Your information matters.
How personal information is handled in this independent demonstration website.
Effective: 2 November 2026. This is a demonstration website, not an official website or data processor for Prince ENT Care Clinic. The site administrator operating the deployment is responsible for data collected here.
What we collect
Appointment requests ask for your name, mobile number, consultation category, visit type, preferred date and time. Demo enquiries ask for your name, mobile and a short general message. We do not request symptoms, diagnoses, prescriptions, identification documents or medical histories.
Why we collect it
Data is used only to show how a booking and enquiry management workflow functions. The demo administrator can view and update appointment statuses. No automated text, email or WhatsApp is sent to any real clinic, doctor or patient.
Storage and access
Booking and enquiry records are stored in JSON files inside the private_data directory, which should remain outside the website’s public document root. Admin access is protected by a password and server-side sessions. Data is not encrypted at rest by this project; the hosting operator must secure server access and backups.
Retention and deletion
The administrator can permanently delete individual bookings and enquiries through the admin dashboard. For public deployment, the operator should establish a clear retention period, data deletion process and applicable legal compliance before accepting patient information.
Cookies and third parties
Essential session cookies are used to protect forms and admin access. Google Fonts and embedded Google Maps may process technical usage data according to their respective policies. No behavioural analytics or advertising trackers are included.
Your choices
Do not submit real personal information if you are merely exploring the demo. To correct or delete records, contact the operator who deployed this website. Requests are not delivered to the actual clinic.
Deployment notice
Before real clinical use, obtain the clinic’s written authorisation and implement suitable privacy notices, retention policies, consent management, verified schedules and appropriate technical safeguards. This starter implementation is not a patient medical record system.