Thirty2OS privacy notice

Thirty2OS is a product of Codes ’n’ Coffee Tech. For website or privacy enquiries, email tech@codesncoffee.com or choose Privacy on the contact form.

The public website helps clinics evaluate the product and contact the team. Patient treatment and clinical records belong in the clinic’s authorised workspace, not a website enquiry.

An enquiry includes your name, email and question. Demo requests also ask for a mobile number, clinic, clinic count and current workflow. Pricing and migration enquiries request relevant clinic details.

We use the information to respond to your request and arrange the next step. Product-update permission is optional and separate; you can withdraw it by contacting the team. Please do not include clinical details, patient identifiers or patient files.

Cloudflare Turnstile checks form submissions for abuse. The website sends accepted enquiries to the team through Amazon SES. An acknowledgement email and a scheduling link may follow. If a customer-management connection is enabled, the same enquiry and its page context can also be used to organise follow-up.

A failed submission leaves your entries available for retry. The public form does not report success until the required internal email has been accepted by the email service. Acceptance by that service is not a guarantee of final inbox delivery.

The website remembers your analytics choice and keeps campaign attribution for the current browsing session. Optional analytics does not load until you allow it. When you choose the free-trial link, the website forwards that explicit consent choice and campaign attribution to the signup application. The signup application records only non-identifying funnel steps when consent is granted; names, contact details, clinic names and form values are not analytics fields.

While you fill in an enquiry, a short-lived draft can be kept in this tab so a topic change or analytics-preference reload does not erase it. The draft is removed after a successful submission and expires after 15 minutes. A non-personal success receipt can survive one analytics-preference reload. Security tokens and submitted contact details are not included in that receipt. See the cookie notice for the storage inventory.

A clinic workspace can contain staff identity and access, patient contacts, appointments, clinical notes and attachments, treatment, prescriptions, consent, lab records, invoices, payments and communication history.

The clinic decides which records to enter, who may access them and why they are used. The service processes those records to provide the clinic’s workflows under its customer agreement. Patients should contact their clinic first about access, correction or deletion of a clinical record.

When a clinic uses AI Command, the request, relevant clinic context and drafted fields are processed to prepare the supported action. Conversations and drafts may be retained before confirmation. An authorised user must confirm before the supported clinic-record change is applied.

Messaging, payment, storage and AI services can have their own processing requirements. Request the provider, hosting and data-processing information for the clinic’s deployment before enabling a workflow that sends information to another service.

Website enquiries and clinic records serve different purposes. Contact the team for an enquiry-retention or deletion request. Existing customers should review their agreement’s retention, export and offboarding terms with the clinic’s responsible person.

An expired trial or a disabled account is not a promise that records will be stored indefinitely. Agree what must be exported, how it will be returned, how long information is retained and what deletion means for the service before relying on it for live records.

Choose Privacy on the contact page or email tech@codesncoffee.com. Explain whether the request concerns the website, your staff account or a clinic record; do not include the record itself.

The team may need to verify your identity or refer the request to the responsible clinic before acting. Report suspected unauthorised access through the security contact route without sending unnecessary patient information.