Privacy Policy

Information We Collect

When you book an appointment or complete an intake form, we may collect:

• Identity details such as your name, date of birth, gender, and address.
• Contact details such as phone number and email address.
• Guardian, emergency contact, and family information, where applicable.
• Health information relevant to your visit, such as your reason for visit, medical and developmental history, current condition, and therapy goals.
• Appointment and attendance records, clinical notes, and prescriptions.

How We Use Your Information

We use the information you provide to:

• Schedule, confirm, and manage your appointments.
• Provide safe, appropriate clinical care and maintain your patient record.
• Contact you about your appointment, such as confirmations, reschedules, or reminders.
• Maintain accurate records for continuity of care across visits.
• Meet our legal and regulatory obligations as a healthcare provider.

How We Share Your Information

We do not sell your personal or health information. We only share it with the clinical and administrative staff involved in your care -- such as your assigned therapist, front desk, and clinic management -- and with service providers who help us operate the clinic (for example, hosting and file storage), under obligations to keep it confidential. We may also disclose information where required by law or to protect the safety of a patient or others.

Data Retention

We retain patient records for as long as needed to provide care, support continuity of treatment, and meet legal and professional record-keeping requirements. Records are never permanently deleted outright; inactive records are archived rather than erased, consistent with standard clinical record-keeping practice.

Data Security

We restrict access to patient information to authorized staff on a need-to-know basis, and each staff member's access is scoped to their role. Reasonable administrative and technical safeguards are in place to protect your information from unauthorized access, loss, or misuse.

Your Rights

You may request access to, correction of, or a copy of your patient record by contacting us using the details below. If you booked as a guest and later wish to have your information removed before a Patient Record is created, you may also contact us to make that request.

Children's Information

Sandbox Clinic provides pediatric rehabilitation services, so we routinely collect information about children as part of their care. This information is provided by a parent or guardian during booking and intake, and is used solely to support the child's treatment.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date above reflects the most recent revision.