Privacy policy

Scope of this policy

This policy describes data processing when you visit getdora.app or contact DORA AI through this website. Services commissioned by a clinic or another organisation are also governed by their proposal and any applicable data protection agreements. This page does not authorise access to medical records or replace the information each organisation must provide to its patients.

Conversation demonstration

The conversation demonstration uses prepared replies and fictional appointment times within this page. It does not contact an AI model, WhatsApp or a calendar. Text entered is not transmitted and stays only in memory during the visit; restarting or reloading clears the conversation from the page. Do not enter personal or medical information. No real appointment is created.

Data and purposes

• Browsing and security: delivering the website may involve the hosting provider processing your IP address, date and time, requested URL and technical browser information. The purposes are to deliver pages, diagnose faults and protect the service, based on the legitimate interest in its operation and security.
• Enquiries: if you contact us by email or WhatsApp, the information you choose to provide is used to respond and, if requested, prepare a proposal. The basis is taking pre-contractual steps at your request or the legitimate interest in responding to a professional enquiry, depending on the context.
• Legal obligations: where a contractual relationship exists, documentation needed to meet applicable obligations is retained.

After completing the form, clicking “Continue to WhatsApp” opens WhatsApp directly with your details included in the link received by that provider. Typing in the form does not transmit data to DORA AI. You confirm sending the message within WhatsApp, where you can review it before sending.

Health information and third-party data

Do not enter patient names, diagnoses, medical records, identity documents or other sensitive information in the commercial contact form. Describe your organisation’s needs in general terms. This channel does not provide medical care and must not be used for emergencies. Processing data as part of commissioned services requires the relevant responsibilities, instructions and safeguards to be established beforehand.

Providers and external links

Cloudflare provides infrastructure to host and deliver this website, as well as Web Analytics for technical performance measurements without tracking cookies. These functions are separate from Google Analytics and may process technical data needed to deliver and protect the service. Read its privacy policy.

Links to WhatsApp, Instagram and other providers lead to independent services with their own policies. Embedded social content is not loaded. The Meta advertising pixel loads only with the separate permission described below. Email and messaging services may involve providers operating outside your country; their policies describe relevant transfers and safeguards. We do not claim that all data stays within the European Union.

Retention

Form drafts remain in page memory and are not deliberately saved in cookies or persistent browser storage. Data received by email or messaging is retained for as long as needed to handle the enquiry or relationship and, where applicable, meet legal obligations or handle claims. Technical logs depend on the service and hosting configuration. You can request information about the processing of your enquiry using the contact above.

Your rights

Where data protection law applies, you may request access, correction, deletion, restriction, objection or portability in the circumstances provided by law. If processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. You can complain to the competent data protection authority, particularly in the country of your habitual residence, workplace or the alleged infringement. To exercise your rights, use the email address on this page and explain your request; additional identification will only be requested if necessary.

Analytics, automated decisions and changes

With your consent, Google Analytics 4 measures page visits, website language, contact clicks, WhatsApp openings and language changes. Google also processes cookie identifiers and technical browser and connection information needed for its service. We do not send form fields or message contents in our events; free-form URL parameters and WhatsApp link parameters are excluded. WhatsApp openings represent contact intent, not received messages or confirmed appointments. Google Signals and advertising personalisation are disabled in the tag.

Google provides this service; read its privacy policy and partner site information. Processing may involve international transfers under Google’s terms and safeguards. Choices and cookies have a configured lifetime of 180 days; data received by Analytics follows the property’s retention settings. You can withdraw consent through “Cookie preferences” at the bottom of the page. Withdrawal stops future collection without deleting data already processed. We do not use these events for automated decisions with legal or similarly significant effects. See the cookie policy.

Meta advertising measurement

With your specific permission for “Advertising measurement · Meta”, the Meta pixel measures visits and contact actions to attribute them to Facebook and Instagram ads. This permission is separate from Google Analytics: previously accepting analytics does not activate Meta. Your choice is remembered for 180 days under dora.marketing-consent.v1 and applies across English, French and Spanish.

Meta receives the visited page, its language, the interaction type and technical connection data, including IP address, browser and cookie identifiers. It may use _fbp and, when an advertising click identifier is present, _fbc; their lifetime and possible renewal depend on Meta’s service. Read the Meta cookie policy. We do not send names, emails, phone numbers, form fields or messages in these events. Advanced matching and automatic events are disabled. Campaign and click parameters may be included in measurement; they must not contain personal data. The pixel does not load when the landing URL or its referrer contains unsupported parameters.

The Contact event represents an action to open WhatsApp, email or a phone call; it does not confirm a sent or received message, appointment or sale. You can select each purpose, accept all or reject all in the notice and change your choice through “Cookie preferences”. Withdrawing Meta permission stops future events and clears _fbp and _fbc cookies accessible to the application, without deleting data Meta already received. Cookies on Meta’s own domain are managed through your browser or Meta account. Refusing does not prevent use of this website.

Processing relies on your consent and may involve international transfers under the provider’s terms and safeguards. Read the Meta privacy policy. No patient data is transmitted and the simulated demo does not generate conversions.

The same permission also controls the Conversions API: our Cloudflare server forwards PageView and Contact to Meta with the same event identifier as the pixel, so both deliveries represent one action. The server receives only the known page, event type, consent and action identifier; it also uses the connection IP, browser and existing Meta cookie identifiers. It does not receive form fields or messages through this endpoint and does not retain event payloads. The first-party dora_marketing_consent cookie reflects the active permission and expires with it, within 180 days. Withdrawing permission removes it, stops new browser/server events and cancels pending browser requests; it cannot recall an event already received by the server or Meta.