Clinic Calendar Companion
Privacy Statement
Effective date: October 5, 2026
This Privacy Statement explains what information the Clinic Calendar Companion (the “Service”), operated by The Spine & Brain Coalition, collects, how it is used, and the choices you have.
1. Information we collect
- Account information: your name, work email address, role, and a securely hashed password.
- Scheduling information: events you or administrators create, such as clinic sessions, call, surgery, conferences, virtual meetings, availability, away time, inbox entries, and personal events.
- Connected calendar data: if you connect a Microsoft account, event titles, times, and locations from your Outlook calendar, along with the access tokens needed to sync them.
- Technical information: basic session and log data needed to keep you signed in and operate the Service securely.
2. How we use information
We use this information to authenticate you, display and manage schedules, enforce role-based access, sync connected calendars, send service emails (such as account invitations), and maintain the security and reliability of the Service. We do not sell your information or use it for advertising.
3. Who can see your information
Shared work calendar entries are visible to users whose role permits that category. Personal events are private by default: they appear only on your own personal calendar and are not shown to other users, including administrators. If you choose to share a personal event, it becomes visible on the work calendar. Synced Outlook events are visible only to you.
Administrators can see account details (name, email, role) to manage users.
4. Patient information
The Service is a scheduling tool, not a medical record. Please do not enter protected health information (PHI) beyond what Coalition policy permits for scheduling, and never place patient details in personal events or free-text notes.
5. Service providers
The Service is hosted by a cloud platform provider and uses an email delivery service for notifications. If you connect a Microsoft account, data is exchanged with Microsoft under the permissions you approve. These providers process data only to operate the Service.
6. Retention
Scheduling data is kept for as long as it is needed for Coalition operations. When an account is removed, the user’s sign-in credentials and connected-calendar tokens are deleted; shared schedule records may be retained for operational continuity.
7. Security
We use encrypted connections, hashed passwords, and role-based access controls to protect information. No system is perfectly secure, so please use a strong password and report suspected misuse to an administrator promptly.
8. Your choices
You can change your password and connect or disconnect a Microsoft account from Settings, switch any personal event between private and shared, and delete your own personal events at any time. To correct account details or request removal, contact your administrator.
9. Changes to this statement
We may update this Privacy Statement from time to time. The effective date above reflects the latest version.
10. Contact
Privacy questions should be directed to your Coalition administrator or practice management team.
