DOCFO Privacy Policy

1. Overview and Scope

DOCFO (“we”, “our”, or “the Platform”) operates a healthcare coordination platform comprising doctor discovery directories, appointment scheduling software, and clinic reception queue-management applications.

This Privacy Policy applies to personal data collected through the DOCFO official website, clinic web portal, and associated mobile applications. It governs how we collect, process, store, and disclose information from patients, healthcare practitioners, and clinic administrative staff.

2. Categories of Personal Data Collected

We adhere to data minimization principles. We collect only the information necessary to fulfill appointments, authenticate authorized clinic staff, and manage live queue tokens:

• Patient Profile Data: Full name, 10-digit Indian mobile number, email address (optional), generated unique user code, city, and locality.
• Doctor Professional Data: Full name, medical degree qualifications, state medical council registration numbers, clinical specializations, and affiliated clinic practice hours.
• Clinic Facility Data: Clinic trade name, physical address, city, locality coordinates, clinic contact phone number, and authorized administrative email.
• Appointment & Queue Data: Scheduled appointment date and session window, alphanumeric appointment reference codes (e.g. DFC-8421), check-in timestamp, queue token numbers, consultation arrival status, and cancellation records.
• Technical & Session Identifiers: Supabase authentication session cookies, IP addresses, device operating system type, and client error diagnostics.

3. Purpose of Data Processing

We process personal data solely for legitimate operational healthcare coordination purposes:

• To enable patients to discover appropriate medical specialists and book consultation slots.
• To issue verifiable appointment codes and manage clinic reception arrival check-ins.
• To advance real-time queue tokens and notify waiting patients of consultation progress.
• To authenticate clinic staff and enforce role-based access control (Manager, Receptionist, Nurse).
• To conduct administrative credential verification against state medical registers.
• To protect the platform against abusive booking automation, fraud, and unauthorized access.

4. Sharing and Disclosure of Information

DOCFO does not sell, rent, or trade personal data or health inquiries to data brokers or third-party advertisers. Data is shared strictly as follows:

5. Data Retention and Deletion

Account profiles remain active until deletion is requested. Operational appointment and session logs are retained in accordance with applicable medical record guidelines and financial audit requirements.

Users may request deletion of their personal information and account closure at any time through our Account Deletion Procedure.

6. Technical & Operational Security Measures

We implement technical safeguards designed to protect personal data from accidental loss and unauthorized access:

7. User Rights under Applicable Law

As a data principal, you have the right to:

• Access a summary of the personal data held about you.
• Request correction of inaccurate or incomplete personal records.
• Request deletion of your profile and personal data.
• Nominate an individual to exercise rights in the event of incapacity.
• Seek grievance redressal regarding data handling.

To exercise any of these rights, visit our Data Privacy & Rights Portal or email privacy@docfo.in.

8. Contact Information & Grievance Redressal

For questions, concerns, or requests relating to this Privacy Policy, please contact our privacy desk: