Legal

Privacy policy

Everything this site collects about you, why we have it, and how to make it go away.

The short version

The guides are free to read with no account and no email. We ask for an address in one place only: to send you the PDF.
An account adds your name, your clinic, the lessons you finish and the notes you write. Nothing else.
No analytics cookies, no advertising pixels, no trackers. Nothing about you is sold, rented or traded.
The database runs in Canada. One email to hello@clinicboostacademy.com and we delete your file.

In effect since 26 September 2026

What this covers

ClinicBoost Academy publishes marketing training for private clinics. This policy covers this website and the member workspace behind the login, and nothing else — not the sites of the clinics who take our courses, and not whatever you build after following them.

The training is sold to professionals. It is not aimed at anyone under 18, and we do not knowingly collect anything from a child.

We never see your patients

This is a course. You watch lessons, download templates, and apply them inside your own clinic with your own tools. At no point do you hand us a patient list, an appointment file, a chart or a clinical note — and there is nowhere in this system to put one if you tried.

So we are not a processor for your patient records, and nothing you do here moves protected health information into our hands. Those obligations stay entirely on your side, in the tools you already run.

What we collect, and why

The full list. If it is not here, we do not have it.

What	Why we have it	How long we keep it
Your email address	To open the guide PDFs you asked for, and to tell you when a new guide goes up.	Until you ask us to remove it.
Your clinic name	To know what kind of clinic our guides reach. The field is optional and the download works without it.	Until you ask us to remove it.
Which guide you asked for	To know which subjects people actually want next.	Until you ask us to remove it.
Your name, email and clinic, if you open an account	To create the account, sign you in, and address you by your name.	As long as the account exists.
Your password	To sign you in. We never see it: it is hashed before it reaches storage, and there is no screen anywhere that shows it back.	As long as the account exists.
The lessons you complete and the notes you write	To show your progress, and to hand your notes back to you on the next visit.	As long as the account exists.
Server logs: IP address, browser, page, timestamp	Kept by our host to serve the pages and to absorb abuse. We do not read them to profile anyone.	A few days, by the host.

Your email address
Why we have itTo open the guide PDFs you asked for, and to tell you when a new guide goes up.
How long we keep itUntil you ask us to remove it.
Your clinic name
Why we have itTo know what kind of clinic our guides reach. The field is optional and the download works without it.
How long we keep itUntil you ask us to remove it.
Which guide you asked for
Why we have itTo know which subjects people actually want next.
How long we keep itUntil you ask us to remove it.
Your name, email and clinic, if you open an account
Why we have itTo create the account, sign you in, and address you by your name.
How long we keep itAs long as the account exists.
Your password
Why we have itTo sign you in. We never see it: it is hashed before it reaches storage, and there is no screen anywhere that shows it back.
How long we keep itAs long as the account exists.
The lessons you complete and the notes you write
Why we have itTo show your progress, and to hand your notes back to you on the next visit.
How long we keep itAs long as the account exists.
Server logs: IP address, browser, page, timestamp
Why we have itKept by our host to serve the pages and to absorb abuse. We do not read them to profile anyone.
How long we keep itA few days, by the host.

Cookies

Two, both strictly functional. Neither one follows you anywhere.

cb_guide_access — set when you give an email for a guide PDF, so you never have to type it twice. It holds a date and a signature, not your address. It lasts a year.
sb-… — the sign-in cookies for the member workspace. They keep you logged in and they go away when you log out.

There is no analytics cookie and no advertising pixel on this site. That is why you are not looking at a cookie banner.

Who else touches it

Two suppliers, each handling the data only on our instructions:

Supabase — the database, the accounts and the sign-up confirmation emails.
Vercel — the hosting, and the short-lived access logs that come with it.

That is the entire list. We do not sell, rent, trade or hand your information to advertisers, data brokers, or anyone else. No one buys their way onto this page.

Where it lives

The database sits in Supabase's Canadian region, in Montréal. Your account, your notes and the guide emails never leave it.

The pages themselves are served by Vercel from a network of servers around the world, so the request for a page may be handled outside Canada even though nothing stored about you is.

How it is protected

The site is served over HTTPS only, and passwords are hashed before storage — we could not read yours if we wanted to.

Every table holding your data carries row-level security: a signed-in request can only ever return that person's own rows. The list of guide emails is write-only from the browser, so it cannot be read back out by anyone visiting the site.

No system is perfect. If we ever find a breach that puts you at real risk, we will tell you and notify the regulator, as the law requires.

What you can ask for

At any moment, without giving a reason, you can ask us to show you everything we hold about you, correct it, delete it, stop emailing you, or send it to you in a portable file.

One message to hello@clinicboostacademy.com does all of it, and we answer within 30 days. Deleting an account takes the profile, the progress and the notes with it.

Where we hold something on your consent — your email address for the guides — you can withdraw that consent at any time, and any mailing we send will carry a one-click unsubscribe.

If you think we handled a request badly, you can complain to the Commission d'accès à l'information du Québec, or to the Office of the Privacy Commissioner of Canada. Wherever else you are writing from, send us the request anyway: we apply the same rules to everyone.

The contact form

One thing to be straight about: the form on the contact page is not connected yet. Pressing Send shows a confirmation, but nothing is transmitted and nothing is stored. Until it is wired up, write to hello@clinicboostacademy.com and a person will read it.

When this changes

If we change how we handle your data, we change this page and move the date at the top. When the change matters and we have your address, we will write to you rather than count on you re-reading the page.

A question, or a request

Write to us. Access, correction, deletion, or just wanting to know what we have on file — it all goes to the same place, and it is a person who answers.

hello@clinicboostacademy.com