Privacy Policy

Dr Appoint (“the Platform,” “we,” “our,” or “us”) is committed to protecting the privacy and confidentiality of personal and health-related information of its users. This Privacy Policy outlines how we collect, use, process, store, and protect user data in compliance with applicable data protection laws, including the Information Technology Act, 2000 (India), General Data Protection Regulation (GDPR) where applicable, and globally recognized healthcare data protection principles aligned with HIPAA standards. By accessing or using the Dr Appoint platform, you consent to the collection and use of your information in accordance with this Privacy Policy.

We may collect personal information including, but not limited to, name, contact details, demographic information, and health-related data such as medical history, prescriptions, diagnostic reports, and consultation records. This data may be collected directly from users or through authorized representatives, including family members or caregivers acting on behalf of the patient, with appropriate consent. The information collected is used strictly for facilitating healthcare services, including appointment scheduling, maintaining electronic medical records, enabling communication between patients and healthcare providers, sending notifications and reminders, and improving the functionality and performance of the platform. For NRI users, the platform enables remote access and monitoring of healthcare services for their dependents in India.

Dr Appoint does not sell, rent, or trade personal data to third parties. However, user information may be shared with verified and authorized healthcare providers, diagnostic partners, and caregivers strictly on a need-to-know basis and subject to user consent. Data may also be disclosed to regulatory authorities or law enforcement agencies if required under applicable law. We implement commercially reasonable and industry-standard technical and organizational measures to protect user data, including encryption, secure servers, role-based access controls, and periodic system audits. While we strive to safeguard all data, no system can be guaranteed to be completely secure, and users acknowledge this inherent risk.

Where applicable under GDPR, users have the right to access, rectify, restrict processing, or request deletion of their personal data, as well as the right to data portability. Requests related to data rights can be submitted through our official communication channels.

Our platform may use cookies and similar tracking technologies to enhance user experience, analyze usage patterns, and improve service delivery. Users may manage cookie preferences through their browser settings. Certain services, such as payment processing and analytics, may be provided by third-party vendors who comply with applicable data protection standards and contractual confidentiality obligations.

We reserve the right to update this Privacy Policy periodically to reflect changes in legal requirements, technology, or business practices. Continued use of the platform following such updates constitutes acceptance of the revised policy