Privacy Policy

Clinic account data: organisation name, branch details, billing contact, subscription and invoice records, and staff account details such as name, work email, phone number and assigned role.

Patient data entered by clinic staff: patient identity and contact details, visit and treatment records, consent forms and signatures, invoices and payments, and any documents uploaded by the clinic.

Usage and technical data: log-in events, actions recorded in the audit log, device and browser information, IP address, and aggregate analytics used to improve the service.

Marketing enquiry data: information submitted through this website, such as your name, clinic name, email, phone number and message.

To provide, secure, maintain and support the platform, including authentication, tenant isolation and audit logging.

To process subscription billing, issue invoices and manage trials, renewals and suspensions.

To respond to enquiries, arrange demonstrations and provide customer support.

To monitor service performance, diagnose faults and improve functionality using aggregated or de-identified usage data.

We do not sell personal data, and we do not use patient data for advertising or model training.

Every record in the platform is scoped to a clinic identifier (clinic_id) and isolation is enforced at the data layer, so one clinic cannot access another clinic's data.

Trionix personnel do not access patient data in the ordinary course of business. Where troubleshooting requires it, access is granted through a time-limited Support Mode which is explicitly initiated, recorded in the audit log and revoked on completion.

Support Mode is used only to investigate a reported issue and never to extract, copy or analyse patient records for other purposes.

Cloud hosting and database infrastructure providers, which store and process platform data on our behalf.

Messaging providers used to deliver SMS, WhatsApp and email communications initiated by the clinic, such as Meta and Twilio.

Payment and invoicing providers used for subscription billing, and analytics and error-monitoring tools limited to technical and usage data.

Processors are engaged under contracts requiring appropriate confidentiality and security measures, and may only process data on our documented instructions.

Patient and clinical data is retained for as long as the clinic maintains an active subscription, and thereafter for the period stated at termination to allow export.

Audit log entries are retained according to the clinic's plan, and subscription and invoice records are retained for the period required by applicable accounting and tax law.

Marketing enquiry data is retained for up to 24 months from last contact unless you ask us to delete it earlier.

Clinics may access, correct and export their data at any time through the platform, and may request deletion of their tenant on termination.

Patients should direct requests to access, correct, export or delete their records to the clinic holding the record, which controls that data. Trionix assists the clinic in fulfilling such requests.

Staff users may request access to, or correction of, their own account information by contacting their clinic administrator or Trionix support.

We apply encryption in transit, role-based access control, row-level tenant isolation, audit logging of sensitive actions and regular review of access rights.

No system is entirely free of risk. Clinics are responsible for device security, credential hygiene and prompt removal of departed staff.

Confirmed security incidents affecting clinic data are notified to the affected clinic without undue delay.

The clinic remains the data controller for patient data and is responsible for its own regulatory compliance, including local health data protection, consent and medical record-retention requirements in the jurisdictions where it operates.

Trionix provides the technical means to support compliance — consent capture with versioning, audit trails, access control and export — but does not provide legal advice on the clinic's obligations.

We may update this policy to reflect changes to the service or to legal requirements. Material changes are notified in the platform.

Questions about this policy, or requests relating to personal data, can be sent to privacy@trionixglobal.com.