Privacy Policy

This policy explains what information we collect on this website, why, who can see it, and your rights.

1. Information we collect
Family head: name, address, city, mobile number, email address and password (stored only in encrypted, hashed form).
Patients (family members): name, date of birth, gender, relation to the family head, optional mobile number, consultation type, disease details, present medicines, messages with the doctor, medicine advice and doses taken, test reports you upload, clinic token details, and any notes, weight or visit dates recorded by the doctor.
Payments: plan, amount, payment date, UPI transaction reference and the payment screenshot you upload. We do not receive or store your bank, card or UPI PIN details.
Doctors: profile details, registration number, consulting hours, fees, photo, registration certificate and payment QR code.
Technical: your IP address for login security, and a record of important actions (such as approvals and payment updates) for audit purposes.

2. Why we use it
To verify your mobile number and email, provide consultation with the doctor you choose, keep the patient's treatment record, verify payments, send you verification codes and consultation updates, manage clinic tokens, prevent misuse, and resolve complaints.

3. Who can see your information
The doctor you have chosen for a patient can see that patient's record and the family head's contact details. Other doctors cannot. The consortium administrator can see records for verification, support and complaint handling. We do not sell your information or share it for advertising.

4. Service providers
To run the website we use: our web hosting server; WhatsApp Business messaging (Meta) to send codes and updates to your registered number; an email service to send codes, links and updates; and Google reCAPTCHA to block automated misuse of forms. They receive only what is needed to provide that service.

5. How we protect it
The website uses HTTPS. Passwords are stored in hashed form. Test reports, payment screenshots and doctors' documents are kept in a protected server folder and can be opened only after login by the patient's family head, the patient's doctor or the administrator. Accounts are locked for a time after repeated wrong passwords.

6. Cookies
We use only essential cookies needed for login and form security. We do not use advertising or tracking cookies.

7. How long we keep it
Records are kept while your account is active and afterwards for as long as needed for medical record-keeping and legal requirements. Unverified or abandoned registrations may be deleted.

8. Children
Children's records are added and managed by their parent or guardian as the family head.

9. Your rights
You may ask to see, correct or update your information, withdraw your consent, or close your account. You can update address, email and mobile from Edit Profile. For anything else, or for a complaint about how your data is handled, contact us through the Contact & Support page. Medical records may be retained where required by law even after an account is closed.

10. Changes to this policy
We may update this policy. The current version is always on this page.

11. Contact
Grievance contact: Dr A P Chandran, Bhadra Homeopathic Doctors Consortium, Bengaluru, [Chandranap#Bhadrahomeo#com].