Acceptance of Terms
When you register or use the Dr. Khokha platform, we collect information necessary to provide you with healthcare services. The type of data we collect depends on your role on the platform.
Personal Information
Full name, email address, phone number, date of birth, and government-issued ID for verification purposes.
Medical & Health Data
Consultation notes, prescriptions, medical history, diagnoses, and lab results shared during platform use.
Technical Data
Device type, IP address, browser information, and platform usage logs collected automatically.
Payment Information
Billing details processed through secure payment gateways. We do not store full card numbers on our servers.
How We Use Your Data
Your information is used solely to operate, improve, and personalise the Dr. Khokha platform. We process data only when we have a lawful basis to do so, including your consent, contractual necessity, or legitimate interest.
- To create and manage your account and verify your credentials (doctors, hospitals, agencies).
- To facilitate video consultations, appointment scheduling, and prescription management.
- To provide medical professionals access to patient records shared during consultations.
- To send appointment reminders, platform notifications, and important account updates.
- To process payments for consultations and platform services securely.
- To improve platform features, fix bugs, and analyse usage patterns to enhance user experience.
- To comply with Indian healthcare regulations, MCI guidelines, and applicable laws.
We will never use your health data for advertising purposes. Medical information shared during consultations is strictly used for clinical care delivery.
Data Sharing & Disclosure
We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:
- Healthcare Providers: Doctors, hospitals, and agencies on the platform may access patient data that patients have explicitly shared during consultations.
- Service Providers: Trusted third-party vendors (e.g., payment processors, cloud hosting, SMS services) who are contractually bound to protect your data.
- Legal Obligations: When required by Indian law, court orders, or regulatory authorities such as the Ministry of Health & Family Welfare.
- Business Transfers: In the event of a merger or acquisition, your data may transfer to the new entity, which will be bound by this policy.
- With Your Consent: In any other case, we will ask for your explicit consent before sharing your information.
Data Security
We implement industry-standard and HIPAA-compliant security measures to protect your data from unauthorised access, alteration, disclosure, or destruction.
End-to-End Encryption
All data transmitted between your device and our servers is encrypted using TLS 1.3.
AES-256 Encryption at Rest
All stored health records and personal data are encrypted at rest using AES-256 encryption.
Role-Based Access
Strict access controls ensure only authorised personnel can view specific categories of data.
24/7 Security Monitoring
Continuous monitoring for suspicious activity, intrusion attempts, and anomalies.
Cookies & Tracking Technologies
We use cookies and similar tracking technologies to operate and improve the platform. You can manage cookie preferences through your browser settings at any time.
- Essential Cookies: Required for the platform to function, including session management and security tokens. Cannot be disabled.
- Analytics Cookies: Help us understand how users interact with the platform. We use anonymised data only. Can be opted out.
- Preference Cookies: Remember your settings, language preferences, and login status for a better experience.
- Marketing Cookies: We do not use marketing or advertising cookies. No third-party ad networks are used on this platform.
Your Rights
Under applicable Indian data protection law and global privacy standards, you have the following rights regarding your personal data:
Right to Access
Request a copy of all personal data we hold about you.
Right to Rectify
Correct any inaccurate or incomplete personal information.
Right to Erasure
Request deletion of your data, subject to legal retention requirements.
Right to Restrict
Limit how we process your data in specific circumstances.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing of your data for certain purposes.
To exercise any of these rights, email us at privacy@drkhokha.com. We will respond within 30 days.
Data Retention
We retain your personal and health data only for as long as necessary to provide our services and comply with legal obligations.
- Active account data is retained for the duration of your account plus 3 years after account closure.
- Medical consultation records and prescriptions are retained for 7 years as required by Indian medical record-keeping standards.
- Payment transaction records are retained for 8 years for financial and tax compliance purposes.
- Analytics and usage data is anonymised after 12 months and may be retained indefinitely in aggregate form.
After retention periods expire, data is securely deleted or anonymised so it can no longer be linked to you.
Children's Privacy
The Dr. Khokha platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors.
Paediatric patients may be registered on the platform by a parent or legal guardian, who assumes full responsibility for the accuracy of information provided and consent given on behalf of the minor.
If you believe we have inadvertently collected data from a minor without appropriate parental consent, please contact us immediately at privacy@drkhokha.com and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or platform features.
When we make material changes, we will notify registered users via email and display a prominent notice on the platform at least 14 days before the changes take effect. Continued use of the platform after that date constitutes acceptance of the updated policy.
The Last updated date at the top of this page reflects when this policy was last revised. We encourage you to review this page periodically.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out to our Data Protection Officer.
Data Protection Officer
Our dedicated DPO is available to address any privacy concerns, process data requests, and ensure your rights are upheld at all times.