Privacy Policy
Sookly Privacy Policy
Effective date: 10 May 2026. This policy explains how Sookly collects, uses, stores, and shares personal data across the website, product surfaces, and connected communication channels.
- Effective date
- 10 May 2026
- Last reviewed
- 10 May 2026
- Applies to
- Website, dashboard, and connected channels
- Contact
- privacy@sookly.co
1. Scope
This Privacy Policy applies to sookly.co, the Sookly platform dashboard, the Sookly chat widget, forms on our website, and related communication and support workflows operated by Sookly.
It also explains how Sookly handles personal data when clinics, staff, prospective customers, or website visitors interact with us through connected messaging channels, including website chat, email, LINE, and other integrations that may be added over time.
2. Roles and responsibilities
Sookly as website operator
When you browse sookly.co, submit a contact form, request a demo, or communicate directly with Sookly, Sookly acts as the controller of that personal data.
Sookly as service provider
When Sookly provides messaging, workflow, automation, or communication tools to a clinic, Sookly generally acts as a processor or service provider on behalf of the clinic for patient, lead, and customer communications handled through the platform.
Clinic responsibility
Each clinic remains responsible for its own privacy notices, lawful basis for processing, patient communication practices, and disclosures made to patients or leads using the clinic's channels.
3. Data we collect
Website and marketing data
We may collect your name, work email, phone number, clinic name, business details, form responses, referral source, and website usage information when you visit sookly.co or contact us.
Account and operational data
We may collect staff account information, login records, browser and device data, audit logs, support requests, and settings used to operate the platform securely.
Communication data
When Sookly powers or connects a clinic communication workflow, message content, timestamps, channel identifiers, conversation history, contact details, and assignment or routing metadata may be processed within the service.
Technical and security data
We collect IP addresses, device identifiers, cookie or local storage records, error logs, API request metadata, and other service telemetry needed to maintain availability and security.
4. How we use personal data
To provide the service
We use personal data to operate the website, process enquiries, provision accounts, run inbox and workflow features, support connected messaging channels, and deliver customer support.
To secure and improve the service
We use data to authenticate users, prevent abuse, investigate incidents, measure reliability, troubleshoot errors, and improve content, usability, and performance.
To communicate with you
We may use your details to reply to enquiries, schedule onboarding, send service updates, provide notices, and contact you about your account or requested information.
To comply with law
We may use and retain data where necessary for legal compliance, dispute management, law enforcement requests, fraud prevention, and protection of rights and safety.
5. Legal bases
Depending on the context, Sookly relies on one or more legal bases for processing, including contract performance, legitimate interests, consent where required, and compliance with applicable law.
Where Sookly processes data for a clinic as a processor or service provider, the clinic is responsible for the lawful basis for that underlying patient or lead communication processing.
6. Sharing and disclosures
Service providers
We may share data with infrastructure, hosting, storage, email, security, analytics, and customer support providers that help us operate the service under appropriate contractual safeguards.
Connected channels and integrations
Where a clinic connects third-party communication channels such as LINE, Meta services, or email providers, relevant data may pass through or be stored by those services according to their own terms and privacy practices.
Business and legal disclosures
We may disclose data where required by law, to respond to lawful requests, protect rights or safety, enforce agreements, or support a business transaction such as a merger, investment, or asset transfer.
7. International transfers
Sookly and its service providers may process or store data in multiple jurisdictions. Where cross-border transfers occur, we take reasonable steps to use appropriate contractual, technical, and organisational safeguards.
8. Retention
We retain personal data for as long as needed to provide the service, maintain security, comply with law, resolve disputes, and enforce agreements.
Retention periods may differ depending on the data type, customer relationship, channel configuration, clinic instructions, and legal requirements. Data that is no longer required is deleted or de-identified where reasonably practical.
9. Security
Sookly applies reasonable technical and organisational measures to protect personal data, including access controls, authentication controls, encrypted transport where appropriate, logging, monitoring, and service hardening.
No internet-based service can guarantee absolute security. Clinics and users remain responsible for using strong credentials, protecting devices, and configuring their environments appropriately.
10. Your rights
Subject to applicable law, you may have rights to request access to personal data, correction, deletion, restriction, objection, portability, or withdrawal of consent where consent is the legal basis.
Requests relating to data handled by a clinic through Sookly should usually be directed to the relevant clinic first, because that clinic controls the underlying communication relationship.
11. Cookies and similar technologies
Sookly uses cookies, local storage, and similar technologies for security, site operation, preferences, analytics, and service improvement. Details are provided separately in the Cookie Policy.
Cookie consent does not replace or determine the legal basis for clinic or patient communication processing through Sookly-connected channels.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect product, regulatory, operational, or legal changes. The latest version will be posted on this page with the effective date shown above.
13. Contact
Sookly Co., Ltd.
Website: sookly.co
Privacy enquiries: privacy@sookly.co
Address: Thailand