1. Who is responsible
Onyx AI is a brand of ThrivingThreeLLC. This notice explains how we handle information from visitors to this website, people making business enquiries and people booking a clinic growth audit.
Contact us at [email protected]. Our business mailing address is 108 W Schick Rd, Bloomingdale, Illinois 60108, USA.
This website is for business owners and clinic teams. It is not a patient portal. Please do not submit patient records, treatment histories or other sensitive medical information.
2. Information we receive
- Contact and booking information: the name, business email, telephone number, clinic details and appointment preferences you choose to share.
- Business enquiries: messages and information about your advertising, booking process and business goals.
- Technical information: hosting and booking providers may process IP addresses, browser information and request logs when their services are accessed.
Providing information is voluntary, but we need sufficient contact and scheduling details to arrange and respond to your request.
3. How we use information
We use enquiry and booking information to respond to you, arrange the audit, discuss your clinic’s needs, send appointment-related communications and manage any resulting business relationship. Technical information supports reliable delivery and security of the website.
Where applicable law requires a legal basis, these activities rely on steps requested before entering a contract, performance of a contract, legitimate interests in responding to business enquiries and maintaining secure services, or legal obligations. Where consent is required, it must be obtained separately. Booking a call is not blanket consent to unrelated marketing.
4. Booking calendar and service providers
The booking page uses HighLevel / LeadConnector to display availability and collect appointment details. The embedded calendar loads when you select “See available times.” Opening the separate calendar link also connects to that provider. It may use cookies or similar technology for its booking service and process the details you enter.
Our hosting, scheduling and communication providers may process information to deliver their services. We may also disclose information where required by law, to protect legal rights or to advisers who have a legitimate need to receive it. Contact us for information about the providers relevant to your request.
Read HighLevel’s privacy policy for its own processing practices.
6. How long information is kept
Information is kept for the time needed to respond to an enquiry, manage appointments or provide agreed services, and to meet applicable recordkeeping or legal requirements. Relevant criteria include whether the enquiry is active, whether a contract follows, the nature of the information and any unresolved dispute.
You may ask us about the retention period that applies to your information or request deletion where applicable.
7. International processing
We work with clinics in the US, UAE and Europe. Information may be processed in the United States or other countries where our service providers operate; data-protection rules can differ between countries. Where a transfer is regulated, the applicable transfer requirements must be addressed. Contact us for details of the destination and safeguards relevant to your information.
8. Your choices and rights
Depending on the law that applies, you may be able to request access, correction, deletion, restriction or portability of your information, object to certain processing, or withdraw consent where processing relies on it. Some rights are subject to legal exceptions.
Send requests to [email protected]. We may need to verify your identity and will respond within the period required by applicable law. You may also raise a complaint with the data-protection authority in your jurisdiction, including your local EEA authority or the UK Information Commissioner where applicable.
9. Client services and updates
Processing patient or lead information for a clinic is a separate service activity. Its scope, responsibilities and safeguards must be covered in the relevant service and data-processing arrangements and the clinic’s own notices. This website notice does not replace those arrangements.
This site is intended for adults acting for a business. If information about a child or sensitive patient information is sent here in error, contact us. We may update this notice as the website or our practices change; the update date appears above.
Let’s keep it simple.
For questions about your information, your booking or these terms, email [email protected].