Data Processing Policy

1. Purpose of Processing

BookMyDr processes data solely for providing appointment booking, queue management, token generation, doctor scheduling, QR tracking, patient status display, reporting, and software support services.

2. Data Controller and Data Processor

3. Categories of Data Processed

• Hospital and clinic information.
• Doctor profiles and schedules.
• Appointment booking information.
• Patient names and contact details.
• Token and queue management records.
• Visit history and appointment status.
• Technical logs and system diagnostics.

4. Processing Activities

• Appointment scheduling and management.
• Patient token generation.
• QR code tracking services.
• Live waiting queue display.
• Operational reporting and analytics.
• Customer support and troubleshooting.
• Software updates and security improvements.

5. Security Measures

BookMyDr implements reasonable security measures to protect data from unauthorized access, alteration, disclosure, or loss.

• Password-protected access controls.
• Role-based user permissions.
• Secure server and hosting infrastructure.
• Encrypted communications where applicable.
• Regular system maintenance and monitoring.

6. Local Database Processing

Many BookMyDr installations operate using a locally installed database within the clinic or hospital environment. In such cases, healthcare providers maintain primary responsibility for the storage, backup, and management of patient records.

7. Data Retention

Data is retained only for as long as necessary to provide services, maintain operational records, comply with legal obligations, and support healthcare providers.

8. Data Sharing

BookMyDr does not sell patient information. Information may be shared only with authorized service providers, technical support partners, or when required by law.

9. Data Subject Rights

• Request access to stored information.
• Request correction of inaccurate data.
• Request deletion where legally permissible.
• Object to certain processing activities.

Requests regarding patient records should generally be directed to the clinic or hospital that collected the information.

10. Policy Updates

We may update this Data Processing Policy from time to time. Updated versions will be published on this page with a revised effective date.