Privacy policy

Privacy Policy

 

At pointandflow | TCM Petrana Woog, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us or receive treatment at our practice.

 

By using our website or our services, you acknowledge this Privacy Policy.

 

1. Data Controller

The controller responsible for processing your personal data is:

 

pointandflow GmbH

Selnaustrasse 15

8001 Zurich

CHE-358.814.116

 

Email: tcm@pointandflow.ch

Tel.:    +41775285416

 

2. Purpose of Processing Personal Data

We collect and process personal data only where necessary to provide our services and operate our practice efficiently.

 

Your personal data may be processed for the following purposes:

 

•                  arranging and managing appointments

•                  providing Traditional Chinese Medicine treatments

•                  maintaining patient records

•                  communicating before and after treatment

•                  responding to enquiries

•                  issuing invoices and managing payments

•                  complying with legal and professional obligations

•                  improving our website and services

•                  ensuring the security and functionality of our website

 

We process only the personal data necessary for these purposes.

 

3. Personal Data We Collect

Depending on your interaction with our practice, we may collect:

 

•                  name

•                  postal address

•                  email address

•                  telephone number

•                  date of birth

•                  appointment details

•                  medical information relevant to your treatment

•                  insurance information where applicable

•                  payment information

•                  correspondence between you and our practice

•                  technical information generated through your use of our website

 

4. Patient Records

If you receive treatment at our practice, we maintain a confidential patient record in order to provide safe, effective and continuous care. Patient records are created, stored and managed in accordance with our professional responsibilities and applicable Swiss legal requirements. Access to these records is restricted to authorised persons, and appropriate technical and organisational measures are taken to protect their confidentiality and security.

 

5. Website Use

When you visit our website, certain technical information is collected automatically.

 

This may include:

 

•                  IP address

•                  browser type

•                  operating system

•                  referring website

•                  pages visited

•                  date and time of access

•                  device information

 

These data help us maintain the security of our website, improve its performance and better understand how visitors use our website.

 

6. Cookies

Our website uses cookies and similar technologies to ensure its proper operation and to enhance your browsing experience.

 

Cookies help us:

 

•                  operate the website efficiently

•                  remember your preferences

•                  analyse website traffic

•                  improve website performance

 

You may disable cookies through your browser settings. Please note that doing so may affect the functionality of certain parts of our website.

 

7. Google Analytics

We use Google Analytics to better understand how visitors interact with our website.

 

Google Analytics collects anonymous statistical information, including the number of visitors, pages viewed, session duration, browser information and approximate geographical location.

 

This information helps us improve our website and the services we offer.

 

Google may process certain data on servers located outside Switzerland.

 

For more information, please refer to Google’s Privacy Policy.

 

8. Appointment Booking

 

Appointments may be booked directly through our website.

 

The information you provide during the booking process is used solely to schedule and manage your appointment, prepare your consultation and, where applicable, create or update your patient record.

 

Appointment information is synchronised with Google Calendar to facilitate appointment management.

 

Appointments may also be arranged by telephone or email.

 

9. Communication

 

You may contact us by email, telephone or through the contact form available on our website.

 

Please note that communication via standard email is generally not encrypted and therefore cannot guarantee complete confidentiality during transmission.

 

By contacting us through these communication channels, you consent to their use unless you request an alternative method.

 

10. Disclosure of Personal Data

 

Your personal data are treated with strict confidentiality.

 

We disclose personal data only where necessary to provide our services, fulfil legal obligations or support the operation of our practice.

 

Recipients may include:

 

•                  accountants and bookkeeping service providers

•                  tax advisers

•                  IT service providers

•                  website hosting providers

•                  payment service providers

•                  legal advisers where necessary

•                  debt collection agencies where legally required

•                  health insurance companies

•                  accident insurers

•                  cantonal or federal authorities where required by law

•                  other healthcare professionals involved in your treatment, where appropriate or legally permitted

 

Personal data are shared only to the extent necessary for the relevant purpose.

 

11. International Data Transfers

Some of our service providers process personal data outside Switzerland.

 

Our website is hosted by Shopify, whose infrastructure may involve processing data in countries including Canada and the United States.

 

We also use Google services, including Google Analytics and Google Calendar, which may involve international transfers of personal data.

 

Where personal data are transferred to countries that do not provide an equivalent level of data protection, appropriate contractual and legal safeguards are implemented in accordance with the Swiss Federal Act on Data Protection.

 

12. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable legal and professional obligations.

 

Medical records are retained for the period required under Swiss law.

 

When personal data are no longer required, they are securely deleted or anonymised.

 

13. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure or destruction.

 

While we take reasonable steps to safeguard your information, no method of electronic transmission or storage can be guaranteed to be completely secure.

 

14. Contact

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us at tcm@pointandflow.ch.

 

15. Changes to this Privacy Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect legal, technical or operational developments.

 

The version published on our website is the current and applicable version.

 

Last updated: July 2026