Privacy Policy

This Privacy Policy explains how DoctorCareBox handles information when you visit or use our website and clinic-management platform (the “Platform”). It applies to doctors, clinic owners, authorized staff, and people whose information is entered into the Platform by a clinic (“Patients”).

For patient records entered by a clinic, the clinic is responsible for deciding why the information is collected and for providing any notices or obtaining any permissions required by law. DoctorCareBox provides the Platform to store and manage those records. Patients should contact their clinic first about records held in that clinic’s account.

Depending on how the Platform is used, information may include:

We receive information from you when you register, sign in, update an account, contact support, or use Platform features. Clinic owners and authorized staff may enter clinic, patient, appointment, prescription, inventory, supplier, and billing information. We may also receive technical and security information automatically from the browser, server, or infrastructure used to deliver the Platform.

We use information as needed to:

We do not sell personal or patient health information. We may share information only as reasonably needed for the purposes described in this policy:

The Platform uses a database and cloud-compatible object storage for records and uploaded files. The particular provider, storage region, and hosting arrangement can depend on the environment in which the Platform is deployed. Information may therefore be processed in locations used by those providers. Where applicable law restricts an international transfer, we will handle it subject to the requirements of that law.

We keep information for as long as it is reasonably needed to provide the Platform, support the clinic’s records and account, meet legal or regulatory obligations, resolve disputes, and protect the service. Clinic records may remain in a clinic account while the account is active. Some information may remain in backups or security records for a period determined by the applicable retention and backup process. We do not currently publish a single fixed retention period for every category of information.

You can keep your account details accurate by using the profile settings available in the Platform. Some account details or clinic records may not be editable or deletable directly in the interface.

You may contact us to request access to, correction of, or deletion of personal information, or to ask a question about its use. We may need to verify your identity and, for patient records held in a clinic account, coordinate with the clinic that manages the records. We may retain information where required or permitted by law, for legitimate record-keeping, security, or dispute-resolution needs. Requests will be handled under applicable law; the Platform does not currently provide self-service export or deletion for patient records.

We use safeguards designed to protect information, including password hashing, account authentication, role-based access controls, and HTTPS for connections when deployed with TLS. No online service or storage method can be guaranteed completely secure. Please protect your password and verification codes, use authorized devices, and contact us promptly if you believe an account or record has been accessed improperly.

The Platform stores authentication information and limited account details in browser storage so that you can remain signed in and use protected features. Clearing browser storage or signing out may end your session. The application does not need advertising cookies to provide its core features; infrastructure or third-party services may use necessary technologies to deliver or secure their services.

The Platform is intended for clinics and healthcare professionals, not for children to create their own accounts. A clinic may enter information about a minor patient as part of care. The clinic is responsible for providing required notices and obtaining permission from a parent, guardian, or other authorized person where applicable.

We may update this Privacy Policy as the Platform or applicable requirements change. We will update the date below when we revise it. If a change is material, we will provide notice through the Platform or another reasonable channel where required.

For privacy questions or requests, contact DoctorCareBox at +919690333244 or doctorcarebox@gmail.com, or write to M4 Shatabdi Nagar, Aligarh, Uttar Pradesh 202001, India.