Privacy Policy

Personal Information

Name, email address, phone number, date of birth, and gender when you register on our platform.

Health Information

Medical history, symptoms, prescriptions, and consultation notes that you share with doctors through our platform.

Usage Data

Information about how you interact with our platform, including pages visited, features used, and time spent.

Device Information

IP address, browser type, operating system, and device identifiers for security and optimization purposes.

Service Delivery

To facilitate doctor appointments, video consultations, and health record management.

Communication

To send appointment confirmations, reminders, prescription updates, and important service notifications.

Platform Improvement

To analyze usage patterns, improve features, and enhance user experience on our platform.

Legal Compliance

To comply with applicable laws, regulations, and court orders regarding healthcare data.

Healthcare Providers

Your health information is shared with doctors you consult with, strictly for treatment purposes.

Service Partners

We may share limited data with payment processors, SMS providers, and cloud infrastructure partners.

Legal Requirements

We may disclose information when required by law or to protect the rights and safety of users.

No Sale of Data

We never sell your personal health information to advertisers or third-party marketers.

Encryption

All health data is encrypted at rest and in transit using industry-standard AES-256 encryption.

Access Controls

Strict role-based access controls ensure only authorized personnel can access sensitive health information.

Security Audits

Regular security audits, penetration testing, and vulnerability assessments are conducted.

Incident Response

We have a comprehensive data breach response plan and will notify affected users promptly if an incident occurs.

We retain personal data only for as long as necessary to provide our services and to comply with applicable legal, regulatory, accounting, and healthcare requirements.

Account and Profile Data

We retain account and profile information while the user's account is active. If a user requests account deletion, their personal information will be deleted or anonymized unless we are required by applicable law to retain certain information.

Appointment and Medical Data

Appointment history, prescriptions, consultation details, and other medical records may be retained as required by applicable healthcare and legal obligations. Once retention is no longer required, the information will be securely deleted or anonymized.

Payment and Transaction Data

Payment and transaction records may be retained as required for accounting, taxation, fraud prevention, dispute resolution, and other applicable legal obligations.

Technical and Usage Data

Application logs, device information, security information, and diagnostic data are retained only for as long as reasonably necessary for security, troubleshooting, analytics, fraud prevention, and service improvement. After that, the information will be deleted or anonymized.

Account Deletion Requests

Users can request deletion of their account and associated personal data through the account deletion option available in the Where Is My Doctor application or by contacting us at support@whereismydoctor.in. Some information may continue to be retained when required by law or for legitimate purposes such as fraud prevention, dispute resolution, financial compliance, or healthcare record-keeping. Once the applicable retention requirement expires, the information will be securely deleted or anonymized.

Backup Data

Deleted information may temporarily remain in secure backup systems until those backups are overwritten or expire according to our backup retention process. Information retained only in backups should not be used for ordinary business purposes after an account deletion request.

Where is my Doctor operates a Partnership Program through which approved individuals or organizations may introduce eligible doctors, clinics, hospitals, and other healthcare providers to the platform. Full details of the commission structure are available on our Partnership Program page.

Information We Collect

We may collect and process Partner information including name, contact information, location, organization information, Partner ID, referral information, healthcare-provider attribution, commission information, payout records, tax/compliance information, and other information reasonably necessary to administer the Partnership Program.

How We Use It

This information is used to verify and manage Partner accounts, attribute healthcare providers to Partners, calculate eligible commissions, process Partner payouts, maintain transaction and accounting records, comply with tax and legal requirements, prevent fraud and abuse, provide Partner support, and communicate important Program updates.

Patient Privacy

Participation in the Partnership Program does not give a Partner a right to access patient medical information. Partner access is limited to information reasonably necessary for attribution, commission calculation, payout reconciliation, fraud prevention, and administration of the Partnership Program. Sensitive patient information, including prescriptions, diagnoses, reports, medical history, clinical notes, treatment information, and medical documents, is not disclosed to Partners unless specifically necessary, appropriately authorized, and permitted under applicable law. Partners must not collect, copy, store, disclose, sell, or use patient information for independent marketing or any unauthorized purpose.

Healthcare Provider Information

Partners must provide healthcare-provider information lawfully and accurately, and must not submit confidential medical information or unnecessary patient information while referring or onboarding a healthcare provider.

Partner Payout Information

Where required to process Partner payouts and comply with applicable financial, accounting, or tax obligations, we may collect appropriate payout, banking, PAN/tax, or verification information. This information is used only for legitimate business, compliance, accounting, verification, fraud-prevention, and payout purposes.

Access

You have the right to access all personal information we hold about you at any time.

Correction

You can request correction of inaccurate or incomplete personal information.

Deletion

You can request deletion of your account and personal data, subject to legal retention requirements.

Portability

You can request a copy of your health records and consultation history in a portable format.