Privacy Policy

Information we collect

When you request an appointment, we collect the information you enter: your name, email address, phone number, preferred meeting type, date and time, project type, budget range, timeline, and any notes you provide. For an on-site meeting, you may also provide a project address. We record the appointment reference, status, and relevant changes, such as approval, rescheduling, or cancellation.

If you use the appointment-management page, we process the appointment reference and the email address or private ticket token you use to verify access. If you sign in to the appointments administration service, we process the administrator account and session information needed to protect that service.

Like most websites, the hosting and network services that deliver this site may process basic technical information, such as the requested page, time of request, browser, and IP address, for delivery and security. The exact technical logs and retention periods depend on the hosting configuration.

How we use information

We use information to:

• review, schedule, approve, update, or cancel appointment requests;
• contact you about the appointment by email or phone, as requested;
• send appointment status updates and provide your appointment ticket;
• respond to questions and understand the project you ask us about;
• operate, secure, and troubleshoot the website and booking service;
• meet applicable legal requirements and resolve disputes.

The booking form asks you to agree that we may contact you about your appointment. Submitting an appointment request does not subscribe you to a marketing list.

Appointment tickets and private links

Appointment emails include a ticket and may include a QR code or link that opens the appointment-management page. The link contains a private access token that can be used to view or manage that appointment. Keep the email, QR code, and link private. Anyone you share them with may be able to access the appointment. Contact us if you believe a ticket link has been exposed.

Storage and service providers

Appointment and administration records are stored in a MongoDB-backed database. Appointment notifications and administration security emails are sent through the email-delivery service configured for the site. Website hosting and infrastructure providers also help deliver the service. The specific provider and data location depend on the current deployment configuration; contact us for current provider details.

We share information with these providers only as needed to operate, secure, and support the services described here. Appointment details are sent to the email address you provide and to the verified administration recipients configured to receive appointment notifications. We do not sell personal information.

Cookies and analytics

The public appointment flow does not require you to sign in. The administration area uses a necessary admin_session cookie when an administrator signs in. It is HTTP-only, uses a same-site restriction, and expires after eight hours; in production, it is marked secure. It supports authenticated administration and is not used for advertising.

The application currently has no configured advertising or analytics tracking integration. Hosting or infrastructure providers may process technical information as described above.

Retention and security

We retain appointment and administration information for as long as reasonably needed to manage appointments, maintain appropriate business records, protect the service, meet legal obligations, and resolve disputes. The application does not currently define a fixed automatic deletion period for appointment records.

We use access controls and safeguards intended to protect information, including authenticated administration and protected session credentials. No website, email service, or electronic storage method can be guaranteed completely secure.

Your choices and requests

You may contact us to request access to or correction of personal information associated with your appointment, or to ask that it be deleted. We will respond in accordance with applicable law. We may need to retain certain records where required or permitted by law or where needed to complete a transaction or resolve a dispute.

To make a privacy request, email info@thedmsi.com. Please do not include passwords or private ticket tokens in your message.

Changes to this policy

We may update this policy when our practices or legal requirements change. The “Last updated” date at the top of this page identifies the current version.

Contact