Privacy Policy

When you use docAppoint, we collect the following types of information:

Personal Information: Name, email address, phone number, date of birth, and gender that you provide when creating an account or booking an appointment.

Medical Information: Doctor consultation details, appointment history, prescriptions, and any medical notes you choose to share.

Technical Information: IP address, browser type, device information, and usage patterns when you access our platform.

We use your information for the following purposes:

• To process and manage your doctor appointments and bookings.
• To send appointment confirmations, reminders, and follow-up notifications.
• To improve our platform and provide better healthcare services.
• To communicate important updates about our services.
• To comply with legal obligations and prevent fraud.

We do not sell your personal or medical data to third parties.

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted using SSL/TLS protocols during transmission and AES-256 encryption at rest.
• Access Control: Only authorized personnel have access to personal data, and access is strictly monitored.
• Regular Audits: We conduct regular security audits and vulnerability assessments.
• Secure Servers: Our data is stored on secure servers located in Bangladesh.

While we strive to protect your information, no method of electronic storage is 100% secure.

We may share your information in the following circumstances:

• With Doctors: Your basic information (name, age, gender) is shared with the doctor you book an appointment with.
• Service Providers: Third-party services that help us operate (email service, hosting, analytics).
• Legal Requirements: When required by law, court order, or government regulation.
• With Your Consent: We may share information for purposes not listed here with your explicit consent.

We retain your information for as long as necessary:

• Account Information: Retained until you delete your account or request removal.
• Appointment Records: Retained for 7 years as required by medical record regulations.
• Technical Data: Retained for up to 2 years for analytics purposes.

You can request deletion of your data at any time by contacting our support team.

Under applicable data protection laws, you have the following rights:

• Access: Request a copy of your personal data we hold.
• Rectification: Correct any inaccurate or incomplete information.
• Erasure: Request deletion of your personal data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing of your data in certain circumstances.

To exercise these rights, contact us at privacy@docappoint.com.