Privacy Policy
Last updated: April 11, 2026
1. Introduction
BookMyDoc (operated by WikiTechnos, "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website (bookmydoc.info), mobile applications, and related services (collectively, the "Platform"). By using BookMyDoc, you consent to the practices described in this policy.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, phone number, and password when you register
- Profile Information: Date of birth, gender, and profile photo (optional)
- Patient Information: Names, ages, gender, and relationship of patients you add for booking appointments
- Booking Information: Doctor preferences, appointment dates and times, clinic selections, and medical specialization preferences
- Payment Information: Payment method details are collected and processed directly by our payment gateway partners (Razorpay and Cashfree). BookMyDoc does not store your credit/debit card numbers, bank account details, or UPI credentials on our servers
- Communication Data: Messages, feedback, and support requests you send to us
2.2 Information Collected Automatically
- Device Information: Device type, operating system, browser type, and version
- Usage Data: Pages visited, features used, search queries, appointment history, and interaction patterns
- Log Data: IP address, access times, referring URLs, and error logs
- Analytics Data: We use analytics tools to understand how users interact with our platform. This data is anonymized and aggregated where possible
- Cookies and Local Storage: We use cookies and browser local storage to maintain your session, remember preferences, and improve your experience
3. How We Use Your Information
We use the collected information for the following purposes:
- Service Delivery: To facilitate doctor searches, appointment bookings, payment processing, and appointment management
- Account Management: To create and manage your account, verify your identity, and provide customer support
- Communication: To send appointment confirmations, reminders, status updates, and important service notifications via email, SMS, or push notifications
- Payment Processing: To process platform fees and consultation fees through secure payment gateways, manage refunds, and maintain transaction records
- Platform Improvement: To analyze usage patterns, diagnose technical issues, and improve the platform's features and user experience
- Security: To detect, prevent, and address fraud, abuse, and security threats
- Legal Compliance: To comply with applicable laws, regulations, and legal processes
4. Information Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- With Healthcare Providers: We share your name, contact details, and patient information with the doctor and clinic you book an appointment with, solely for the purpose of fulfilling the appointment
- Payment Processors: We share necessary transaction details with Razorpay, Cashfree, and other payment gateway partners to process payments securely. These providers are PCI-DSS compliant and have their own privacy policies
- Service Providers: We may share data with trusted third-party service providers who assist us in operating the platform (hosting, analytics, email delivery, SMS providers), under strict confidentiality agreements
- Legal Requirements: We may disclose information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others
- Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction
5. Payment Data Security
We take payment security seriously:
- All payment transactions are encrypted using industry-standard SSL/TLS encryption
- Payment card details are processed directly by PCI-DSS Level 1 compliant payment gateways (Razorpay and Cashfree)
- BookMyDoc does not store, process, or have access to your full card numbers, CVV, or banking credentials
- We only retain transaction IDs, order references, and payment status for record-keeping and refund processing
- Payment gateway tokens are stored securely and cannot be used to initiate unauthorized transactions
6. Data Storage and Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption of data in transit (HTTPS/TLS) and at rest
- Secure authentication using JWT tokens with automatic expiration and refresh
- Access controls and role-based permissions for internal systems
- Regular security assessments and monitoring
- Data stored on secure cloud infrastructure with industry-standard protections
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest practical standards.
7. Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specifically:
- Account Data: Retained as long as your account is active. You may request deletion at any time
- Booking and Transaction Records: Retained for a minimum of 5 years as required by applicable financial and tax regulations
- Analytics Data: Aggregated and anonymized data may be retained indefinitely for statistical purposes
- Communication Logs: Support interactions are retained for up to 2 years
8. Your Rights
You have the following rights regarding your personal data:
- Access: You can view and download your personal information from your profile page at any time
- Correction: You can update or correct inaccurate information through your profile settings
- Deletion: You may request deletion of your account and associated personal data by contacting us at support@bookmydoc.info. Note that certain data may be retained as required by law
- Withdrawal of Consent: You can withdraw consent for optional data processing (such as marketing communications) at any time through your settings
- Data Portability: You may request a copy of your personal data in a structured, machine-readable format
9. Cookies and Tracking Technologies
We use the following tracking technologies:
- Essential Cookies: Required for authentication, session management, and platform functionality
- Analytics: Used to understand user behavior and improve the platform. You can opt out of analytics tracking through your browser settings
- Local Storage: Used to store authentication tokens and user preferences for a seamless experience
We do not use advertising cookies or share tracking data with advertising networks.
10. Children's Privacy
BookMyDoc is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children under 18. Parents or guardians may create accounts and book appointments on behalf of minors. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly.
11. Third-Party Links
The Platform may contain links to third-party websites and services (including payment gateways, map services, and app stores). We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party service before providing personal information.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last updated" date. Your continued use of BookMyDoc after changes are posted constitutes acceptance of the revised policy.
13. Grievance Officer
In accordance with the Information Technology Act, 2000 and the rules made thereunder, the contact details of the Grievance Officer are:
- Name: Ikhlaq Ahmed
- Email: ikhlaq@bookmydoc.info
- Address: WikiTechnos, Kerala, India
The Grievance Officer shall address your concerns within 30 days of receiving a written complaint.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: support@bookmydoc.info
- Website: bookmydoc.info