CLINIC X BY HOMX
Privacy notice
Updated 25 October 2026. This notice covers the public Clinic X website and the information used to start a subscription checkout.
Information you submit
The subscription form collects the plan you choose, a work email address, clinic name, country and your consent record. A hidden field is used to deter automated abuse. The form does not ask for patient information, health information, files, passwords or payment details. Do not put those details into any field.
How the information is used
These business details are used to request the selected hosted checkout. When checkout is available, only the normalized work email is sent through the private Clinic X checkout gateway as payment-provider checkout prefill. The clinic name and country are not sent to the gateway or payment provider. Submitting the form alone does not create a paid order, clinical account or clinic workspace.
Payment boundary
When secure checkout is available, the website redirects you to the Clinic X checkout on clinic-x.lemonsqueezy.com. Payment details are entered there and are handled by the payment provider under its own notices. Clinic X does not ask you to enter card details on this website.
Public website records and retention
The public website's D1 checkout record does not store the raw work email, clinic name or country from the checkout form. It stores keyed request and retry hashes, the selected plan, consent and event times, checkout state, and limited provider checkout metadata. Checkout links expire after 30 minutes. A scheduled daily website cleanup clears expired links and deletes these D1 checkout records after 30 days.
The earlier preview-request system is retired. Its records remain subject to automatic deletion after 90 days; an operational check on 24 October 2026 found no live preview-request records.
Private fulfillment record
The separate private fulfillment registry stores the normalized recipient work email, selected plan, server-generated order reference, validated checkout and subscription bindings, and the return URL containing the opaque website status capability. This private record is retained for the subscription lifetime so that payment events, renewals, cancellations and refunds remain bound to the correct order. No automatic private-registry deletion job is currently implemented, and Clinic X does not promise a fixed deletion deadline for that record.
Retry reference in this tab
This browser tab stores an opaque retry reference in session storage, valid for 35 minutes. It contains a random identifier, a SHA-256 hash of the normalized request and an expiry time. It does not contain the raw work email, clinic name or country. The reference covers the 30-minute checkout-link lifetime so that retries of the same request can reuse its checkout. Session storage clears when the tab is closed.
Website delivery
The website and its service providers process technical request information needed to deliver and protect the site, such as network, browser and request-time information. Short-lived abuse-control records are removed automatically. The public website does not include advertising or product analytics scripts.
Your choices and support
For questions about business contact details used for an order, email info@hom-ex.com. This address is for service support; do not email patient records, medical information, passwords or payment details.
Public site boundary
The public website and subscription form are not a patient-entry interface or clinical service. Clinic information entered during service setup belongs in the protected Clinic X workspace, not on these public pages.