Privacy Policy

Who we are

Medoc.in is a healthcare discovery platform operated by Medoc.in. It helps people find doctors, hospitals, clinics, diagnostic centres and pharmacies, and helps those providers manage their listings. This policy explains what personal data we collect, why, and the choices you have. It applies to our website and services.

The data we collect

When you use Medoc as a patient or visitor

Account details: name, email address, mobile number and a password (stored only as a secure, one-way hash).
Bookings, enquiries and "Consult now" requests: your name, mobile number, preferred date and time, appointment type and any message you write.
Reviews and questions: what you write, and for Ask a Doctor the age and gender you choose to give.
Saved providers and preferences, such as the city you choose.

When you list a practice

Listing details: practice name, address, timings, fees, qualifications, specialties, photos and contact details.
Verification documents: identity, address and registration documents you upload. These are stored privately and viewed only by our verification team.
Payment records for paid plans. Payments are processed by Razorpay; we never see or store your card or bank details.

Collected automatically

Usage data: pages viewed, searches (stored without your identity), and clicks such as "Call" or "Directions", used to improve the service and to show providers how their listing performs.
Technical data: IP address (stored in a hashed form for security and spam prevention), browser type and device information.
Cookies: see our Cookie Policy.

Health information

Medoc is not a medical records service. We do not ask for prescriptions, reports, diagnoses or medical records, and we ask you not to include them in enquiries, reviews or questions. If you choose to describe a symptom in a message, it is shared only with the provider you contact. Ask a Doctor questions are published without your name, after a person has reviewed them to remove identifying details.

How we use your data

To run your account and the features you use, such as sending your booking request to the provider you choose.
To send service messages: booking confirmations, answers to your questions, password resets and important account notices.
To verify providers and keep listings accurate.
To keep Medoc safe: preventing spam, fraud and abuse, and enforcing our Terms of Use.
To understand how Medoc is used and improve it, using aggregated or de-identified data where possible.
To meet legal obligations.

We do not sell your personal data, and we do not show third-party advertising based on it.

We process your personal data on the basis of your consent, given when you create an account or submit a form, and for certain legitimate uses permitted by law, such as complying with legal obligations or responding to emergencies. You can withdraw consent at any time by deleting your account or writing to us. Withdrawal does not affect processing that already took place.

The provider you contact. When you book, enquire or request a call back, your details and message go to that provider so they can respond.
Service providers who help us run Medoc, under contracts that limit their use of your data: web hosting, email delivery, and Razorpay for payments.
WhatsApp, only when you choose to send a booking or request through it. Your message is then handled under WhatsApp's own privacy policy.
Authorities, when required by law or to protect the rights, property or safety of people.

How long we keep data

We keep personal data only as long as needed for the purposes above. Account data is kept while your account is active. Enquiries and booking requests are kept for up to 24 months so providers can follow up. Verification documents are kept while the listing is verified and for a limited period afterwards for audit. When data is no longer needed we delete or anonymise it, unless the law requires us to keep it longer.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

Access a summary of the personal data we hold about you and how we use it.
Correct or update inaccurate or incomplete data. Most details can be changed in your account settings.
Erase your data, subject to legal requirements.
Withdraw consent at any time.
Nominate another person to exercise these rights if you are unable to.
Raise a grievance with our Grievance Officer, and if unresolved, with the Data Protection Board of India.

To make a request, use the privacy request form or write to hello@medoc.in. We may need to confirm your identity first.

Children

Medoc accounts are for people aged 18 and over. A parent or guardian may use Medoc to find care for a child, but children should not create accounts or submit personal data themselves.

Security

We protect your data with encrypted connections (HTTPS), hashed passwords, encrypted storage of sensitive settings, private storage for documents, and access limited to people who need it. No system is completely secure; if we become aware of a breach affecting your data, we will notify you and the authorities as required by law.

Changes to this policy

We may update this policy as Medoc changes. We will show the date of the latest update on this page and, for significant changes, notify registered users by email.

Grievance Officer and contact

If you have a question or complaint about how we handle personal data, contact our Grievance Officer:

Grievance Officer
Email: hello@medoc.in

We acknowledge complaints within 24 hours and aim to resolve them within 15 days.