Privacy Policy

1. Operational Scope & Emergency Medical Logistics

This policy governs the processing, handling, and security of patient demographic data, pickup/destination geolocation records, and emergency vitals collected during ambulance transportation under the DR. Khokha Emergency Response Network.

2. Real-time Telemetry & GPS Geolocation Tracking

Authorized ambulance drivers and fleet vehicles stream live GPS telemetry exclusively while on active duty or engaged in assigned patient transfers. Location data is strictly used for dispatch optimization, route calculation, and patient safety monitoring.

3. Emergency Medical Data Handling

Paramedics, emergency medical technicians (EMTs), and drivers handle sensitive patient information solely for the purpose of facilitating immediate care and transit handoff to destination hospitals. Data is encrypted and treated under DPDP Act 2023 guidelines.

4. Trip Logs, Fares & Audit Records

Trip receipts, timestamps, route corridors, and payment records are maintained for audit, regulatory compliance, and operator settlement ledgers.

Welcome to Dr. Khokha (https://drkhokha.com/). We are committed to protecting

your personal data and respecting your digital privacy. This Privacy Policy

outlines how we collect, process, use, and safeguard your information when you

visit our website, utilize our healthcare platform ecosystems, or purchase our

integrated advisory and consultation services.

1. INFORMATION WE COLLECT

We collect information directly from you when you interact with our platform,

book a consultation, or register an account. This includes:

* Personal Data: Name, email address, contact phone number, billing address,

 and associated identification profiles.

* Health & Consultation Information: Any details, medical histories, system

 queries, or logs you provide while scheduling or undertaking advisory

 services on our platform.

* Transaction Details: When making a payment via our integrated merchant partner

 (Razorpay), your transaction parameters are securely handled. We do not store

 complete credit/debit card numbers or net banking credentials on our database

 architecture; all such data is safely processed via the tokenized frameworks

 of Razorpay.

* Technical & Usage Data: IP addresses, browser variants, device operational

 metadata, and layout interaction logs gathered automatically via secure

 analytical tools.

2. HOW WE USE YOUR INFORMATION

The operational data we track is utilized exclusively to:

* Deliver, optimize, and scale our high-fidelity digital platforms and technical

 consultation pipelines.

* Process legal commercial transactions efficiently through Razorpay.

* Distribute mandatory transactional alerts, instant digital receipts, invoices,

 and vital service updates.

* Comply with necessary legal frameworks, preventative security constraints,

 and financial aggregator policies.

3. INFORMATION SHARING AND DISCLOSURE

We do not lease, trade, or sell your personal database information to third-party

marketing brokers. Data sharing is limited to:

* Authorized Service Providers: Operational partners including Razorpay Payments

 Private Limited to handle secure authorization and guard against fraudulent checkouts.

* Legal Compliance: When requested under valid statutory actions, cyber security

 inquiries, or by governing frameworks operating under the Information Technology Act, 2000.

4. DATA SECURITY

We adopt clean, standard encryption techniques and electronic safety practices

to prevent server data breach or unauthorized adjustments. Transactions executed

over our system are shielded using end-to-end Secure Socket Layer (SSL) channels

hosted directly by our payment partner.

5. GRIEVANCE REDRESSAL / CONTACT US

In accordance with the mandates of the Information Technology Act, 2000, all

operational issues, data feedback, or policy grievances may be systematically

filed to our Data Protection Team at:

* Email: support@drkhokha.com

* Website Link: https://drkhokha.com/

Doctor Privacy Policy

Welcome to DR. Khokha. We are dedicated to respecting and protecting the professional and personal data of registered medical practitioners, consultants, and healthcare partners.

1. Information We Collect

When you register and practice as a Doctor on DR. Khokha, we collect:

• Professional Credentials: Medical registration number (MCI / NMC / State Medical Council), degrees, specialization certificates, experience, and clinic affiliations.
• Identity & KYC Details: Government ID, professional photo, email address, mobile number, and clinic/hospital location.
• Banking & Settlement Data: Bank account numbers, IFSC codes, and UPI IDs for consultation earnings settlement.
• Telemedicine Session Logs: Prescription records, appointment timestamps, and encrypted consultation durations.

2. How We Use Your Data

Your information is used strictly to verify medical credentials in compliance with NMC Telemedicine Practice Guidelines, display verified profiles to patients, facilitate tele-consultations, and process earnings payouts.

3. Data Security

All doctor data and consultation sessions are secured via TLS 1.3 encryption and stored in compliance with the Digital Personal Data Protection (DPDP) Act, 2023.

4. Contact & Support

For any data questions, contact: support@drkhokha.com

Patient Privacy Policy

At DR. Khokha, your personal health information and digital privacy are our highest priority.

1. Information We Collect

• Personal Profile: Name, age, gender, date of birth, contact number, and address.
• Health Records (EHR): Consultation history, uploaded medical documents, lab test reports, and digital prescriptions.
• Family Member Profiles: Dependent health records added under your account.
• Billing & Wallet Data: Tokenized payment transactions handled via authorized gateways (Razorpay / PhonePe).

2. How We Use Your Data

Your health data is used exclusively to facilitate consultations with chosen doctors, manage digital prescriptions, schedule diagnostic tests, and process appointment bookings.

3. Confidentiality

Your medical history is accessible only by the healthcare professional you consult. We never sell, rent, or trade patient health records.

4. Contact & Support

For inquiries regarding personal health data, contact: support@drkhokha.com

1. Introduction & Operational Scope

This E-Clinic & Agency Privacy Policy governs the collection, processing, confidentiality, and management of sensitive healthcare and operational data by authorized e-Medi Plaza centers, rural healthcare touchpoints, and medical agency franchises operating on the DR. Khokha Platform.

2. Information Collected by E-Clinics

In operating an E-Clinic, authorized personnel and center managers handle:

• Walk-in Patient Records: Full name, age, gender, contact number, government ID proofs (if applicable for subsidized schemes), and chief health complaints.
• Consultation Artifacts: Diagnostic vitals (blood pressure, pulse, SpO2, blood glucose), preliminary screening observations, and uploaded medical investigation files.
• Agency Financial Data: Bank account credentials, GST numbers, PAN details, and commission remittance ledger records.

3. Patient Confidentiality & Data Custodianship

E-Clinics operate as secondary custodians of patient health data under the direct supervision of consulting physicians:

• Center managers and assistants must maintain strict confidentiality regarding patient medical concerns, examination results, and teleconsultation audio/video.
• Patient digital prescriptions printed at the center must be handed directly to the patient or their legally authorized guardian. No physical copies may be retained without consent.
• Screen recordings or unauthorized photography of teleconsultation sessions are strictly prohibited and constitute a violation of medical ethics and platform terms.

4. Secure Teleconsultation Infrastructure

All video interactions initiated from the E-Clinic portal utilize end-to-end encrypted WebRTC channels. Video feeds are never stored on public servers; only clinical summary notes and prescriptions verified by the registered medical practitioner are archived in the patient's permanent electronic health record (EHR).

5. Commercial Data & Commission Settlement Privacy

Financial transactions, commission rates, and wallet settlements between DR. Khokha and the agency are treated as proprietary commercial information. Banking details are tokenized and protected using banking-grade encryption protocols.

6. Contact & Compliance

For questions or audit compliance inquiries regarding E-Clinic operational privacy, contact: agency-compliance@drkhokha.healthboat.org.

1. Institutional Overview & Scope

This Healthcare Provider Privacy Policy applies to registered hospitals, nursing homes, polyclinics, and multi-specialty healthcare institutions utilizing DR. Khokha for hospital information management, OPD scheduling, teleconsultations, and physician roster coordination.

2. Institutional & Clinical Data Handling

DR. Khokha processes institutional data strictly on behalf of the healthcare provider, acting as a secure data processor:

• Affiliated Clinician Data: Medical registration certificates, qualifications, specialty licenses, duty rosters, and consultation tariff structures.
• Inpatient & Outpatient Records: OPD registration numbers, triage classifications, attending doctor assignments, medical notes, and billing ledgers.
• Administrative Accounts: Access control credentials for hospital administrators, billing clerks, reception staff, and nursing stations.

3. Compliance with Healthcare Regulations

Healthcare Providers utilizing DR. Khokha operate in full compliance with applicable Indian and international healthcare legislation, including:

• The Digital Personal Data Protection (DPDP) Act, 2023.
• The Information Technology Act, 2000 and Reasonable Security Practices Rules.
• National Medical Commission (NMC) Telemedicine Practice Guidelines, 2020.
• Clinical Establishments (Registration and Regulation) Act.

4. Role-Based Access Controls (RBAC)

Hospital administrative accounts are governed by strict role-based access. Receptionists and booking staff cannot view clinical treatment notes or sensitive diagnoses; conversely, medical history is strictly restricted to authorized treating physicians and clinical nursing staff.

5. Institutional Audit Trails & Data Retention

All access to electronic health records, prescription modifications, and diagnostic uploads within the provider portal are logged with tamper-proof timestamps, IP addresses, and user identifiers to facilitate regulatory and clinical audits.

6. Data Breach Notification & Inquiries

Institutional privacy officers may direct compliance queries to: provider-privacy@drkhokha.healthboat.org.

1. Overview of Affiliate Data Practices

This Affiliate Privacy Policy sets forth how DR. Khokha collects, uses, and safeguards information relating to authorized field agents, marketing affiliates, channel partners, and referral ambassadors participating in our growth network.

2. Information Collected from Partners

To establish and administer partner accounts, we collect:

• Identity & KYC: Legal name, government identity documentation (Aadhaar/Voter ID), mobile phone, email address, and territory of operation.
• Payout Information: Bank account number, IFSC code, account holder name, and UPI identifiers for commission distribution.
• Referral Telemetry: Clicks, conversions, registration attribution timestamps, and referral link usage logs.

3. Protection of Referred Patient & Entity Privacy

In accordance with medical confidentiality standards, referral partners are provided with commission totals and masked registration counts only. Partners have no access to patients' personal medical histories, consultation details, diagnoses, or prescriptions.

4. Anti-Spam & Marketing Ethics

Affiliate partners must adhere to ethical outreach guidelines. Unsolicited commercial messaging (SMS spam, deceptive telemarketing) is strictly prohibited and results in immediate account forfeiture and commission revocation.

5. Partner Support & Inquiries

For questions concerning referral privacy and partner data policies, contact: partners@drkhokha.healthboat.org.

1. Diagnostic Data Governance

This Diagnostic Laboratory Privacy Policy applies to NABL-accredited diagnostic laboratories, pathology testing centers, and imaging facilities integrated with the DR. Khokha ecosystem.

2. Handling of Biological Samples & Test Results

Diagnostic partners agree to strict protocols regarding clinical investigations:

• Test Requisitions: Prescribed diagnostic test codes and clinical indications received from registered doctors are processed solely for performing requested analyses.
• Digital Report Delivery: Laboratory investigation reports are delivered directly via secure encrypted links to the patient and ordering clinician. Reports are never shared with unauthorized parties.
• Specimen Privacy: Patient biological samples are identified via barcode numbers and sanitized identifiers during lab processing to preserve donor anonymity.

3. Retention of Diagnostic Archives

Diagnostic records are archived in compliance with regulatory mandates (minimum 3 years for clinical pathology, 5 years for imaging and histopathology) using encrypted cloud storage with automatic redundancy.

1. Scope & Commitment to Privacy

This Privacy Policy outlines the practices and obligations of DR. Khokha ("Platform") and its network of licensed retail pharmacies, hospital dispensaries, and digital delivery partners ("Pharmacy Partners") regarding the collection, processing, protection, and retention of pharmacy business data and patient health records.

2. Information Collected from Pharmacy Partners

During onboarding and active operation, DR. Khokha collects and processes the following partner data:

• Business & Licensing Data: Legal entity name, trade name, registered pharmacy address, state drug license numbers, validity certificates, GSTIN, and PAN.
• Pharmacist & Contact Information: Name, photo identification, State Pharmacy Council registration number, registered mobile number, and official email address.
• Financial & Settlement Data: Bank account numbers, IFSC codes, cancelled cheques, wallet balances, transaction logs, and payout histories.
• Operational Data: Product catalog listings, stock availability, pricing updates, order fulfillment metrics, and dispatch timestamps.

3. Protection of Patient Data & Prescription Confidentiality

Pharmacy Partners receive access to sensitive patient health information solely for order fulfillment purposes:

• Strict Purpose Limitation: Patient names, contact details, delivery addresses, doctor prescriptions, and medical histories are shared strictly for dispensing and delivery logistics.
• Zero Secondary Marketing: Pharmacy Partners are strictly prohibited from using customer telephone numbers or addresses for secondary promotions, cross-selling, marketing SMS/calls, or building proprietary commercial databases.
• Non-Disclosure: Patient prescriptions and medical diagnoses must never be disclosed to unauthorized third parties or unverified staff members.

4. Data Security & Storage Standards

DR. Khokha implements robust industry-standard safeguards to secure pharmacy and patient records:

• End-to-end transport layer security (TLS 1.3 encryption) for all API communications and mobile/web portal access.
• Role-based access controls ensuring only authorized pharmacists and staff can review prescription orders.
• Compliance with the Digital Personal Data Protection Act (DPDPA), 2023, Information Technology Act, 2000, and Pharmacy Practice Regulations.

5. Statutory Record Retention

In accordance with the Drugs and Cosmetics Act, 1940 and applicable pharmaceutical laws, records of Schedule H/H1 dispensations and digital prescriptions will be archived securely for the statutory mandatory retention period (typically 2 to 5 years), after which they are securely expunged or anonymized.

6. Information Sharing & Third Parties

Pharmacy Partner information is shared only under specific circumstances:

• With registered delivery personnel and courier partners to the extent required to execute shipment pickup and handover.
• With banking partners and payment gateways to execute wallet payouts and direct bank deposits.
• With drug regulatory authorities, state drug inspectors, or law enforcement bodies upon receipt of a lawful warrant or regulatory inquiry.

7. Grievance Officer & Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or data handling practices, please contact our Data Protection and Grievance Officer at:

Email: privacy@healthboat.org / support@healthboat.org
Platform: DR. Khokha Healthcare Network (healthboat.org)