Privacy Policy and Terms of Use

Last updated: 30 May 2026

Roles and Responsibilities

Healthcare clinics use our platform to facilitate patient check-in.

The clinic remains responsible for managing patient records within its practice management system.

Our platform acts as a technical service provider that processes limited information in order to enable kiosk check-in and platform functionality.

Patients seeking access to or correction of their personal information should contact the clinic directly.

Information we collect from kiosk users, and how we collect it

When a patient uses a kiosk to check in for an appointment, the system may collect one or more of their:

• mobile phone number

• email address

• date of birth

• first and last name

When a patient enters one or more of the above information into the kiosk, the system may collect from the clinic's practice management system:

• appointment details

• appointment check-in status

• patient's PMS identifier number

This information is shared with the clinic's practice management system in order to identify the patient's appointment and mark them as arrived.

This information is not permanently stored, with the exception of technical system logs which store only the patient's PMS identifier and appointment's PMS identifier, and are not available to kiosk or portal users.

The kiosk does not access or display medical records or clinical notes.

Information we collect from portal users, and how we collect it

When clinic staff creates a portal account, we collect and store their:

• email address

• password (stored securely in hashed form)

When a portal user connects PureKiosks to their practice management system and sets up a kiosk, we collect and store:

• clinic or company name

• practice management system API credentials

• company logo (optional)

• kiosk configuration settings

• account login activity and product usage information

Portal users are responsible for ensuring that they have authority to provide any API credentials or integration access.

Technical and usage information

We may collect limited technical information necessary to operate the platform, such as:

• kiosk usage events

• technical system logs

Technical system logs only identify a patient by their PMS identifier, which is uniquely used by the clinic's PMS.

This information is used to maintain the reliability and security of the platform.

Purpose of Collection

We collect and use information for purposes including:

• identifying patient appointments

• enabling patients to check in for appointments

• notifying clinics of patient arrival

• authenticating portal users

• managing kiosk devices and configurations

• enabling integrations with practice management systems

• providing support and maintaining system security.

We do not use patient information for marketing purposes.

Storage and Retention

Our platform is designed to minimise storage of patient information.

Patient appointment data retrieved during kiosk use is processed temporarily and not stored on kiosk devices.

Portal account information may be retained while an account remains active and for a reasonable period afterwards for operational, legal, or security purposes.

API credentials provided by clinics are stored securely and used only to facilitate integration with the relevant practice management system.

Cookies

We store and transmit only one cookie - purekiosks.session_token - between our servers and the client's browser for user session authentication only.

Disclosure of Information

We may disclose:

• kiosk users' personal information outlined in "Information we collect from kiosk users, and how we collect it" to the clinic's practice management system to update appointment status

• portal users' email address and company information outlined in "Information we collect from portal users, and how we collect it" to infrastructure providers who host or operate the platform

We do not sell information.

Security

We take reasonable technical and organisational measures to protect information, including:

• encrypted communications between devices and servers

• secure storage of integration credentials

• access controls within the portal

• automatic kiosk session resets

• monitoring and logging of system activity

Despite these measures, no electronic system can be guaranteed to be completely secure.

Access and Correction

Patients should contact the relevant clinic to access or correct personal information contained in patient records.

Portal users may request access to or correction of their account information by contacting us.

Account Responsibilities

Portal users must:

• maintain the confidentiality of their login credentials

• ensure that information provided when creating an account is accurate

• ensure they have authority to configure integrations and API credentials.

Users are responsible for all activity that occurs under their account

Acceptable Use

Users must not:

• attempt to access accounts or data belonging to other users

• interfere with the operation or security of the platform

• attempt to reverse engineer the platform

• misuse integrations with practice management systems.

Patients using kiosks may only use the kiosk to check in for their own appointments.

Availability of Service

We aim to maintain reliable service but cannot guarantee that the platform will always be available.

The platform may occasionally be unavailable due to maintenance, technical issues, or circumstances outside our control.

Limitation of Liability

To the extent permitted by law, we are not liable for indirect, incidental, or consequential loss arising from the use of the platform.

If a kiosk fails to locate or check in an appointment, patients should notify clinic staff.

Nothing in these terms limits rights that cannot be excluded under applicable law.

Third-Party Integrations

Our platform integrates with third-party practice management systems.

We are not responsible for the operation, security, or availability of third-party systems.

Clinics are responsible for ensuring that any API credentials provided are authorised and valid.

Changes to This Policy

We may update this policy from time to time.

Updated versions will be published on our website and will take effect once published.

Contact

If you have questions about this policy or the platform, or wish to lodge a complaint, please contact:

PureKiosks

Email: info@purekiosks.com