Privacy Policy

1. Operational Scope & Emergency Medical Logistics

This policy governs the processing, handling, and security of patient demographic data, pickup/destination geolocation records, and emergency vitals collected during ambulance transportation under the DR. Khokha Emergency Response Network.

2. Real-time Telemetry & GPS Geolocation Tracking

Authorized ambulance drivers and fleet vehicles stream live GPS telemetry exclusively while on active duty or engaged in assigned patient transfers. Location data is strictly used for dispatch optimization, route calculation, and patient safety monitoring.

3. Emergency Medical Data Handling

Paramedics, emergency medical technicians (EMTs), and drivers handle sensitive patient information solely for the purpose of facilitating immediate care and transit handoff to destination hospitals. Data is encrypted and treated under DPDP Act 2023 guidelines.

4. Trip Logs, Fares & Audit Records

Trip receipts, timestamps, route corridors, and payment records are maintained for audit, regulatory compliance, and operator settlement ledgers.

Welcome to Dr. Khokha (https://drkhokha.com/). We are committed to protecting

your personal data and respecting your digital privacy. This Privacy Policy

outlines how we collect, process, use, and safeguard your information when you

visit our website, utilize our healthcare platform ecosystems, or purchase our

integrated advisory and consultation services.

1. INFORMATION WE COLLECT

We collect information directly from you when you interact with our platform,

book a consultation, or register an account. This includes:

* Personal Data: Name, email address, contact phone number, billing address,

 and associated identification profiles.

* Health & Consultation Information: Any details, medical histories, system

 queries, or logs you provide while scheduling or undertaking advisory

 services on our platform.

* Transaction Details: When making a payment via our integrated merchant partner

 (Razorpay), your transaction parameters are securely handled. We do not store

 complete credit/debit card numbers or net banking credentials on our database

 architecture; all such data is safely processed via the tokenized frameworks

 of Razorpay.

* Technical & Usage Data: IP addresses, browser variants, device operational

 metadata, and layout interaction logs gathered automatically via secure

 analytical tools.

2. HOW WE USE YOUR INFORMATION

The operational data we track is utilized exclusively to:

* Deliver, optimize, and scale our high-fidelity digital platforms and technical

 consultation pipelines.

* Process legal commercial transactions efficiently through Razorpay.

* Distribute mandatory transactional alerts, instant digital receipts, invoices,

 and vital service updates.

* Comply with necessary legal frameworks, preventative security constraints,

 and financial aggregator policies.

3. INFORMATION SHARING AND DISCLOSURE

We do not lease, trade, or sell your personal database information to third-party

marketing brokers. Data sharing is limited to:

* Authorized Service Providers: Operational partners including Razorpay Payments

 Private Limited to handle secure authorization and guard against fraudulent checkouts.

* Legal Compliance: When requested under valid statutory actions, cyber security

 inquiries, or by governing frameworks operating under the Information Technology Act, 2000.

4. DATA SECURITY

We adopt clean, standard encryption techniques and electronic safety practices

to prevent server data breach or unauthorized adjustments. Transactions executed

over our system are shielded using end-to-end Secure Socket Layer (SSL) channels

hosted directly by our payment partner.

5. GRIEVANCE REDRESSAL / CONTACT US

In accordance with the mandates of the Information Technology Act, 2000, all

operational issues, data feedback, or policy grievances may be systematically

filed to our Data Protection Team at:

* Email: support@drkhokha.com

* Website Link: https://drkhokha.com/

Doctor Privacy Policy

Welcome to DR. Khokha. We are dedicated to respecting and protecting the professional and personal data of registered medical practitioners, consultants, and healthcare partners.

1. Information We Collect

When you register and practice as a Doctor on DR. Khokha, we collect:

• Professional Credentials: Medical registration number (MCI / NMC / State Medical Council), degrees, specialization certificates, experience, and clinic affiliations.
• Identity & KYC Details: Government ID, professional photo, email address, mobile number, and clinic/hospital location.
• Banking & Settlement Data: Bank account numbers, IFSC codes, and UPI IDs for consultation earnings settlement.
• Telemedicine Session Logs: Prescription records, appointment timestamps, and encrypted consultation durations.

2. How We Use Your Data

Your information is used strictly to verify medical credentials in compliance with NMC Telemedicine Practice Guidelines, display verified profiles to patients, facilitate tele-consultations, and process earnings payouts.

3. Data Security

All doctor data and consultation sessions are secured via TLS 1.3 encryption and stored in compliance with the Digital Personal Data Protection (DPDP) Act, 2023.

4. Contact & Support

For any data questions, contact: support@drkhokha.com

Patient Privacy Policy

At DR. Khokha, your personal health information and digital privacy are our highest priority.

1. Information We Collect

• Personal Profile: Name, age, gender, date of birth, contact number, and address.
• Health Records (EHR): Consultation history, uploaded medical documents, lab test reports, and digital prescriptions.
• Family Member Profiles: Dependent health records added under your account.
• Billing & Wallet Data: Tokenized payment transactions handled via authorized gateways (Razorpay / PhonePe).

2. How We Use Your Data

Your health data is used exclusively to facilitate consultations with chosen doctors, manage digital prescriptions, schedule diagnostic tests, and process appointment bookings.

3. Confidentiality

Your medical history is accessible only by the healthcare professional you consult. We never sell, rent, or trade patient health records.

4. Contact & Support

For inquiries regarding personal health data, contact: support@drkhokha.com

1. Introduction & Operational Scope

This E-Clinic & Agency Privacy Policy governs the collection, processing, confidentiality, and management of sensitive healthcare and operational data by authorized e-Medi Plaza centers, rural healthcare touchpoints, and medical agency franchises operating on the DR. Khokha Platform.

2. Information Collected by E-Clinics

In operating an E-Clinic, authorized personnel and center managers handle:

• Walk-in Patient Records: Full name, age, gender, contact number, government ID proofs (if applicable for subsidized schemes), and chief health complaints.
• Consultation Artifacts: Diagnostic vitals (blood pressure, pulse, SpO2, blood glucose), preliminary screening observations, and uploaded medical investigation files.
• Agency Financial Data: Bank account credentials, GST numbers, PAN details, and commission remittance ledger records.

3. Patient Confidentiality & Data Custodianship

E-Clinics operate as secondary custodians of patient health data under the direct supervision of consulting physicians:

• Center managers and assistants must maintain strict confidentiality regarding patient medical concerns, examination results, and teleconsultation audio/video.
• Patient digital prescriptions printed at the center must be handed directly to the patient or their legally authorized guardian. No physical copies may be retained without consent.
• Screen recordings or unauthorized photography of teleconsultation sessions are strictly prohibited and constitute a violation of medical ethics and platform terms.

4. Secure Teleconsultation Infrastructure

All video interactions initiated from the E-Clinic portal utilize end-to-end encrypted WebRTC channels. Video feeds are never stored on public servers; only clinical summary notes and prescriptions verified by the registered medical practitioner are archived in the patient's permanent electronic health record (EHR).

5. Commercial Data & Commission Settlement Privacy

Financial transactions, commission rates, and wallet settlements between DR. Khokha and the agency are treated as proprietary commercial information. Banking details are tokenized and protected using banking-grade encryption protocols.

6. Contact & Compliance

For questions or audit compliance inquiries regarding E-Clinic operational privacy, contact: agency-compliance@drkhokha.healthboat.org.

1. Institutional Overview & Scope

This Healthcare Provider Privacy Policy applies to registered hospitals, nursing homes, polyclinics, and multi-specialty healthcare institutions utilizing DR. Khokha for hospital information management, OPD scheduling, teleconsultations, and physician roster coordination.

2. Institutional & Clinical Data Handling

DR. Khokha processes institutional data strictly on behalf of the healthcare provider, acting as a secure data processor:

• Affiliated Clinician Data: Medical registration certificates, qualifications, specialty licenses, duty rosters, and consultation tariff structures.
• Inpatient & Outpatient Records: OPD registration numbers, triage classifications, attending doctor assignments, medical notes, and billing ledgers.
• Administrative Accounts: Access control credentials for hospital administrators, billing clerks, reception staff, and nursing stations.

3. Compliance with Healthcare Regulations

Healthcare Providers utilizing DR. Khokha operate in full compliance with applicable Indian and international healthcare legislation, including:

• The Digital Personal Data Protection (DPDP) Act, 2023.
• The Information Technology Act, 2000 and Reasonable Security Practices Rules.
• National Medical Commission (NMC) Telemedicine Practice Guidelines, 2020.
• Clinical Establishments (Registration and Regulation) Act.

4. Role-Based Access Controls (RBAC)

Hospital administrative accounts are governed by strict role-based access. Receptionists and booking staff cannot view clinical treatment notes or sensitive diagnoses; conversely, medical history is strictly restricted to authorized treating physicians and clinical nursing staff.

5. Institutional Audit Trails & Data Retention

All access to electronic health records, prescription modifications, and diagnostic uploads within the provider portal are logged with tamper-proof timestamps, IP addresses, and user identifiers to facilitate regulatory and clinical audits.

6. Data Breach Notification & Inquiries

Institutional privacy officers may direct compliance queries to: provider-privacy@drkhokha.healthboat.org.

1. Overview of Affiliate Data Practices

This Affiliate Privacy Policy sets forth how DR. Khokha collects, uses, and safeguards information relating to authorized field agents, marketing affiliates, channel partners, and referral ambassadors participating in our growth network.

2. Information Collected from Partners

To establish and administer partner accounts, we collect:

• Identity & KYC: Legal name, government identity documentation (Aadhaar/Voter ID), mobile phone, email address, and territory of operation.
• Payout Information: Bank account number, IFSC code, account holder name, and UPI identifiers for commission distribution.
• Referral Telemetry: Clicks, conversions, registration attribution timestamps, and referral link usage logs.

3. Protection of Referred Patient & Entity Privacy

In accordance with medical confidentiality standards, referral partners are provided with commission totals and masked registration counts only. Partners have no access to patients' personal medical histories, consultation details, diagnoses, or prescriptions.

4. Anti-Spam & Marketing Ethics

Affiliate partners must adhere to ethical outreach guidelines. Unsolicited commercial messaging (SMS spam, deceptive telemarketing) is strictly prohibited and results in immediate account forfeiture and commission revocation.

5. Partner Support & Inquiries

For questions concerning referral privacy and partner data policies, contact: partners@drkhokha.healthboat.org.

1. Diagnostic Data Governance

This Diagnostic Laboratory Privacy Policy applies to NABL-accredited diagnostic laboratories, pathology testing centers, and imaging facilities integrated with the DR. Khokha ecosystem.

2. Handling of Biological Samples & Test Results

Diagnostic partners agree to strict protocols regarding clinical investigations:

• Test Requisitions: Prescribed diagnostic test codes and clinical indications received from registered doctors are processed solely for performing requested analyses.
• Digital Report Delivery: Laboratory investigation reports are delivered directly via secure encrypted links to the patient and ordering clinician. Reports are never shared with unauthorized parties.
• Specimen Privacy: Patient biological samples are identified via barcode numbers and sanitized identifiers during lab processing to preserve donor anonymity.

3. Retention of Diagnostic Archives

Diagnostic records are archived in compliance with regulatory mandates (minimum 3 years for clinical pathology, 5 years for imaging and histopathology) using encrypted cloud storage with automatic redundancy.

1. Pharmacy Data Protection Scope

This policy details the privacy obligations of licensed retail pharmacies, hospital dispensaries, and digital medicine delivery partners operating through the DR. Khokha network.

2. Prescription Verification & Dispensing Logs

Pharmacies receiving digital prescriptions for order fulfillment agree to:

• Verify the digital authenticity and signature of the prescribing physician prior to medication dispensing.
• Maintain dispensing registers and Schedule H/H1 records in strict compliance with the Drugs and Cosmetics Act, 1940 and Pharmacy Practice Regulations.
• Restrict customer contact information strictly to order delivery logistics and pharmacist counseling. Customer data may not be utilized for secondary marketing.