Minimal data, used for clear purposes

What is recorded

When you view a clinic profile or use a clinic contact button, the site may record the clinic, event type, time, referring page, broad country and a random first-party session ID. The session ID helps distinguish repeat activity without asking who you are.

Clinic-owner accounts

When clinic accounts open, CLARA will record the account holder’s business contact details, clinic role, branch access, submitted profile changes and related review history. Authentication and security events will be processed by the account provider. Clinic accounts are for business administration and must not contain patient records or health information.

What is not recorded

The site’s own public-directory event tables exclude IP addresses, raw browser strings, names, email addresses, telephone numbers and health information.

Service providers

Hosting analytics may be provided by Vercel. Clinic photos may be retrieved through Google Maps Platform when configured. Use of Google Maps features is subject to the Google Maps terms and Google Privacy Policy. The clinic portal’s authentication provider will be identified here before account invitations begin.

Retention and contact

Privacy questions and requests can be sent to hello@clara.my. Retention periods for clinic-account data will be published before clinic accounts accept personal information.