Privacy Policy

1. What this policy covers

This policy explains how Goclinicbox collects, uses and protects data when clinics use our clinic-management platform and when visitors use our website or a clinic's Goclinicbox-powered booking page. It covers two kinds of data: clinic account data (your staff details, billing information) and patient data your clinic stores in Goclinicbox.

2. Patient data belongs to your clinic

Your clinic is the owner and data fiduciary of all patient records, prescriptions, reports and billing data entered into Goclinicbox; we act as a data processor. We process it only to provide the service — we never sell it, mine it for advertising, or share it with third parties except the sub-processors needed to run the service (cloud hosting, SMS/WhatsApp delivery, payment processing).

3. What we collect

From clinics: business name, address, GST details, staff names and contact details, plan and payment information, and usage logs needed for security and support.

From patients using a clinic's booking page: the details they submit to book — name, age, mobile number (verified by OTP) and reason for visit. These go directly into that clinic's records.

From website visitors: contact details submitted through forms and standard, privacy-respecting analytics (pages visited, browser type).

4. How we use data

To operate the platform (appointments, OPD, pharmacy, billing, reminders), to provide support, to bill your subscription, to keep the service secure, and to send service communications. Marketing emails go only to clinic contacts who opted in, and every one has an unsubscribe link.

5. Security

Traffic to Goclinicbox is encrypted in transit. Access is role-based: every staff member has an individual login and clinics control who can view or edit what. Full details are on our Security page.

6. DPDP Act compliance

We support clinics in meeting their obligations under India's Digital Personal Data Protection Act, 2023 — including consent capture at booking, purpose limitation, and data-principal access, correction and erasure workflows.

7. Retention & deletion

We retain clinic and patient data for as long as your subscription is active. If you cancel, you may export everything in standard formats; data remains exportable for 90 days after account closure and is then permanently deleted, unless law requires longer retention (e.g. tax records).

8. Cookies

Our website uses essential cookies for sign-in and basic analytics to understand which pages are useful. We do not sell browsing data.

9. Your rights & contact

Clinics may access, correct, export or delete their data at any time. Patients should direct requests to their clinic, which controls their records; we assist clinics in fulfilling them. For any privacy question, write to [email protected].