We collect only the information needed to respond to consultation requests, such as name, phone, email, insurance company, query type, and message. Patients should not submit policy numbers, patient IDs, medical reports, or confidential clinical records through public forms.

Submitted testimonials are reviewed before publication. We do not intentionally publish confidential medical information or private identifiers. Testimonials may be edited or rejected to protect privacy.

Data stored in Supabase should be protected with authentication, row-level security, strong admin credentials, and limited service-role access. Export or deletion requests should be handled by the platform administrator.