Privacy policy

What this page covers

This policy applies to chiroflow.io, the marketing website. It explains what we collect when you browse the site or fill in a form here.

It does not cover data inside the ChiroFlow application at app.chiroflow.io. Patient records held there are processed on behalf of your practice under a business associate agreement, and your practice — not ChiroFlow — decides how that data is used.

What we collect

What you tell us. When you join the waitlist or apply as a design partner:

• Your name and work email address
• Your practice name, your role, and the size of the practice
• What software you use now, your timeline, and what is costing you time
• Whether you are open to a call

Only the email address is required. Everything else is optional and exists so that a conversation starts somewhere useful.

What is collected automatically.

• Analytics. Aggregate page views and referrers, collected without cookies and without any identifier that follows you between sites. We cannot single you out from it.
• Submission metadata. With a form submission we store the page you submitted from, any campaign parameters in the URL, and a one-way hash of your IP address. The hash exists to rate-limit abuse; we do not keep the address itself.
• Spam protection. Form submissions are checked by Cloudflare Turnstile, which sets no tracking cookie and does not profile you.

We do not use advertising or cross-site tracking cookies, which is why this site has no cookie banner asking you to accept them.

Why we use it

• To reply to you and to arrange setup — the reason you filled the form in
• To understand which pages are useful, in aggregate
• To keep automated abuse off the forms

We do not sell your information, rent it, or share it with advertisers. We do not send you anything you did not ask for.

How long we keep it

Waitlist and application details are kept while your enquiry is live, and for up to24 months after our last contact. After that they are deleted. If you ask us to delete them sooner, we do it — see below.

Who else touches it

Only the service providers needed to run the site and reply to you. Each is listed, with what it handles and where it runs, on the subprocessors page. We do not add one without updating that page.

Your choices

You can ask us to:

• Tell you what we hold about you
• Correct it
• Delete it
• Send you a copy

Email [email protected] and we will action it within 30 days. You do not need to give a reason, and asking costs you nothing. Depending on where you live you may have additional statutory rights; exercising them will never make us treat you differently.

Children

This site is for practice owners and staff. We do not knowingly collect information from anyone under 18 through it.

Changes

If this policy changes we update the date at the top. If a change materially affects information you have already given us, we will email you rather than rely on you noticing.