Privacy Policy

This policy covers:

• Clinic owners and staff who create or use Turnly accounts
• Patients who book or look up tokens on a clinic's public Turnly pages
• Visitors to the Turnly marketing website

Each clinic (tenant) controls day-to-day use of its own patient queue data inside Turnly. We process that data to host and operate the service.

Clinic and staff: clinic name, slug, city, clinic type, address and map coordinates when provided, owner and staff names, emails, phones, roles, schedules, subscription and manual payment records, and support WhatsApp messages you send us.

Patients: name, phone number, doctor/OPD selection, queue date, token number, booking reference, and queue status events (for example booked, arrived, called, completed, skipped, no-show, cancelled).

Technical data: approximate device/browser information, IP-based rate-limit signals, and basic service logs needed to keep Turnly secure and reliable.

Turnly does not ask for medical history, prescriptions, diagnoses, lab results, or consultation notes as part of the product scope.

• Provide booking, digital parchi, reception, doctor, and TV queue features
• Authenticate staff and enforce clinic membership and plan limits
• Activate trials, record manual payments, and manage subscriptions
• Prevent abuse with rate limits and security controls
• Respond to WhatsApp or phone support requests
• Improve product reliability and understand clinic-type adoption (analytics without selling patient lists)

Public booking pages, patient queue views, booking receipts, and waiting-room TV displays are designed so other patients' phone numbers are not shown. TV boards show token numbers and clinic/doctor context, not patient phones.

Doctors see patient names on their own queue tools. Reception and owners may see phones as needed for desk operations. Clinics must not publish staff dashboards on public screens.

We do not sell patient phone lists. We share data only as needed to:

• Host Turnly on infrastructure providers that process data on our instructions
• Communicate with clinic owners about activation, billing, and support
• Comply with law, lawful requests, or to protect the service

Clinic staff can see their own tenant's operational data according to role. Platform administrators can access tenant data required to operate subscriptions and support.

We keep clinic, staff, queue, and payment records while your clinic uses Turnly and for a reasonable period afterward for billing disputes, security, and legal obligations. You may ask support to discuss deletion or export of clinic operational data after subscription end, subject to backup and legal retention needs.

We use authenticated staff access, role checks, tenant isolation (including database row-level security), and server-side secrets for privileged operations. No method of transmission or storage is perfectly secure. Protect staff passwords and limit who can open reception tools.

Clinic owners can update clinic profile details such as address and type in Settings, manage staff access, and contact us to change plans or end subscription.

Patients should contact the clinic that took their booking for day-of queue questions, and may use the clinic's public find or cancel flows when enabled. For privacy requests about Turnly hosting, WhatsApp +92 303 4629456.

Turnly is built for clinic operations. Guardians may book tokens for minors using a contact phone the clinic can reach. Clinics are responsible for how they collect guardian or patient details at the desk.

We may update this Privacy Policy as Turnly evolves. The date at the top of this page will change when we do. Continued use after an update means you accept the revised policy.

Turnly is operated by The Web Xperts. Privacy and data questions: WhatsApp +92 303 4629456.