Legal
Privacy policy
Last updated 25 September 2026
In short. The systems I build run on your clinic's own accounts, so your patients' information stays with you. I only access it to build, run and support your system. I don't sell data, I don't use it for advertising, and this website doesn't track you.
Who we are
Pipeworks Automation ("Pipeworks", "we", "I") is a sole-founder business based in Jounieh, Lebanon, run by Anthony . You can reach me at anthony@pipeworksautomation.com.
This policy covers two things: information from people who visit this website, and patient information that clinics ask us to work with when we build their systems.
1. Visitors to this website
What we collect. If you message us on WhatsApp, for example through the buttons on this website, we receive your WhatsApp number, the name on your WhatsApp profile and whatever you choose to write, such as your name, your clinic's name and the other details our prefilled message asks for. If you book a call, we receive what you send us to arrange it.
Why, and on what basis. Only to reply to you and discuss whether Pipeworks is a fit for your clinic. We rely on the fact that you contacted us first. You can ask us to stop at any time, and we will. We never add you to marketing lists.
Cookies and tracking. This website doesn't use advertising or analytics cookies and doesn't track you across other websites. Our hosting provider keeps standard technical logs (such as IP address and browser type) for security and reliability.
How long. If we don't end up working together, we delete your enquiry within 12 months. You can ask us to delete it sooner at any time.
2. Patient information we handle for clinics
When a clinic works with us, its patients message the clinic through WhatsApp, the clinic's website or other channels the clinic chooses. That information belongs to the clinic.
- The clinic owns the accounts. WhatsApp Business, the CRM (such as HubSpot), the calendar and any automation tools are set up in the clinic's name. Patient conversations and records are stored there, not in accounts we own.
- We act on the clinic's instructions. For patient data, the clinic decides what is collected and why. We process it only to build, run, monitor and fix the clinic's system.
- Limited access. We use the minimum access needed, and the clinic can remove it at any time. When our work ends, we remove our access and hand back full control.
- No other use. We never sell patient data, use it for advertising, or share it with anyone other than the service providers needed to run the clinic's system.
- Automated replies. Some replies may be written by an AI language model running within the clinic's system. These are used for everyday questions and bookings. Medical questions are passed to the clinic's staff. Message content may be processed by that model provider in order to generate a reply, under the provider's business terms.
Clinics remain responsible for having a lawful basis to contact their patients, for telling patients how their information is used, and for following the rules of their professional body. Health information is sensitive: where the law requires a registration, licence or patient consent for processing it, that is the clinic's responsibility as the owner of the data, and we will support it. We can sign a data processing agreement on request.
3. Service providers
Depending on how a clinic's system is set up, information may pass through providers such as Meta (WhatsApp Business), HubSpot, Google, Calendly, the automation platform the clinic uses, and an AI model provider. Our website is hosted by Netlify. Some of these providers store data outside Lebanon and the UAE. We choose providers with established security practices, and we tell each clinic exactly which ones its system uses.
4. Security
We use strong, unique passwords and two-factor authentication on every account we can, share access through each platform's official user or permission features rather than shared logins wherever possible, and don't keep copies of patient data on our own devices.
5. Your rights
You can ask to see, correct or delete the information we hold about you. If you are a patient of a clinic we work with, please contact the clinic first, as they control your information. We will help them respond. Write to anthony@pipeworksautomation.com and we'll reply within 30 days.
6. Changes
If we change this policy, we'll update the date at the top. If a change affects how we handle clinic or patient data, we'll tell our clients directly first.