Public Request & Magic-Link Privacy Addendum

This addendum supplements the Privacy Policy at rescuefacilitycare.com/privacy for the no-signup concierge site only. If they conflict on this site, this addendum controls. It does not change Platform Terms.

1. Scope. Public request form, on-screen receipt, and /wo/{token}. This site does not send you live email, WhatsApp, or voice dispatch from the app. “Reply-all” language is copy, not how we store or notify you.

2. Audience. Business tool for veterinary-facility staff. Not directed to anyone under 16. Do not submit veterinary medical records, patient or client records, payment-card data, passwords, or government identifiers.

3. What you submit. The form asks for a facility identifier, contact name, phone number, city or metro, and notes. There is no email field and no photo or video upload. Photos may be asked later from your phone; this site does not store media. A phone number here is for scheduling that request only. It is not consent to RFC’s SMS program.

4. What we store this pass. Organization and clinic identifiers; a work-order record (clinic/org, work-order number, source, status, subject, timestamps); and a SHA-256 hash of the magic-link token, its 60-minute expiry, and whether it has been used. We do not store requester name, phone, or email as database columns, and we do not store a login session. The raw magic token exists in the /wo/{token} URL. City or metro may persist in the work-order subject field (that is the only Cloud copy of that value until later columns exist). Name, phone, and free-text notes are collected on the form; they are not requester columns this pass. Work-order metadata, including subject, is kept for 24 months unless a legal hold applies.

5. Magic links. Single-use, 60 minutes, not an account login. Anyone with the URL can open the ticket until it expires or is used. Do not post it publicly.

6. Cookies and analytics — current host behavior. This site does not show a cookie banner or a Privacy-choices widget, and we are not adding one. Our hosting platform may still insert a /~flock.js tag on /wo/{token}; on this host CSP blocks that URL and analytics does not fire. A meta referrer=no-referrer tag does not change that. The HTTP Referrer-Policy header is strict-origin-when-cross-origin, not no-referrer. Cloudflare may set __cf_bm. The /wo page may set a session-id cookie; that cookie is not a stored login.

7. Use and sharing. We use this information to issue the ticket, show your receipt, validate the magic link, and coordinate the job. We do not sell personal information. Recipients include the local independent operator, the assigned technician, our host, Cloudflare, and our hosting platform (analytics, including on magic-link pages while flock still loads there).

8. Retention. Work-order metadata: 24 months unless a legal hold applies. Magic-link hashes are useful only until expiry or use. We may be unable to delete copies held by hosting-platform analytics.

9. Security. Hashing the token in our database is not the same as keeping the raw token off third-party analytics. Until /wo/* HTML has zero flock script, treat the magic URL as something our hosting platform may log. Do not share it.

10. Medical records. Not a veterinary-records system and not a HIPAA BAA unless signed in writing.

11. Requests: privacy@rescuefacilitycare.com or the Data request footer link.

12. Changes. We will post a new date when this is no longer true (for example if flock is actually removed from /wo/*).