Privacy Policy
Last updated: 25 August 2026
This policy describes how tcm365 actually handles data today, including real patient accounts and real clinic listings, in line with Singapore's Personal Data Protection Act (PDPA). It hasn't yet been reviewed by a qualified privacy professional. Treat it as a good-faith draft until it has been.
Information we collect
- Account information: if you create an account, we store your email address, an optional profile picture, and your saved clinics, review history, and clinic view history.
- Appointment requests: when you request an appointment with a clinic, we collect your name, phone number, and optionally your email and a message, and share these directly with that clinic so they can contact you.
- Reviews: reviews you submit include your rating, comment, and (if logged in) an association with your account.
- Usage data: pages you visit and clinics you favorite are stored to power features like "recently viewed" and "saved clinics". If you're not logged in, favorites and comparisons are kept only in your browser (localStorage) and never sent to us.
Clinic and business information
If you register or claim a clinic listing, we additionally collect the clinic's business details (name, address, contact information, practitioner names and credentials, pricing) that you submit, along with the account email of the owner or representative managing that listing. Some of this information, the clinic's public listing details, is displayed publicly on tcm365 by design; your personal account email is not shown publicly.
How we use your information
We use the information above solely to operate tcm365: matching you with clinics, displaying your saved clinics and review history, forwarding appointment requests to the relevant clinic, sending transactional emails (appointment confirmations and status updates), and moderating reviews. We do not sell your personal data, and we do not use it for advertising.
Who we share it with
An appointment request is shared only with the specific clinic you requested it from, so they can follow up with you. We use third-party service providers to run the site: Supabase for our database and authentication, and Resend for sending email notifications. Your data passes through them only as needed to provide the service. We do not otherwise disclose personal data to third parties, except where required by law.
How long we keep it
We keep account, review, and appointment-request data for as long as your account is active. If you delete your account, we delete your personal data within a reasonable period, except where we're required to retain it (for example, to resolve a dispute or comply with a legal obligation).
Your rights under the PDPA
You can update your profile picture or delete a review at any time from your account. You also have the right to: request access to the personal data we hold about you; request correction of inaccurate data; and withdraw consent for us to continue collecting, using, or disclosing your data (which may mean we can no longer provide parts of the service, such as forwarding appointment requests). To exercise any of these rights, or to request deletion of your account and associated data, contact us using the details below.
Cookies
We use a session cookie to keep you signed in. We don't use third-party advertising or tracking cookies.
Contact
Questions about this policy, or requests relating to your personal data, can be sent to tcmlysg@gmail.com.