Privacy Policy
Effective Date: 01.06.2026
Our Contact Information
Clove Sleep and Wellness
Sri Lanka
Telephone: 077 085 7717
Email: clovemed.com@gmail.com
Website: http://www.clovemed.com
For any questions regarding this Privacy Policy or your personal information, please contact us using the details above.
About This Privacy Policy
This Privacy Policy explains how we collect, use, store, protect, and share your personal information when you use our website, online consultation services, sleep and wellness programmes, or communicate with us electronically.
By using our services, you consent to the collection and use of your information in accordance with this Privacy Policy.
What We Do With Your Personal Data
We process personal data only for the purposes for which it was collected. These purposes include providing medical consultations, wellness services, communication, administration, and improving our services.
If you use our services, we may collect and process your personal data for the following purposes:
| Processing Purpose | Legal Basis | Retention Period |
|---|---|---|
| Online consultations | Patient consent and provision of healthcare services | As required by law or medical record retention policies |
| Sleep assessments and diagnosis | Patient consent and provision of healthcare services | As required by law |
| Treatment and follow-up care | Patient consent and provision of healthcare services | As required by law |
| Prescribing services | Provision of healthcare services and legal obligations | As required by law |
| Referrals to specialists or laboratories | Patient consent | As required by law |
| Weight management programmes | Patient consent | Until services end or consent withdrawn |
| Burnout and wellness coaching | Patient consent | Until services end or consent withdrawn |
| Appointment scheduling and reminders | Legitimate business interests | As required for administration |
| Billing and payment processing | Contractual necessity and legal obligations | As required by tax and accounting laws |
| Marketing communications | Consent | Until consent withdrawn |
What Personal Data Do We Collect?
The information we collect depends on the services you use.
Information collected automatically
When you visit our website, certain technical information may be collected automatically, including:
- IP address
- Browser type and settings
- Device information
- Date and time of access
- Pages visited
- Website usage information through cookies or analytics tools
Information you provide directly
When you register for services or communicate with us, we may collect:
- Full name
- Date of birth
- Gender
- National identity or passport details where required
- Address
- Telephone number
- Email address
- Emergency contact details
- Payment or billing information
- Medical history
- Sleep history and sleep study information
- Lifestyle and wellness information
- Weight and body measurements
- Mental wellness and burnout-related information
- Communication records and correspondence
Sensitive Personal Data
As a healthcare provider, we may collect and process sensitive health information, including:
- Medical history
- Sleep disorder assessments
- Diagnostic reports
- Prescription information
- Mental wellness information
- Laboratory or investigation reports
This information is collected and processed solely for healthcare and wellness service provision and is handled with strict confidentiality.
How We Protect Your Personal Data
We take reasonable administrative, technical, and organisational measures to protect your personal information against:
- Unauthorised access
- Loss
- Misuse
- Disclosure
- Alteration
- Destruction
These measures may include:
- Secure electronic systems
- Password-protected records
- Restricted staff access
- Encrypted communications where appropriate
- Secure payment processing platforms
Only authorised personnel involved in your care or administration may access your personal information.
Sharing of Personal Data
We do not sell your personal information.
We may share your information only where necessary with:
- Healthcare professionals involved in your care
- Laboratories or diagnostic providers
- Pharmacies
- Payment processing providers
- IT and website service providers
- Legal or regulatory authorities where required by law
All third parties are expected to maintain confidentiality and appropriate data protection standards.
Cookies and Website Analytics
Our website may use cookies and analytics tools to improve user experience and monitor website performance.
You may disable cookies through your browser settings, although some website features may not function properly.
How Long We Keep Your Data
We retain personal and medical information only for as long as necessary to provide healthcare services, comply with legal, tax, and regulatory obligations, and resolve disputes or enforce agreements.
Medical records may be retained for periods required under applicable healthcare regulations.
Your Rights
Subject to applicable law, you may have the right to:
- Request access to your personal data
- Request correction of inaccurate information
- Request deletion of your personal data where legally permissible
- Withdraw consent for certain processing activities
- Object to direct marketing communications
- Request restriction of processing in certain circumstances
Requests may be made using the contact information provided above.
International Data Transfers
Some online services or technology providers used by our clinic may store or process data outside Sri Lanka. Where this occurs, we take reasonable steps to ensure your data remains protected and handled securely.
Children's Privacy
Our services are not intended for children under 18 years of age.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be published on our website with an updated effective date.
Contact Us
If you have questions or concerns regarding this Privacy Policy or your personal data, please contact:
Complaints
If you believe your personal information has been handled improperly, you may contact the relevant regulatory or legal authority in Sri Lanka responsible for data protection matters.