Privacy Policy

Zionlead ("we", "us", "our") provides a managed WhatsApp lead-qualification and appointment-booking service for dermatology and aesthetic clinics in India. This policy explains what personal data we handle, why, and what rights you have. It applies to visitors of zionlead.com, to clinics who use our service, and to patients and enquirers who message a clinic's WhatsApp number that we operate on the clinic's behalf.

1. Who we are

Zionlead, Jaipur Co-works, Sector 7, Mansarovar, Jaipur, Rajasthan, India.
Email: info@zionlead.com · WhatsApp / Phone: +91 83069 07504

When we handle enquiries for a clinic, the clinic decides why and how patient data is used (it is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023). We process that data on the clinic's instructions as its Data Processor.

2. Data we collect

From people who message a clinic on WhatsApp:

• Your WhatsApp name and phone number
• The messages you send, including the skin or hair concern you describe, how long you've had it, treatments you've tried, and your preferred appointment time
• Appointment details (date, time, status, reminders sent, rescheduling or cancellation)
• If you choose to give it after a visit, your feedback about the clinic
• Basic information about the ad you clicked to start the chat, where Meta provides it

From clinics and website visitors: the name, phone number and message you send us through our contact form or WhatsApp, and the business details a clinic gives us to set up the service (treatments, pricing, FAQs, working hours, calendar access).

We do not ask for medical records, prescriptions, payment card details or government ID numbers over WhatsApp.

3. How we use it

• To reply to your enquiry, answer questions about treatments and pricing, and book, remind, reschedule or cancel appointments
• To send follow-up messages if you haven't replied, which you can stop at any time (see section 7)
• To flag medical or safety questions to the clinic's staff so a person answers them instead of the automated system
• To give the clinic reports on enquiries and bookings
• To keep the service working, fix errors and prevent misuse

We do not sell personal data, and we do not use one clinic's patient data for another clinic or for our own marketing.

4. Automated replies and AI

Messages are answered by an automated system. Standard questions are answered from information the clinic has provided. Some free-text replies are processed by an AI model (Anthropic's Claude) to understand what you mean and reply appropriately. The automated system does not diagnose conditions or give medical advice; questions like that are passed to the clinic's team. You can ask to speak with a person at any time.

5. Service providers we use

We share data only with providers needed to run the service, under their own security and privacy terms:

• Meta Platforms (WhatsApp Business Platform) — to send and receive WhatsApp messages
• Google (Google Sheets, Google Calendar, Gmail) — to record enquiries, book appointments and send notifications to the clinic
• Anthropic — AI processing of some message text, as described in section 4
• Hostinger — servers that host our website and automation system in India

Some of these providers may process data outside India. We may also disclose data if required by law or a lawful order.

6. How long we keep it

We keep enquiry and appointment data for as long as the clinic uses our service, and for up to 12 months after, unless the clinic asks us to delete it sooner or the law requires us to keep it longer. When a clinic ends the service, we return or delete its data on request.

7. Your choices and rights

• Stop messages: reply STOP in the WhatsApp chat and we will stop sending follow-ups and reminders.
• Access, correct or delete: you can ask for a copy of your data, or ask us to correct or delete it.
• Withdraw consent at any time, and nominate someone to exercise these rights on your behalf.

Email info@zionlead.com with the phone number you messaged from. Where the request concerns a clinic's patient data, we will act on it together with the clinic. We aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

8. Security

Data is transmitted over encrypted connections and stored in access-restricted systems. Each clinic's patient data is kept separate from other clinics'. No system is perfectly secure, but if a breach affecting your data occurs, we will notify the clinic and affected people as required by law.

9. Children

Our service is intended for adults. If a person under 18 contacts a clinic through our system, the clinic is responsible for obtaining parental consent before providing treatment.

10. Changes to this policy

We may update this policy as the service changes. The latest version will always be on this page with its updated date.

11. Contact

Questions about this policy or your data: info@zionlead.com or WhatsApp +91 83069 07504.