Privacy Policy

1. What Data We Collect

We collect patient information including name, phone number, age, gender, address, and medical records (consultations, prescriptions, diagnoses, billing records). This data is collected and entered by clinic staff on behalf of the patient.

2. Why We Collect It

All data is collected exclusively for the purpose of healthcare management — enabling doctors to provide medical care, track consultations, manage prescriptions, and follow up with patients. Data is never sold or shared with third parties.

3. Who Has Access

Patient data is strictly isolated per clinic. Only the clinic's own staff (doctors and admin) can access their clinic's patient records. Platform administrators have limited system access for support purposes only and do not access individual patient records.

4. How We Protect It

• All data transmitted over HTTPS (TLS 1.3)
• Sensitive credentials encrypted at rest using AES-256
• Multi-factor authentication (MFA) required for all users
• Full audit logs of all patient data access
• Role-based access control — each user sees only what their role allows
• Automatic session expiry

5. Data Retention

Patient data is retained for the duration of the clinic's active subscription. Upon subscription termination, data is retained for 30 days before permanent deletion. Clinics may request an export of their data at any time.

6. Right to Erasure (DPDP 2023)

Under the Digital Personal Data Protection Act 2023, patients have the right to request erasure of their personal data. Erasure requests must be submitted to the clinic, who will then process them through our secure erasure workflow. Requests are logged and reviewed within 30 days.

7. Contact

For privacy-related queries or data erasure requests, please contact your clinic directly or reach us at support@clinops.in.