — response@springskinandhairtreatment.com. Address: [Clinic address]