Data Processing Agreement

A practice using Alcove acts as the controller (or, under Canadian privacy law, the organization accountable for the personal information) of the client data it enters.Alcove acts as a processor, handling that data only on the practice's instructions.

Alcove processes personal information solely to provide the service — booking, telehealth, documentation, billing, and related functionality selected by the practice.

See our Security page for the technical and organizational measures currently in place.

Alcove may engage subprocessors to provide the service, listed on our Subprocessors page, each bound by data protection terms consistent with this agreement.

Alcove will provide reasonable assistance to a practice in responding to requests from individuals to access, correct, or delete their personal information.

Where personal information is transferred across borders, Alcove will rely on appropriate safeguards required by the applicable privacy law.

On termination of the underlying service agreement, Alcove will make a practice's data available for export and, once no longer required to be retained, delete or return it consistent with the practice's configured retention settings.