Privacy and cookies
Website operator: Winchester Worldwide LLC, Florida, USA. Unimed is the website's patient-coordination brand.
Updated 22 October 2026. This notice describes the current Unimed website configuration. For questions or requests about your information, email info@unimed.clinic. Please do not include medical records in an initial privacy enquiry.
Enquiries and documents
When you submit an assessment or doctor enquiry, we receive the contact details and information you choose to provide to coordinate a response. Upload only information needed for your enquiry and that you are authorised to share. Forms and documents are stored using Supabase, with restricted access and a private document bucket. The configured database region is in the United States. Vercel hosts the website, Cloudflare provides DNS, and Resend delivers staff notifications containing a reference rather than medical documents.
To understand which channels bring enquiries, your browser keeps one general category of how you arrived (for example search engine, AI assistant or direct) for the current tab only. It contains no page addresses or identifiers and is sent only with a form you submit.
These providers process information to operate the service; international processing may occur. Contact us to request access, correction or deletion, or to discuss sharing and retention before uploading sensitive documents. Any medical assessment and further sharing with a treating provider should be discussed with your coordinator. This website is not an emergency service.
Optional homepage analytics
Analytics is off until you choose to allow it. If allowed, Google Analytics and Google Tag Manager load only in a separate homepage measurement document. A homepage view, technical browser/device information, network information and analytics cookie identifiers may be processed by Google. We do not send treatment-page visits, search parameters, referral URLs, form contents, names, phone numbers, email addresses or documents to this measurement setup. Advertising consent is denied and automatic enhanced measurement is disabled. Tag Manager is a tag delivery tool, not an additional advertising campaign.
Your choice is stored in your browser for up to 180 days. Analytics cookies in the measurement path expire after up to 180 days and may be renewed during use. Rejecting or withdrawing permission stops future loading; it does not erase previously processed information. You can clear existing cookies using your browser settings.
Google privacy information. Google Search Console reports aggregate search performance separately from optional visitor analytics.
Private visit counts and WhatsApp references
With your separate permission, UNIMED records one site visit and at most one WhatsApp button click per 30-minute browser-tab session in its private operational database. Only a general campaign code, event type and date are counted. No page address, referrer, medical details, name or contact details enter these counters. A random tab identifier is hashed on the server for duplicate prevention; it is not shared with Google or advertising platforms. Short-lived duplicate hashes expire after two days and abuse-limit hashes after two hours; expired hashes are removed on subsequent counter requests. Aggregate daily counts have no visitor identifiers. Hosting providers still process network information to deliver requests.
A short random reference is added to the visible prefilled WhatsApp greeting when you open our WhatsApp link. It identifies the general campaign, if available, and helps coordinators recognise the source of an enquiry. Opening the link supplies the draft and reference to WhatsApp; our coordinator receives a message only if you choose to send it. You can edit the draft or remove the reference. The local tab context expires after 30 minutes. Rejecting analytics stops visit and click counts but does not prevent contact. Staff count an enquiry only after checking an actually received message and checking for duplicates. The private confirmation register contains a reference, date and a hashed internal case code, not message content, names or telephone numbers. Contact us about correction or deletion using the reference.
Other website connections
Hosting providers may process technical logs to deliver and secure the site. Fonts are served from this website, not from Google Fonts. WhatsApp and Medium links open external services governed by their own privacy notices. No advertising or remarketing tags are configured in this release.