Terms of Service
Welcome to colomor ("colomor", "we", "us"). By creating an account, listing a clinic, or using any part of our platform, you agree to these Terms of Service. If you are accepting on behalf of a clinic or organisation, you confirm you have authority to bind it.
1. What colomor is
colomor is a marketplace and software platform that connects patients with aesthetic clinics and provides each clinic with an AI assistant. colomor is not a medical provider, does not give medical advice, and is not a party to any treatment agreement between a patient and a clinic.
2. Accounts
- You must provide accurate information and keep your credentials secure.
- You are responsible for all activity under your account.
- Clinics must be legally licensed to operate in their jurisdiction.
3. Acceptable use
You agree not to misuse the platform, including by posting unlawful content, impersonating others, scraping data, attempting to disrupt the service, or using it for anything other than its intended purpose.
4. Bookings & payments
Consultation bookings are agreements between the patient and the clinic. Subscription fees for clinics are billed in advance and are non-refundable except where required by law. You can cancel a clinic subscription at any time; access continues until the end of the paid period.
5. Content & reviews
Patients may submit reviews of clinics. Reviews must be honest and based on genuine experience. We may moderate or remove content that violates these terms. You grant colomor a licence to display content you submit for the purpose of operating the platform.
6. Disclaimers & liability
The platform is provided "as is". To the maximum extent permitted by law, colomor is not liable for indirect or consequential damages, or for the medical outcome of any treatment arranged through the platform.
7. Changes
We may update these terms. Material changes will be notified by email or in-product. Continued use after changes take effect constitutes acceptance.
8. Contact
Questions about these terms: legal@colomor.com.
Privacy Policy
Your privacy matters to us — it is, quite literally, the foundation of trust the platform is built on. This policy explains what we collect, why, and your rights.
1. What we collect
- Account data: name, email, phone, country, preferred language.
- Usage data: conversations with the assistant, bookings, reviews you write.
- Technical data: IP address, device and browser information, cookies.
2. How we use it
- To operate the assistant, bookings, and clinic dashboards.
- To translate messages into your preferred language.
- To keep the platform secure and prevent abuse.
- To send service communications you've asked for.
3. Legal bases
We process personal data under the lawful bases of contract performance, legitimate interest, legal obligation, and consent (for example, marketing emails), in line with GDPR and Türkiye's KVKK.
4. Sharing
We share data with clinics you contact (so they can help you), and with vetted processors (hosting, email, payments, AI translation) under strict contracts. We never sell your personal data.
5. Your rights
You can access, correct, export, or delete your data, and object to certain processing. Manage most of this from your account settings, or email privacy@colomor.com.
Data Processing Agreement
This DPA applies to clinics ("Controllers") that use colomor ("Processor") to process personal data of their patients ("Data Subjects").
1. Roles
The clinic determines the purposes and means of processing patient data and is the Controller. colomor processes that data only on the clinic's documented instructions, as set out in the Terms and this DPA.
2. Security measures
- Encryption in transit and at rest.
- Role-based access control and audit logging.
- Regional data residency options (EU, Türkiye/KVKK, US, Middle East).
- Regular backups and a documented incident response process.
3. Sub-processors
colomor uses a limited set of sub-processors for hosting, email delivery, payment processing, and AI translation. A current list is available on request, and we will notify Controllers of material changes.
4. Data subject requests
colomor assists Controllers in responding to data subject requests (access, deletion, portability) within the timeframes required by applicable law.
5. Breach notification
colomor will notify affected Controllers without undue delay after becoming aware of a personal data breach, with the information needed to meet their own notification obligations.
To execute a signed DPA, contact legal@colomor.com.
Cookie Policy
Cookies are small files stored on your device. We use them to keep you signed in, remember your language, and understand how the platform is used.
Categories we use
- Essential: sign-in sessions and security. These can't be switched off.
- Preferences: your chosen language and region.
- Analytics: aggregate, privacy-friendly usage statistics to improve the product.
Managing cookies
You can accept or decline non-essential cookies via the banner shown on your first visit, and change your choice at any time in your browser settings. Blocking essential cookies may break sign-in.