Legal

Privacy Policy

Last updated: August 2026

Important: This policy covers our website and the purchase of Alnora. Alnora is a self-hosted WordPress plugin — when you install it, your patients’ data is stored on your own server and is never sent to us. How that data is handled is described in our Data Processing Addendum (DPA / GDPR).

Contents

  1. Who we are
  2. What we collect
  3. How we use it
  4. Legal bases
  5. Who we share with
  6. The Alnora plugin
  7. Cookies
  8. Retention
  9. Your rights
  10. Contact

1. Who we are

Alnora (“we”, “us”) provides the Alnora WordPress plugin and operates alnora-booking.com. For the purposes of data protection law, Alnora is the data controller for this website. You can reach us using the details in the Contact section.

2. What we collect

We keep data collection on this website to a minimum:

  • Contact form — your name, email address, chosen subject and message, so we can reply.
  • Purchases — orders, licences and billing are handled by our checkout provider, Freemius. We receive your name, email and licence/subscription status; we do not see or store your full card details.
  • Technical data — standard server logs (IP address, browser, pages requested) for security and diagnostics.

3. How we use it

  • To respond to your enquiries and provide support.
  • To process orders, deliver licences and send transactional emails (receipts, licence and update notices).
  • To keep the website secure and working.

We do not sell your personal data, and we do not use it for unrelated marketing without your consent.

4. Legal bases

We rely on: performance of a contract (to provide the product and support you bought); legitimate interests (to run and secure the website and reply to enquiries); and consent where required (e.g. optional analytics). You can withdraw consent at any time.

5. Who we share with

We use a small number of trusted providers to run the business:

  • Freemius — checkout, licensing, invoices and subscription management.
  • Hosting & email — our website host and the mail service used to send and receive messages.

These providers process data on our behalf under their own agreements. We may also disclose data where required by law.

6. The Alnora plugin

Alnora runs entirely on your own WordPress site. Appointments, patient details and medical records are stored in your database, on your server — we have no access to them. When you enable an integration (payments, SMS, calendar sync, telehealth, automation), data flows directly from your site to that provider, not through us. See the DPA / GDPR page for the full breakdown.

7. Cookies

The website uses essential cookies it needs to function and, where applicable, to run the checkout — these do not require consent. We also use Microsoft Clarity for analytics, which is a non-essential cookie: it only loads after you agree.

When you first visit, a consent banner lets you accept or reject non-essential cookies, and you can change your choice at any time. For the full list of cookies we use — what each one does and how long it lasts — see our Cookie Policy.

8. Retention

We keep contact messages for as long as needed to handle your enquiry and our records, and order/licence data for as long as required for accounting and legal obligations. We then delete or anonymise it.

9. Your rights

Under the GDPR and similar laws you can request access to, correction of, or erasure of your personal data; object to or restrict processing; and request portability. To exercise any of these, contact us — we respond within the legal timeframe. You also have the right to complain to your local data protection authority.

10. Contact

Email admin@alnora-booking.com or use our contact page.

See also our Terms and DPA / GDPR.