Privacy Policy

1. Overview

CareDoc is a digital healthcare platform that helps patients connect with doctors and healthcare organizations for appointments, follow-up care, prescriptions, reminders, and related online services. Because healthcare information is sensitive, Care-box Limited aims to handle personal information responsibly and only for legitimate service, safety, and operational purposes.

By using CareDoc, you acknowledge that your information may be processed in accordance with this policy and with any additional consent or notice shown during registration, appointment booking, payment, consultation, or document submission.

2. Information We Collect

Depending on how you use CareDoc, we may collect information such as:

• Account information, including name, email address, phone number, username, and password-related credentials.
• Profile and identity information, including gender, date of birth, professional information, organization affiliation, BMDC or similar registration details, and profile images where applicable.
• Appointment and consultation information, including doctor selection, appointment type, date, time, consultation history, prescriptions, follow-up details, and communication records.
• Payment information related to appointment or subscription transactions, such as payment method, payment reference, billed amount, and payment status.
• Technical and usage information, such as browser information, device information, IP address, approximate session data, and system logs used for security, reliability, and diagnostics.
• Support and communication information, such as messages, complaints, feedback, reviews, and responses submitted through CareDoc.

3. How We Use Information

We may use personal information to operate and improve CareDoc, including to:

• Create and manage user accounts for patients, doctors, and organizations.
• Arrange, confirm, update, and document appointments, consultations, prescriptions, and follow-up care.
• Enable secure log in, identity checks, and role-based access within the platform.
• Process transactions, manage payment records, and support business reporting where required.
• Send system notifications, verification emails, reminders, receipts, and important service announcements.
• Detect abuse, prevent fraud, investigate technical issues, and protect platform integrity.
• Analyze usage trends so we can improve product quality, workflow performance, and service delivery.

4. When We Share Information

Care-box Limited does not sell personal data as a business model. We may share information only when it is reasonably necessary for service delivery, platform operation, legal compliance, or safety.

• With doctors and healthcare organizations when a patient books, attends, or follows up on a consultation.
• With payment service providers and similar operational partners when required to complete a transaction.
• With service providers that help us run hosting, email, messaging, analytics, security, or customer support tools, subject to appropriate controls.
• When disclosure is required by law, lawful request, legal process, regulatory obligation, or to protect the rights, safety, or security of users, partners, or Care-box Limited.
• In connection with a merger, restructuring, investment, acquisition, or transfer of business assets, where legally permitted and operationally necessary.

5. Data Security

We take reasonable administrative, technical, and operational steps to protect information from unauthorized access, misuse, alteration, or disclosure. These steps may include access controls, role-based permissions, authentication checks, audit logs, backup practices, and platform monitoring.

Even with these controls, no digital platform can guarantee absolute security. Users should also help protect their own data by keeping passwords confidential, using trusted devices, and reporting suspected misuse promptly.

6. Data Retention

We retain information for as long as needed to provide services, maintain healthcare-related records, support legitimate business operations, satisfy legal or regulatory obligations, resolve disputes, and enforce applicable terms. Retention periods may vary depending on the type of information and the role of the user in the platform.

7. Your Rights and Choices

Subject to applicable law and operational requirements, users may request to:

• Review or update inaccurate account or profile information.
• Ask questions about how data is used inside CareDoc.
• Request assistance regarding account closure or data handling, where legally and operationally possible.
• Withdraw from certain optional communications or marketing-style messages where those exist.

Some records, especially consultation, payment, compliance, or audit-related records, may need to be retained even after an account is changed or closed.

8. Cookies and Technical Data

CareDoc may use cookies, session storage, local storage, and related technical methods to keep users signed in, remember preferences, improve usability, measure performance, and support security features. Disabling some browser storage features may affect parts of the platform.

9. Children and Family Accounts

Some patient records may be created or managed by guardians, family members, or authorized adults on behalf of minors or dependents. In such situations, the person creating or managing the record is responsible for ensuring they are permitted to provide the information and to use the service in that way.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect product changes, legal developments, operational improvements, or security practices. When we make meaningful updates, the revised version may be posted on this page with an updated effective date.

11. Contact

If you have questions, concerns, or requests related to this Privacy Policy or data handling on CareDoc, please contact Care-box Limited at: