Privacy Policy
1. Introduction
The Pro2col ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or use The Pro2col ("the Service").
By accessing or using the Service, you agree to this Privacy Policy.
2. Information We Collect
2.1 Information You Provide to Us
We may collect personal information that you voluntarily provide, including:
- Name
- Email address
- Contact information
- Account login details
- Payment details (processed securely through third-party services)
- Messages, uploads, or other content you submit
2.2 Information Automatically Collected
When you use The Pro2col, we may automatically collect:
- IP address
- Browser type and device information
- Usage data
- Cookies and tracking data
Cookies help us improve the Service, analyze usage, and store your preferences. You can disable cookies through your browser settings.
3. How We Use Your Information
We may use personal information to:
- Operate and maintain the Service
- Create and manage user accounts
- Communicate with you
- Provide customer support
- Improve functionality and user experience
- Ensure security
- Comply with legal obligations
3.1 SMS/Text Messaging Communications
By explicitly opting in via the consent checkbox on our website forms or during the booking process, you consent to receive automated text messages from The Pro2col. These messages may include appointment confirmations, reminders, pre- and post-care instructions, follow-up messages, and promotional communications related to our services. Message frequency varies. Message and data rates may apply. You may opt out of text messages at any time by replying STOP to any message. For help, reply HELP or contact us at connect@thepro2col.com.
4. Sharing and Disclosure
We do not sell personal information.
We may share information with:
- Trusted third-party service providers
- Legal authorities when required by law
- Business partners (only with your consent)
All third parties are required to protect your data in accordance with this Privacy Policy.
All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties or affiliates for marketing or promotional purposes.
5. Data Retention
We retain data only as long as necessary for operational, legal, or security purposes. After that, we securely delete or anonymize information.
6. Security
We use industry-standard security measures to protect your information. However, no online service can guarantee complete security.
7. Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Request corrections
- Request deletion
- Withdraw consent
- Object to processing
- Request data portability
To exercise these rights, please contact us.
8. Third-Party Links
Our Service may contain links to external websites. We are not responsible for the privacy practices of those sites. Please review their privacy policies before providing any personal information.
9. Children's Privacy
The Pro2col is not intended for individuals under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy periodically. Updates become effective upon posting.
Continued use of the Service constitutes acceptance of the updated Privacy Policy.
10.1 Mobile App and Member Account Data
The PRO2COL mobile app is a members-only companion experience for active PRO2COL members. In v1, the public website does not include a member login portal. The mobile app is the primary PRO2COL-controlled logged-in member experience.
The app may collect, store, or display information such as:
- Account information, including name, email address, phone number, and authentication details
- Membership information, including membership tier, renewal information, and app access status
- Protocol and session information, including assigned protocol details, upcoming sessions, past sessions, practitioners, session attendance, and usage allocation
- Member-entered Reflections or check-ins, where enabled
- Notification preferences and mobile push notification tokens, where enabled
- Device, app version, diagnostic, and technical information needed to operate and secure the app
Pabau
The PRO2COL uses Pabau as its booking and practice-management provider. Pabau may process member information related to appointments, packages, client records, forms, documents, practitioner notes, payments, and other practice-management functions. Pabau may serve as a system of record for booking, facility, clinical, document, and practice-management data.
Some booking, intake, form, consent, document, or practice-management actions may open through Pabau-hosted pages or links. These experiences may appear outside of The PRO2COL website or mobile app but are used to support The PRO2COL's booking and practice-management workflows.
Supabase
The PRO2COL mobile app uses Supabase for app authentication, app-specific database functions, and app-related data storage.
Reflections
In v1, member Reflections are intended to be private to the member by default. The PRO2COL staff and practitioners should not view individual Reflection entries unless a future sharing feature is intentionally added and the member chooses to share specific information.
Health-related information
The mobile app may display health, wellness, protocol, session, or recovery-related information. The app is a companion tool for members and is not intended to provide medical advice, diagnosis, or treatment. Clinical, diagnostic, practitioner, lab, body scan, consent, or facility records may be subject to separate legal, clinical, operational, or retention requirements.
No sale of health-related data
The PRO2COL does not sell personal information or health-related app information. The PRO2COL does not use member health, protocol, session, Reflection, lab, or clinical information for third-party advertising or data broker purposes.
App account deletion
Members may request deletion of their mobile app account through the app or by visiting /account-deletion. App account deletion may remove app-only account data, app preferences, notification tokens, and member-entered app content where applicable. Some records may be retained where required or permitted for legal, billing, security, clinical, operational, or compliance reasons.
Push notifications
If enabled, the app may use push notification tokens to send reminders or app-related notices. Members can manage push notifications through app settings or device settings.
Service providers
In addition to the providers listed above, The PRO2COL may rely on the following categories of service providers in connection with the website, mobile app, or member communications:
- Resend, for transactional email, where used
- Twilio, for SMS, where used
- Klaviyo, for marketing email, where used
- Apple and Google, for app distribution and platform services
- Expo / EAS, for app infrastructure, build, and distribution support, where applicable
11. Governing Law and Jurisdiction
This Privacy Policy is governed by and construed in accordance with the laws of the State of Tennessee, USA, without regard to conflict-of-law principles. Any disputes arising from or relating to this Privacy Policy or your use of the Service will be resolved in the courts located in Davidson County, Tennessee.