Privacy Policy

Overview

ClinicDispensr is a web application for natural-medicine practitioners and clinics that manages client records, prescriptions, and dispensing workflows. This policy explains what information the service handles, who controls it, and how it is protected.

Two kinds of information

Practitioner account information — the email address you sign in with and the details of your clinic. We collect this to operate your account. Sign-in uses one-time email codes; we never store a password.

Clinic records — the client names, contact details, prescriptions, and dispensing records that you and your clinic enter (or import) into the service. This can include health information, which is sensitive information under Australian privacy law. Your clinic controls these records. We store and process them solely to provide the service to you, and we do not use them for any other purpose.

Your responsibilities as a practitioner

Because your clinic decides what goes into its records, your clinic is responsible for having a lawful basis to hold that information — including any consent your clients' health information requires — and for keeping it accurate. ClinicDispensr gives you the tools to correct or delete client records at any time.

Emails sent through the service

ClinicDispensr sends transactional email on your behalf — sign-in codes, account invitations, and client-facing emails you trigger (such as prescription notifications). Email delivery is handled by our email provider, Resend, which processes recipient addresses and message content solely to deliver those messages.

Service providers

ClinicDispensr runs on established infrastructure providers acting as processors on our behalf:

• Supabase — database and authentication infrastructure
• Vercel — application hosting
• Resend — transactional email delivery

We do not sell personal information, we do not share it with advertisers, and the application contains no advertising or third-party tracking.

Security

All traffic is encrypted in transit (HTTPS). Access to clinic records is restricted to the authenticated accounts of your clinic. Sign-in uses expiring one-time codes rather than stored passwords.

Retention and deletion

Clinic records are retained while your account is active. You can delete client records from within the service at any time. On account closure, we delete your clinic's records within a reasonable period, subject to any retention obligations that apply to you as a practitioner (health-records retention requirements are yours to meet — export your records before closing your account).

Australian Privacy Principles

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You may request access to, correction of, or deletion of personal information we hold using the contact below. If you believe we have mishandled personal information, contact us first; you may also complain to the Office of the Australian Information Commissioner (OAIC).

Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the "last updated" date above and, where appropriate, notified inside the application.

Contact

Philip Vieyra, ProductivityByPhil · admin@productivitybyphil.com