DocMedi24 — Privacy Policy

To provide a secure and functional digital prescription workflow, we collect the minimum necessary information required to verify professional credentials and manage patient health records safely:

Healthcare Professionals: We collect legal names, professional qualifications, contact phone numbers, workplace/chamber information, and validated Bangladesh Medical & Dental Council (BMDC) registration numbers.

Patients: We collect demographic metadata including patient names, ages, weights, genders, contact phone numbers, and associated clinical data (such as chief complaints, diagnoses, investigations, medical history, and prescribed medications).

Our database architecture enforces rigorous data boundaries to prevent global data leaks and maintain complete confidentiality between separate clinics and practitioners:

• Doctor-Specific Patient Records: Patient records are strictly isolated. A doctor can only view, search for, or access the profiles of patients who are dynamically linked to their specific practice (i.e., patients they have personally registered or for whom they have generated active prescriptions). Patients who have never received treatment from a specific doctor remain entirely invisible and unsearchable to that doctor.
• Prescription Level Privacy: Individual medical prescriptions are strictly private. A prescription can only be reviewed, printed, or managed by the specific issuing physician and their verified clinical assistants or authorized staff members. Cross-doctor data viewing is entirely blocked.
• Independent Multi-Doctor Relationships: A single patient (using the same phone number) may consult different independent specialists across our platform. In such cases, the patient is securely registered under each doctor's list independently, ensuring that their medical history with Doctor A remains private and inaccessible to Doctor B.

To maintain perfect record coordination while preserving privacy boundaries, our system implements a distinct identification protocol:

Every time a patient record is established within a doctor’s authorized query scope, the system auto-generates a globally Unique Patient ID (e.g., P000001).

This system identifier securely anchors the diagnostic history and prevents the cross-contamination of separate profiles using duplicate phone numbers across the broader system platform.

• No Commercial Data Selling: DocMedi24 does not sell, rent, trade, or share any personal information, contact records, or patient medical histories with third-party advertisers, pharmaceutical companies, or unauthorized corporate entities.
• Legal Disclosures: We will only disclose collected data if strictly required to do so by applicable healthcare laws, judicial orders, or governing medical authorities in Bangladesh.

We maintain strict administrative and technical safeguards to ensure that health records are processed securely. Our infrastructure operates with data security principles designed to achieve:

• Secure data transit and storage encryption frameworks.
• Time-bounded validation protections on clinical updates to prevent post-verification tampering of active files.
• Permanent logs of account authentications and core data mutations to enforce system transparency.

We reserve the right to update this Privacy Policy as our features evolve or as legal regulatory frameworks change. Any updates made will be accompanied by an updated "Effective Date" at the top of this page. We encourage doctors and administrators to routinely review this policy to stay informed on how we protect patient records.