Privacy Policy

Privacy Policy

Last Updated: March 2026

Doctor's Chamber ("we", "our", or "us") is committed to protecting the privacy and security of your personal and medical information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our healthcare platform.

1. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, mobile number, address, and role (Doctor, Patient, Hospital, or Medicine Company).
• Medical Information: Patient records, prescriptions, diagnoses, vitals, test reports, and medical history created through the platform.
• Professional Information: For doctors — specialization, registration number, degrees, chamber details. For companies — license numbers, company details.
• Usage Data: Login timestamps, IP addresses, and activity logs for security and audit purposes.

2. How We Use Your Information

• To provide and maintain our healthcare platform services.
• To enable doctors to create prescriptions and manage patient records.
• To allow patients to access their medical history and test reports.
• To process medicine incentive payments between companies and doctors.
• To send important notifications about your account, prescriptions, and reports.
• To verify and approve healthcare professional accounts.
• To improve our services and ensure platform security.

3. Data Security

We implement industry-standard security measures to protect your data:

• All passwords are encrypted using BCrypt hashing.
• CSRF protection is enabled on all forms to prevent cross-site attacks.
• Session cookies are HTTP-only, secure, and use strict SameSite policies.
• All database queries use parameterized commands to prevent SQL injection.
• User inputs are sanitized to prevent XSS attacks.
• Activity logging tracks all system actions for security auditing.

4. Data Sharing

We do not sell, rent, or share your personal or medical information with third parties except:

• When required by law or legal process.
• With authorized healthcare providers involved in your care (e.g., your prescribing doctor can access your patient record).
• With medicine companies only for anonymized prescription incentive tracking.

5. Patient Rights

As a patient on our platform, you have the right to:

• Access all your medical records, prescriptions, and test reports at any time.
• Request correction of inaccurate personal information.
• Know which doctors have accessed your medical records.
• Contact support if you believe your account has been compromised.

6. Data Retention

Medical records and prescriptions are retained indefinitely to ensure continuity of care. Account data is retained as long as your account is active. Activity logs are maintained for security audit purposes.

7. Cookies and Sessions

We use essential cookies for session management and authentication. These are strictly necessary for the platform to function and cannot be disabled. We do not use tracking or advertising cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated date. Continued use of the platform after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at info@doctorschamber.net.