This Privacy Policy explains what personal information MyDoctorPoint (https://mydoctorpoint.com) collects, why we collect it, who can see it and how we protect it. It applies to patients, doctors, hospital staff and visitors.
1. Information we collect
When you book a serial (patients):
- the patient's name, age and gender;
- your mobile number, which is verified by OTP;
- your National ID (NID) number, only if you choose to give it;
- the doctor, chamber, date, serial number and status of each appointment;
- call results recorded by hospital staff (for example "coming" or "not coming").
When a doctor applies or has an account: name, gender, email, mobile number, BMDC registration number, qualifications, experience, specialities, photo, chamber details, fees and, if uploaded, a BMDC certificate.
Hospital staff accounts: name, email, mobile number and the hospital they work for.
Help chat: the questions you type into the help chat, without your name. Mobile numbers you type are hidden before saving, and we use these questions only to improve the answers. The chat is automatic: it is not a person and no outside AI service reads it. Please don't type personal medical details.
Collected automatically: IP address, browser type, the time of each request, and security events such as failed human checks, wrong OTPs or too many requests.
We do not collect payment card details. Fees are paid at the hospital counter.
2. Why we use it
- to book, confirm, change and cancel appointments, and to manage the queue;
- to send SMS: OTP codes, booking details, confirmations, cancellations and leave notices;
- to let the chosen hospital and doctor see and serve their own patients;
- to stop bots, brokers and misuse (one active appointment per mobile per date, rate limits and security logs);
- to verify doctors before they are shown to patients;
- to produce anonymous statistics and reports that improve health services, for example how many appointments are completed;
- to meet legal obligations.
We do not sell your personal information, and we do not use it for advertising.
3. Who can see your information
- The doctor and hospital you booked with can see your appointment, name, age, gender and mobile number, so they can call and serve you.
- MyDoctorPoint administrators, for support, verification and security.
- Service providers who help us run the Service, only as far as they need to: our SMS gateway (to deliver SMS), Cloudflare Turnstile (to tell people from bots) and our hosting provider.
- Authorities, when the law requires it.
Staff of another hospital, and other doctors, cannot see your appointments.
4. How we protect it
- All traffic uses HTTPS encryption.
- OTP codes are stored only in hashed (unreadable) form and are deleted after two days. They never appear in our logs.
- National ID numbers are stored encrypted.
- Mobile numbers are masked (for example 017****5678) on public pages, printed lists and SMS logs.
- Access for staff is limited by role and by hospital, and changes are recorded in an audit log.
- Uploaded doctor certificates are kept in private storage that only administrators can open.
5. How long we keep it
- Appointment records are kept as long as needed for hospital records, reports and legal obligations.
- OTP codes are deleted after two days.
- Audit logs are kept for one year.
- Rejected doctor applications may be kept for record purposes and deleted on request.
6. Cookies and local storage
We use only the cookies that the Service needs to work: a session cookie that keeps you signed in and protects forms, and your language choice. Your light/dark theme choice is saved in your browser. We do not use advertising or tracking cookies.
7. Your choices and rights
You can ask us to see, correct or delete your personal information by emailing support@mydoctorpoint.com from, or about, the mobile number or account concerned. We may need to keep some records when the law or a hospital's legitimate medical record keeping requires it. You can cancel your upcoming appointments yourself on the "My appointment" page.
8. Children
Patients under 18 should be booked by a parent or legal guardian, who provides the information on the child's behalf.
9. Changes to this policy
We may update this policy. The date of the latest update is shown on this page. Important changes will be announced on the website.
10. Contact
Questions about privacy: support@mydoctorpoint.com.