Demo status
This is a fictional doctor website. It is not a live medical practice, and the public appointment and contact forms are disabled by default. No visitor should submit real patient information until an authorised operator has completed setup and published an approved policy.
What data is collected after activation?
Appointments collect a person's name, phone number, optional email, consultation category, preferred date and time, and consent. General callback requests collect a name, phone and enquiry category. These forms are not intended for medical histories, diagnostic details, financial details, uploaded reports or emergency requests.
How is it used?
An authorised practice operator may use the information to manage appointments and contact requests. Confirmations may be sent when SMTP is configured. No advertising trackers are bundled with this starter package.
Security and access
Booking data is stored in private server-side application storage with authenticated administrator access. The code includes CSRF controls, validation, rate limiting and slot locking. The real operator remains responsible for hosting security, patching, backups, access controls and privacy compliance.
Retention and rights
Before launch, the real practice must define a suitable retention and deletion policy, identify the responsible data controller, provide accurate contact details and fulfil requests under applicable law. Deleting a dashboard record does not necessarily delete backups.
Contact for privacy questions
Replace this placeholder with the verified practice's official privacy contact before opening appointments.
Demo policy template · 2 November 2026