Account & Profile Information
When you register as a doctor, clinic, or patient, we collect your name, email address, phone number, and role-specific details such as medical license numbers, clinic addresses, or date of birth. This information is required to create and maintain your account.
Appointment & Medical Data
We collect appointment records, patient visit notes, prescription references, and scheduling details. This data is necessary to provide the core functionality of the platform — booking, managing, and tracking healthcare appointments.
Payment Information
We collect bank account details, UPI IDs, and payment QR codes that clinics voluntarily provide to receive advance payments from patients. We do not store full credit or debit card numbers on our servers.
Usage Data
We automatically collect information about how you interact with the platform, including login timestamps, pages visited, and device type. This helps us diagnose issues and improve the user experience.
Service Delivery
We use your data to provide, operate, and maintain the DoctoLin platform — including appointment scheduling, doctor-patient matching, clinic management, and notification delivery via email and WhatsApp.
Communications
We send appointment confirmations, reminders, cancellation notices, and verification emails using the contact details you provide. You can manage notification preferences from your account settings.
Platform Improvement
Aggregated, anonymised usage data helps us understand which features are most useful, identify performance bottlenecks, and prioritise future development. Individual users are never identified in this analysis.
Security & Compliance
We use collected data to detect fraudulent activity, enforce our terms of service, and comply with applicable Indian laws and healthcare data protection regulations.
Within the Platform
Patient information is visible to doctors and clinic staff involved in their care. Doctor profiles are visible to patients for booking purposes. Sensitive medical notes are only accessible to authorised healthcare providers.
Service Providers
We work with third-party providers for email delivery (SMTP services) and WhatsApp messaging (Meta Cloud API). These providers process data only to deliver communications on our behalf and are bound by confidentiality obligations.
Legal Requirements
We may disclose your information if required by Indian law, court order, or government authority. We will notify you of such requests unless prohibited from doing so by law.
No Selling of Data
We do not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your health data is never shared with advertisers.
Encryption
All data transmitted between your browser and our servers is encrypted using TLS/SSL. Sensitive fields such as passwords and SMTP credentials are stored using strong one-way hashing or encryption at rest.
Access Controls
Access to patient data is role-based. Receptionists, nurses, doctors, and clinic admins each see only the information relevant to their role. Admin accounts require strong credentials and are audited.
Infrastructure
Our servers are hosted on reputable cloud infrastructure with regular security updates. We conduct periodic reviews of our security practices to identify and remediate vulnerabilities.
Access & Correction
You may access and update your personal information at any time from your account profile settings. If you believe any information held about you is inaccurate, you may request a correction.
Account Deletion
You may request deletion of your account and associated personal data by contacting us at hello@doclin.com. Note that some data may be retained for legal compliance or to protect the rights of other users.
Data Portability
Patients may request an export of their appointment history and medical records in a structured format. Please contact our support team to initiate this request.
Opt-out of Notifications
You can opt out of non-essential notifications (reminders, promotional messages) from your account settings at any time. Essential communications — such as appointment confirmations — cannot be fully disabled as they are integral to the service.
Session Cookies
We use session cookies and local/session storage to maintain your logged-in state and remember your preferences. These are essential for the application to function and are not used for advertising.
No Third-Party Trackers
We do not use third-party advertising trackers, social media pixels, or analytics services that send your data to external parties. Any analytics we perform are done internally using anonymised data.
Minor Patients
The platform supports booking appointments for family members including children, managed by an adult account holder. We do not knowingly collect personal data directly from children under 13 without parental consent through an adult account.
Policy Updates
We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users via email and display a notice within the platform. The effective date at the top of this page will always reflect the most recent version.
Questions About Privacy?
If you have any questions about this Privacy Policy or how we handle your data, please contact us.
Contact UsAlso see: Terms of Use →