Privacy policy

Last updated: July 12, 2026.

Platform operator: Spark Digital SpA, Santiago, Chile (“Spark Digital”, “we”, “us”).
Website: praxis-medical.com
Platform: Praxis Medical

This Privacy Policy describes how Spark Digital processes personal data when healthcare institutions and their users access the Site and the Praxis Medical Platform (the “Service”).

In operational use of the Service, the contracting institution (“Customer”) generally acts as the data controller regarding its patients’ and staff’s data, while Spark Digital acts as a processor to host, process, and protect such information according to the Customer’s instructions and this document.

1) What data we process

Depending on use of the Service, we may process the following categories:

a) Commercial and Site contact data

Email, phone, or other data provided when requesting a demo or contacting us from the Site.
Technical browsing data (IP address, browser, device, pages visited).

b) User account data

Name, email, role, and permissions.
Access credentials (password stored as a hash).
Activity logs: sign-ins, views, creation, editing, export, and printing of records.

c) Clinical and operational data entered by the Customer

Patient information (identification, clinical history, notes, surgeries, visits, traceability, adverse events, etc.).
Staff information, schedules, inventory, and other enabled modules.
Documents or attachments uploaded by authorized users.

d) Communication data enabled by the Customer

Phone numbers or other channels configured for notifications (for example, surgery updates via WhatsApp), when the Customer activates these features.

2) Purposes of processing

We process personal data to:

Provide the Service: operate modules, screens, kiosks, exports, and contracted features.
Manage access: authentication, permissions, security, and traceability.
Support and improvement: resolve incidents, maintain quality, and evolve the Platform.
Site commercial communications: respond to demo or contact requests.
Security and compliance: prevent unauthorized access, fraud, or abuse; meet legal obligations.
Backup and operational continuity: backups, recovery, and technical monitoring.

3) Legal basis

Contract performance: operation of the Service agreed with the Customer.
Legitimate interest: security, auditing, product improvement, and support, in a proportionate manner.
Legal obligation: when applicable law requires it.
Consent: for commercial contact or other processing that requires it.

Regarding patient data, the Customer must have the appropriate legal basis under its internal and sector regulations.

4) Who we share data with

We do not sell personal data.

We may share data with:

Technology providers: cloud infrastructure (Amazon Web Services), databases, email, monitoring, and operational tools necessary to provide the Service.
Messaging providers: when the Customer enables notifications (for example, WhatsApp), solely to deliver configured messages.
Professional advisors: legal, accounting, or audit, under confidentiality duties.
Authorities: when there is a legal obligation or valid request.

These third parties act as processors or independent providers as applicable, and receive only the information necessary for their function.

5) International transfers

The Service may use infrastructure located outside Chile (for example, AWS data centers in the United States or other regions). In such cases, we adopt reasonable contractual and technical measures to protect information.

6) Retention

We retain data while the contractual relationship with the Customer lasts and for the time necessary to meet legal obligations, resolve disputes, or maintain operational backups. Upon service termination, we will proceed as agreed with the Customer (return, deletion, or limited retention).

7) Security

We implement measures such as:

Encryption in transit (HTTPS/TLS).
Access controls by user, role, and institution.
Audit logs of relevant actions.
Backups and infrastructure monitoring.
Logical isolation per institution (teams/tenants).

No system is 100% infallible; the Customer must also adopt internal best practices (password policies, access revocation, responsible use of public screens).

8) Individuals’ rights

Individuals whose data is processed in the Platform may exercise rights of access, rectification, deletion, objection, or others recognized by applicable law.

For clinical data entered by a healthcare institution, requests should preferably be directed to the responsible Customer. They may also contact us at contacto@praxis-medical.com and we will coordinate with the relevant institution when appropriate.

9) Cookies and similar technologies

The marketing Site (praxis-medical.com) and the Platform may use cookies or local storage that are strictly necessary for operation, for example:

Maintaining an authenticated user session.
Protecting forms against abuse (CSRF token).
Remembering technical preferences essential to operating the Service.

We do not use third-party analytics, advertising, or measurement tools on the marketing Site, such as Google Analytics, Google Tag Manager, Meta Pixel, or other tracking pixels or scripts for commercial or profiling purposes.

Why is there no “accept / reject cookies” banner? Because, as of this Policy’s date, we only use technical or strictly necessary cookies to provide the Service. We do not install optional analytics, marketing, or advertising cookies that require prior consent. If we incorporate such technologies in the future, we will update this Policy and provide a consent mechanism before activating them.

If the Customer integrates external tools into its own operations (for example, WhatsApp links or other services), any additional processing may be subject to those providers’ policies.

10) Minors

The Service is intended for healthcare institutions and their authorized staff. Minor patients’ data is processed by the Customer according to its legal and clinical responsibilities.

11) Changes to this Policy

We may update this Policy. The current version will be published on the Site with its update date. If changes are significant, we will seek to inform the Customer through reasonable means.

12) Contact

Email: contacto@praxis-medical.com
Operator: Spark Digital SpA
City: Santiago, Chile