Privacy
Totem Medical Care processes personal data (and, where the clinic records it, health-related visit data) so patients can check in, join a queue, and print a ticket. This notice describes the product. The contracting clinic remains responsible for how it uses patient data in care. Spanish: /privacidad. Brazil / LGPD: /privacidade.
1. Who is responsible
Medical Care SaaS operates the kiosk and admin dashboard on behalf of the contracting clinic. Privacy contact: contacto@medicalcaresaas.com.
2. Data we may process
- Identification entered at the kiosk (name, ID / national document number).
- Visit data (appointment, insurance or self-pay, lab results pickup) synced with Medical Care SaaS.
- Admin account data (email, phone, city) for trial signup or subscription.
- Technical data (logs, IP, device) for security and support.
3. Why we process it
To identify the patient, manage the queue, print tickets, run the subscription, and provide support. Legal bases depend on the clinic’s country: performance of the clinic contract, legal obligations, legitimate interest in security, and consent when we ask for it (for example non-essential cookies).
4. Sharing
Kiosk data syncs with the clinic’s Medical Care SaaS workspace. Infrastructure providers (hosting, email, messaging) may process data under contract. We do not sell personal data.
5. Retention
We keep data for as long as the clinic contract, legal duties, or the defense of legal claims require. Trial accounts may be archived or deleted after inactivity.
6. Your rights
You may request access, correction, deletion, or objection under applicable law. Write to contacto@medicalcaresaas.com. Patients can also ask the clinic that operates the kiosk. Ecosystem policy: medicalcaresaas.online/privacidad.
7. Security and cookies
We use HTTPS, access controls, and rate limiting. The browser may store language preference (totem_locale), market (totem_market), consent, and dashboard session. Analytics cookies, if added later, will require consent where the law requires it.
8. International processing
Depending on infrastructure, data may be processed outside the clinic’s country, with contractual and technical safeguards.
9. Healthcare privacy
This page is a product notice, not a clinic Notice of Privacy Practices and not a HIPAA business-associate agreement. If the clinic is a covered entity, its own legal duties still apply.
10. Updates
We may update this notice. The date at the top is the current version.
Kiosk / check-in: by using the kiosk, the patient confirms the data they enter is accurate and authorizes its use to identify them and manage the queue at that facility.