Cookie Policy

What cookies and browser storage are

Cookies are small pieces of text your browser keeps for a website and sends back to it. Browser storage is similar, but your browser never sends it to us on its own. The site reads it on your device and sends us only what the items below describe.

Cookies

• Signing in: one cookie keeps you signed in to your Haylo account for up to 30 days. Page scripts can't read it, it's sent only over a secure connection, and it's set to work across haylohealth.com.au and our booking service at api.haylohealth.com.au.
• Clinic staff signing in: one cookie lasts 15 minutes and is renewed while you use the clinic dashboard. A second keeps you signed in: for 30 days after you last used it if you chose to stay signed in, or when you first create your clinic account; otherwise until you close your browser, or 12 hours after you last used it.
• Haylo's own staff: one cookie keeps our staff signed in to Haylo's internal tools, for up to 30 days.
• Payments: when you add a card, Stripe's card form sets two cookies on this site to help detect card fraud: one lasts about a year, the other about 30 minutes. Stripe may also use cookies on its own sites. Stripe doesn't load until you add a card.
• Google and Apple sign-in: on the sign-in and sign-up pages, Google and Apple may use their own cookies.

Browser storage

• Your last search: the place you last searched (a suburb, or an address you typed) and its position on the map, kept on this device until you search somewhere else or clear it. It also appears in the search page's address, so a search can be refreshed or shared. If you share your device's location instead, it is kept only in that tab until you close it and never goes in the page's address. It is sent to us only to measure distances for that search, and we don't keep it.
• What you typed: the words you typed into the search box, for up to a minute, so the results page can record the search as described in our Privacy Policy. Gone when you close the tab.
• A booking in progress: a random code, so that if your connection drops while you book or cancel, trying again doesn't do it twice. Kept for up to 30 minutes, and gone when you close the tab.
• Usage counts: a random visit number and where you arrived from (one word, such as "google"), so we can count how the site is used. Both are forgotten when you close the tab, and neither is linked to your account.
• Small choices: whether you dismissed the notifications prompt, and when we last asked for your location.
• Notifications: if you turn them on, your browser installs a small Haylo helper that only shows them and opens Haylo when you tap one, and gives us an address to send them to. Turning notifications off in Haylo deletes that address.
• For clinic staff: your "keep me signed in" choice during sign-in, and drafts of your clinic set-up and practitioner bios until you save them.
• Haylo's own devices: a marker on our staff's browsers, so our own visits aren't counted.

Maps

The maps on the search and clinic pages come from OpenFreeMap, a free map service. To draw a map, your browser asks OpenFreeMap for the part of the map on screen, so it sees your IP address and roughly which area you are looking at. We don't send it who you are or what you typed, and it sets no cookies.

Error reports

When a page breaks, we send a technical report to Sentry, in Germany. It says which pages were open and which requests were made just before the error, so we can find the fault. It is set to leave out your IP address and what you send in forms, and to remove email addresses, phone numbers, search terms and locations first, though it can miss a name written into an error message. Sentry sets no cookies.

Managing cookies

You can clear cookies, block them, or set your browser to ask first — search your browser's help for "manage cookies". If you block essential cookies, you won't be able to stay signed in or complete a booking.

Updates to this policy

If we add or remove a cookie or an item of browser storage, we'll update this page and its date.

Questions

Email privacy@haylohealth.com.au and we'll reply within 30 days.