Privacy policy
Last updated: 2026-10-07
This page explains how CentroMed clinic collects, uses and protects personal data received through our website, ad lead forms and CRM.
What we collect
Through the booking and call-back forms on this website: your name, phone number, the service you chose, the page the request was sent from and the advertising source (UTM tags).
Through lead forms in Instagram and Facebook ads (Meta Instant Forms): the answers you entered — name, phone number and replies to the form's questions — and the names of the ad, campaign and form.
When you call or visit the clinic, staff record in our CRM: the reason for your request, appointment date, doctor and service.
How we use it
To contact you, book and remind you of appointments; to assign your request to a responsible staff member; and to assess service quality and advertising effectiveness.
Notifications about new requests are sent to the clinic's private Telegram chat that only responsible staff can access.
We do not sell your data or use it for unrelated advertising.
Google user data (Google Sheets)
Through a Google account connected by a staff member, the clinic's CRM accesses only the Google Sheets files that staff member picked in Google Picker (scope drive.file). No other Drive files, email or contacts are read.
Only new rows of the selected sheet (leads from ad forms) are copied into the CRM. When a lead reaches a positive stage, a value (for example GOOD) is written to that row's status column.
The CRM's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used for advertising, is not sold, and is used only for the feature described here.
Access can be revoked at any time on the CRM's Integrations page or at https://myaccount.google.com/permissions.
Who we share it with
Only clinic staff see your data, and each staff member only the part needed for their work.
Technical providers: Vercel (website hosting), Turso (database), Google (Google Sheets), Meta (Instagram/Facebook ad forms) and Telegram (staff notifications). They process data only on our instructions.
Where the law requires it, data may be disclosed to authorised public authorities.
Retention and security
Request and appointment data is kept for as long as needed to provide care and as required by law, and is then deleted or anonymised.
Access to the CRM is protected by login and password, and connections are encrypted (HTTPS). Google access tokens are stored encrypted.
Cookies and analytics
The website may use cookies and analytics tools (for example Google Analytics or Meta Pixel) to count page views and measure advertising effectiveness. You can disable cookies in your browser settings.
Your rights
You may ask to see, correct or delete your data and withdraw your consent to its processing. To do so, contact us using the details below.
Contact
For privacy questions, contact the clinic by the phone number or email shown at the bottom of this website.