Effective date: 21 August 2026
This Privacy Policy explains how Bukhari Nexus LLC, operating CliniVerba.com (“CliniVerba”, “we”, “us” or “our”), collects, uses, shares, stores and protects personal information when you use our websites, learning portal, courses, practice tools, customer support, marketing communications and related Services.
1. Who Controls Your Personal Information
The controller/business responsible for the personal information described in this Policy is Bukhari Nexus LLC, Balcones Drive #12836, Austin, TX 78731, United States. Privacy questions and requests may be sent to privacy@cliniverba.com.
2. Information We May Collect
Identity and contact data: name, email address, phone number, country/region and account identifiers.
Account and authentication data: login information, verification status, device/session information and security records. We do not store plaintext passwords.
Transaction data: product purchased, price, currency, order ID, payment status, billing metadata and refund/chargeback status. Full payment-card details are generally handled by the payment processor rather than CliniVerba.
Learning and performance data: courses viewed, test attempts, answers, scores, timing, progress, skill/weakness classifications and learning history.
User submissions: practice letters, answers, audio/voice recordings, comments, support messages, feedback and other content you choose to submit.
Technical data: IP address, browser, operating system, device type, approximate location derived from IP, timestamps, referring pages, crash/error logs and security events.
Cookie, analytics and advertising data: identifiers and events generated through cookies, pixels, SDKs or similar technologies where enabled and permitted.
Marketing preferences: subscriptions, opt-outs, campaign engagement and communication preferences.
3. Sensitive and Patient Data
CliniVerba is not designed to collect real patient records or patient-identifiable health information. Do not upload confidential patient files, medical record numbers, full dates of birth, addresses, images or other information that identifies a real patient. Educational case notes should be synthetic or properly de-identified.
If we discover that real patient-identifiable information was uploaded contrary to this Policy, we may restrict access, delete the material and take reasonable steps to reduce privacy risk.
4. How We Collect Information
Directly from you when you register, purchase, study, complete tests, submit material, contact support, join a mailing list or provide feedback.
Automatically from your browser/device through server logs, cookies and similar technologies.
From service providers such as payment processors, authentication providers, analytics vendors, advertising platforms, email/communications providers and fraud-prevention services, where used.
From an academy, employer or organisation that purchases authorised access for you, where applicable.
5. Why We Use Personal Information and Our Legal Bases
| Purpose | Typical data | Legal basis / business purpose |
|---|---|---|
| Provide accounts, courses and purchased services | Identity, account, learning, transaction data | Contract; steps requested before contract |
| Process payments, refunds and prevent fraud | Identity, transaction, device/security data | Contract; legal obligations; legitimate interests in fraud prevention |
| Provide support and educational feedback | Contact, learning data, user submissions | Contract; legitimate interests in customer support and service quality |
| Secure, debug and improve the platform | Technical, security, usage and performance data | Legitimate interests in security, reliability and product improvement |
| Send service messages | Contact/account/transaction data | Contract and legitimate interests |
| Send promotional marketing | Contact and marketing-preference data | Consent where required; otherwise legitimate interests where lawful; you may opt out |
| Analytics and advertising | Cookie/device/usage identifiers | Consent where required; otherwise applicable legitimate/business purposes subject to local law |
| Meet tax, accounting, legal and regulatory duties | Transaction, identity and relevant records | Legal obligation; establishment or defence of legal claims |
6. Cookies and Similar Technologies
We may use essential cookies required for login, security, checkout and core functionality. With consent where required, we may also use analytics, functionality and advertising technologies to understand usage, measure campaigns and personalise or evaluate marketing.
Where a consent banner is required, non-essential cookies should remain off until the user makes a valid choice. Users should be able to reject non-essential cookies as easily as they can accept them and later change their preference.
7. How We Share Personal Information
We may disclose personal information to vendors that process data on our behalf or help operate the Services, including hosting/cloud providers, payment processors, video/content delivery providers, email/communications services, analytics providers, advertising platforms, authentication/security vendors and customer-support tools.
We may also disclose information to professional advisers, auditors, insurers, authorities or courts where reasonably necessary to comply with law, protect rights or investigate fraud/security issues, and as part of a genuine merger, financing, reorganisation, sale or transfer of all or part of the business subject to appropriate safeguards.
CliniVerba does not sell personal information for monetary consideration. If our use of advertising technologies constitutes “sharing”, “sale” or targeted advertising under a particular privacy law, eligible users will be given the legally required opt-out mechanism.
8. International Transfers
Because CliniVerba and its service providers may operate in multiple countries, personal information may be processed outside the country where you live. Where data-protection law requires a transfer mechanism, we will use an applicable lawful safeguard, such as an adequacy decision, approved contractual clauses or another permitted mechanism.
9. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining legitimate business and security records, resolving disputes and complying with tax, accounting and legal obligations.
Typically, active account and learning records are retained while the account or purchased access is active and for a reasonable period afterwards; support and security records are retained for operational and dispute-prevention needs; transaction records may be retained for the period required by tax/accounting law; marketing records are retained until you opt out or they are no longer needed, with minimal suppression data retained where necessary to honour an opt-out.
10. Security
We use reasonable administrative, technical and organisational measures designed to protect personal information, such as access controls, secure authentication, encryption in transit where appropriate, logging, backups and vendor controls. No internet service can guarantee absolute security, so users should also protect their credentials and devices.
11. Your Privacy Rights
Depending on where you live, you may have rights to request access to personal information, correction, deletion, restriction, portability, objection to certain processing, withdrawal of consent, or information about how your data is used. You may also have rights to opt out of targeted advertising, sale/sharing of personal information, or certain profiling where applicable.
To exercise a right, email privacy@cliniverba.com. We may need to verify your identity before completing the request. We will respond within the time required by applicable law and may deny or limit a request where a lawful exception applies. If local law provides a right to appeal our decision, we will explain how to appeal.
12. Marketing Choices
You can unsubscribe from promotional emails by using the unsubscribe control in the message or contacting us. Even after opting out of marketing, we may still send non-promotional messages necessary to operate your account, deliver purchases, provide security alerts or respond to support requests.
13. California and Other U.S. State Privacy Rights
Where a U.S. state privacy law applies to CliniVerba, eligible residents may receive rights such as access/knowledge, correction, deletion, portability and opt-out of sale, sharing or targeted advertising. The exact rights and exceptions vary by state. We will not unlawfully discriminate against a user for exercising an applicable privacy right.
If required by law, CliniVerba will provide a Notice at Collection and a clear method to opt out of sale/sharing or targeted advertising, and will honour recognised browser-based opt-out preference signals where legally required.
14. EEA/UK Data-Protection Rights
Where the EU GDPR, UK GDPR or similar law applies, users may have rights of access, rectification, erasure, restriction, portability and objection, plus a right to withdraw consent. Users may also lodge a complaint with the competent supervisory authority in their country or region.
Where we rely on legitimate interests, you may object where applicable. Where we rely on consent, withdrawing consent does not affect processing that was lawful before withdrawal.
15. Children
The paid Services are intended for adults and are not directed to children under 18. We do not knowingly seek to collect personal information from children for paid accounts. If we learn that a child provided personal information without appropriate authorisation, we will take reasonable steps to delete or restrict it as required by law.
16. Automated Processing
We may use automated systems to calculate practice scores, categorise errors, identify learning weaknesses, recommend resources or generate educational feedback. These functions are intended to support learning and do not, by themselves, make decisions designed to create legal or similarly significant effects.
17. Changes to this Privacy Policy
We may update this Policy when our Services, vendors, legal obligations or data practices change. The effective date will be revised when a new version is posted. We will provide additional notice of material changes where required by law.
18. Contact
Privacy requests and questions: privacy@cliniverba.com. General support: support@cliniverba.com. Postal contact: Bukhari Nexus LLC, Balcones Drive #12836, Austin, TX 78731, United States.