Privacy Policy

The controller of the personal data collected through this website is the sole trader identified below, trading as Kliniqo.

• Owner: pending
• Legal form: sole trader (individual)
• Trading name: Kliniqo
• Tax ID (NIF): pending
• Address: pending
• Sales email: info@kliniqo.es
• Support: soporte@kliniqo.es

This Privacy Policy applies exclusively to the data processing arising from browsing and using the contact form on kliniqo.es, Kliniqo's corporate website.

Kliniqo develops and sells specialized SaaS solutions for clinical environments. The specific processing of personal data associated with each contracted product — including data on patients, professionals, or any other category of data subject — is governed by that product's specific legal documentation, provided to the customer at the time of contracting.

Through this website we only collect the data users voluntarily provide via the contact form:

With each request we record the date and time it was sent, the date this policy was accepted and the browser used, to evidence consent and to avoid duplicate or automated requests.

We do not collect special categories of data (health data, biometric data, etc.) through this website.

If you subscribe to Kliniqo Vet on this site, we also process your account data (name, email address, phone if provided), your clinic's data (name, plan, tax region), billing data (legal name, tax ID and address), the acceptance of the agreement (version, text and date) and the payment status.

• Purposes and legal basis: managing the subscription, payment and service (performance of a contract, Art. 6(1)(b) GDPR) and meeting tax and accounting obligations (legal obligation, Art. 6(1)(c) GDPR).
• Processors: Supabase/Lovable Cloud (account and sign-up; hosted in Ireland, EU), Vercel (web server; functions in Frankfurt, EU), Stripe (payment and invoices) and Resend (subscription emails; sending region in Ireland, EU).
• Transfers: Stripe, Vercel, Supabase and Resend are US-based companies; any access from outside the EEA relies on the EU-US Data Privacy Framework or Standard Contractual Clauses.
• Retention: for the duration of the contractual relationship and, afterwards, for the legal periods (in particular, six years for accounting records and invoices under Article 30 of the Spanish Commercial Code).

Data on your clinic's patients and clients that you enter into the application is processed by us as processor on behalf of your clinic, under the agreement's Data Processing Annex.

To send confirmation and notification emails we use Resend (Resend Inc.), which acts as a data processor. Resend processes the data exclusively to provide the delivery service and does not use it for its own purposes.

Requests are recorded in a database hosted by Supabase (Supabase Inc.) on servers located in the European Union (Ireland), so that we can handle and follow up on them. Access is restricted to the Kliniqo staff who manage requests.

The website and the form are served through Vercel (Vercel Inc.), our web hosting provider.

We do not share data with third parties except where legally required.

Resend and Vercel operate servers in the United States, and Supabase Inc. is a US company even though the data is stored in the European Union. International transfers are covered by the Standard Contractual Clauses approved by the European Commission or by other adequacy mechanisms recognized under the GDPR.

We will retain the data provided through the contact form for as long as necessary to handle your request and, in any case, for the legally required period. Once the inquiry has been handled, the data will be blocked and, once the legal statute of limitations has passed, securely deleted.

You can exercise the following rights at any time:

• Access: find out what data of yours we process.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request that we delete your data.
• Objection: object to the processing.
• Restriction: request that we restrict processing.
• Portability: receive your data in a structured format.
• Withdrawal of consent: at any time, with no retroactive effect.

To exercise any of these rights, email us at info@kliniqo.es stating your name, the right you wish to exercise and, if necessary, a copy of your ID document.

If you believe the processing of your data does not comply with applicable regulations, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

This website is not directed at persons under 14 years of age. We do not knowingly collect data from persons under that age. If you become aware that a minor has provided us with data without parental consent, please contact us so we can delete it.

Kliniqo may update this Privacy Policy to adapt it to regulatory or functional changes. The current version will always be available on this page. We recommend reviewing it periodically.