Last Updated: February 27, 2026

Privacy Policy

Please read these privacy policy carefully before using our services

1. Introduction

DocDash ("we", "our", "us") is a SaaS-based appointment booking and clinic management platform designed for doctors, clinics, and hospitals. This Privacy Policy explains how we collect, use, store, and protect personal and medical information when you use our services.

This policy applies to clinics, hospitals, doctors, staff members, and patients whose data is processed through DocDash.

2. Information We Collect

We collect information necessary to provide appointment booking, patient management, and prescription services.

  • Clinic and hospital registration details
  • Doctor and staff account information
  • Patient personal details (name, age, contact details)
  • Appointment records and schedules
  • Medical records and uploaded prescriptions
  • Payment and billing information (if applicable)
  • Technical data such as IP address and device information

3. How We Use Information

We use collected information strictly for providing and improving our services.

  • To manage patient appointments
  • To store and retrieve medical records securely
  • To enable clinics to upload and manage prescriptions
  • To improve system performance and security
  • To provide customer support
  • To comply with legal and regulatory requirements

4. Data Ownership & Responsibility

Clinics and hospitals using DocDash retain full ownership of their patient data. DocDash acts as a data processor and does not claim ownership of medical records or patient information.

Important Notice

Clinics are responsible for obtaining patient consent before storing medical information in the system.

5. Data Sharing & Disclosure

We do not sell or rent personal or medical information. Data may only be shared:

With authorized clinic or hospital staff
With service providers assisting in hosting or infrastructure
When required by law or legal authorities

6. Data Security

We implement industry-standard security measures to protect patient and clinic data, including encryption, access controls, and secure cloud infrastructure.

Access to medical data is restricted to authorized users only.

7. Data Retention

We retain data only as long as necessary to provide services and comply with legal obligations. Upon account termination, clinics may request data export or deletion, subject to applicable regulations.

8. User Rights

Depending on applicable laws, patients and clinics may have the right to:

  • Access their personal data
  • Request correction of inaccurate data
  • Request deletion of data
  • Withdraw consent where applicable

9. Third-Party Services

DocDash may integrate with third-party services such as SMS gateways, payment processors, or hosting providers. These providers are contractually obligated to maintain data confidentiality and security.

10. Children's Privacy

DocDash does not knowingly collect personal information directly from children. All patient data is managed by registered clinics or hospitals.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

Continued use of the service after changes indicates acceptance of the updated policy.

12. Contact Us

If you have any questions regarding this Privacy Policy or data practices, please contact us at:

Email: [email protected]

WhatsApp