Privacy Policy

1. Who provides the service

CareBond is a service of Creativehublab, a brand of Nomadessencial Unipessoal Lda, company number 518508277, with registered office at Quinta da Malata, Centro Comercial Continente, Loja 240, 8500-510 Portimão, Portugal. For privacy matters you can write to carlasilva@creativehublab.com.

2. The role of the clinic and of CareBond

The clinic is the controller of its patients' data and is responsible for ensuring there is a lawful basis for the follow-up. CareBond processes that data only on the clinic's instructions, as a processor, in order to identify overdue follow-ups, prepare contacts and record replies.

3. Data processed

• Account data: name, email, clinic and encrypted password.
• Data imported by the clinic: name, mobile number, date of last appointment and the general information needed to prioritise contact.
• Records of contact, reply and objection to further contact.

4. Purposes and lawful basis

Account data is used to provide and protect the service. Patient data is processed on the clinic's instructions, under the data processing agreement. It is for the clinic to determine and document the lawful basis for contacting its patients.

5. Retention and security

Patient data is kept only for as long as it is needed. When the clinic uploads a new list, patients who are no longer on it lose their name, dates and quote: only the mobile number and contact dates remain, which are needed to honour opt-out requests and the minimum interval between messages. For appointment confirmations, the name is deleted after 7 days.

When a subscription ends, the clinic is notified by email and has 30 days to download its data (under Settings, “Download the data”). After that, patient data is deleted. Trial accounts that never subscribed are notified after about 5 months without use, and deleted 30 days after the notice if they are not used again.

Minimal opt-out records (mobile number and date) are always kept, so that nobody who asked to stop is contacted again, as are invoices, for the period required by tax law. Each clinic can only access its own data.

6. Sending messages

CareBond does not send messages automatically. The message is prepared, and the clinic decides case by case whether to send it through its own WhatsApp.

7. Your rights

You may request access, rectification, erasure, restriction, portability or object to processing, where applicable. If you are a patient, please contact your clinic first. You may also lodge a complaint with the Portuguese data protection authority at cnpd.pt, or with the supervisory authority in your own country.

8. Cookies

CareBond uses only the technical mechanisms needed to keep you signed in and to protect access. This version uses no advertising cookies.

9. Support conversations

CareBond has an assistant that answers product questions at any hour. Replies are generated by an artificial intelligence model provided by Anthropic, PBC, acting as our processor: it receives the text of each question in order to generate the reply and does not use it for other purposes. Anthropic is based in the United States, so this processing involves a transfer of data outside the European Economic Area, carried out with the safeguards required by the GDPR.

Conversations are also stored on our systems so that we can reply to you and understand what commonly raises questions. They are not shared with third parties for advertising. Your browser keeps a copy of the conversation for 30 days so you can pick it up again; you can delete it by clearing this site's data in your browser.

The assistant is for questions about the product. Please do not write patient names, phone numbers or health information. Phone numbers are removed automatically before the question is sent to the model, stored on our systems or kept in your browser. Names and other freely written information are not detected automatically, and are passed on as written.

When a conversation is passed to a person, the history — already without numbers — is emailed to whoever will handle it. You may ask us to delete a conversation at any time.