Privacy Policy
Last updated: September 2026
1. Data controller
Dr.Purple is an operational management platform for cleaning and task control in veterinary clinics. Data is processed by the entity responsible for operating the platform and, where applicable, by customer organizations that use Dr.Purple to manage their clinics.
2. Personal data processed
We may process name, email, phone number, access profile, authentication records, last access dates, IP address, device technical information, tasks, evidence, messages and actions recorded during clinic operations, as well as billing, subscription and configuration data where applicable.
3. Purposes
Data is used for authentication, user management, task execution and auditing, operational communications, platform security, technical support, billing and compliance with legal obligations.
4. Legal basis
Processing may be based on contract performance, legitimate interest in platform security and management, compliance with legal obligations and, when required, the data subject’s consent.
5. Retention
Data is kept for as long as necessary to provide the service, maintain operational and audit records, comply with legal obligations and resolve disputes. When no longer required, data will be deleted or anonymized where applicable.
6. Data sharing
Data may be processed by essential technical providers, such as hosting, authentication, database, email and support providers. These providers should only process data to deliver the contracted services.
7. Data subject rights
Under applicable law, data subjects may request access, rectification, erasure, restriction, objection or portability of their data. Requests should be sent to suporte@drpurple.pt.
8. Security
Dr.Purple applies technical and organizational measures to protect accounts, sessions, permissions and records, including authentication, access controls, activity logs and MFA when enabled.
9. Analytics and providers
With optional consent, we may use an analytics tool hosted in the European region to analyze aggregate use of public pages and the application. We do not send photos, notes, task content, names, emails or other identifiable operational data to that tool. The technical provider processes only the data necessary for this purpose.