Legal Center

Privacy Policy

Last Updated: June 2026

1. Data Collection & Processing

We process limited data for clinic operational workflows: patient names, phone numbers, ages, genders, triage vitals, and generated prescription files. For physicians, we maintain professional registration metadata, clinic association records, and linked UPI details.

2. How We Use Your Data

Data is utilized strictly to run outpatient queue queues, send tracking links and digital prescriptions via WhatsApp/SMS, and direct payment routing via UPI. We do not engage in patient cross-selling or pharmaceutical advertisements.

3. Compliance & DPDP Act 2023

ClinConnect is fully compliant with India's Digital Personal Data Protection (DPDP) Act, 2023. Patient data is processed on the legal basis of consent or legitimate medical use. Patients can request review, correction, or erasure of their records directly through their consulting clinic.

4. Cookie & Data Retention Policy

We use essential cookies to maintain login sessions. Patient clinical history is retained in a secure, encrypted database as required by medical documentation regulations, unless a deletion request is validated by the consulting clinic.

5. Minimal Third-Party Sharing

Clinical data is never sold. It is shared only with direct hosting providers (Supabase), secure database infrastructure, and communication partners (WhatsApp API and SMS gateways) to route digital prescriptions.

Privacy & Consent Officer

For any queries regarding your data protection rights, consent withdrawals, or compliance under the DPDP Act 2023, please reach out to our privacy desk:

privacy@clinconnect.in