Privacy Policy & Health Data Protection

E2EE Encryption & GDPR / HIPAA Compliance

Medical Confidentiality Preserved

Last updated : 27 October 2026 • Dooctor Telecom certified security protocol

Our Core Privacy Commitments

Dooctor.online enforces a zero-tolerance policy against the commercial exploitation of medical data. No health data is ever sold, leased, shared with advertisers, or leveraged for promotional profiling. Your video consultations, clinical exchanges, and medical records are shielded by our proprietary End-to-End Encryption protocol (E2EE).

1. Data Controller & Regulatory Framework

The data controller for personal data processed across the platform is Dooctor.online. Our governance policies are strictly aligned with :

The General Data Protection Regulation (GDPR - EU Regulation 2016/679) for all European and international users.

The Health Insurance Portability and Accountability Act (HIPAA) guidelines governing Protected Health Information (PHI).

National and international standards on certified health data hosting (HDS) and statutory medical secrecy.

2. Categories of Data Collected & Legitimate Purposes

Within our platform operation and coordination across the 6 connected healthcare professions, we strictly collect data essential to our services :

User Category	Processed Data Categories	Purpose & Legal Basis
Patients / Healthcare Seekers	Full name, verified email, phone number, consultation history, appointment reasons, and shared documents.	Appointment scheduling, secure teleconsultations, personal health records access (Contract Performance & Consent).
Practitioners & Healthcare Facilities	Identity, state diplomas, medical licenses, hospital accreditations, billing details, and clinical specialties.	Mandatory pre-verification of medical credentials, verified directory listing, and secure transactions (Legal Obligation & Contract).
Sensitive Health Data	Digital prescriptions, consultation summaries, shared medical imaging scans, and laboratory reports.	Ensuring clinical care pathway continuity under shared medical confidentiality. Mandatory E2EE encryption (GDPR Article 9.2.h).

3. Dooctor Telecom Technology & End-to-End Encryption (E2EE)

All audio and video teleconsultations conducted on Dooctor.online leverage proprietary Dooctor Telecom protocols. Communications are strictly end-to-end encrypted :

Only the practitioner and patient possess the temporary cryptographic decryption keys for the active session. No media stream ever transits in plaintext through application servers, ensuring zero interception even by Dooctor.online system administrators.

4. Data Retention & Security Measures

Data is retained strictly in proportion to clinical and administrative requirements :

Active User Accounts : Data retained for the entire duration of the contractual relationship.

Medical Records & Consultations : Secure archiving in strict compliance with statutory medical record retention mandates applicable to licensed practitioners.

Cutting-Edge Technical Safeguards : Encryption at rest (AES-256), encryption in transit (TLS 1.3), Web Application Firewall (WAF), automated intrusion detection, and proprietary anti-scraping defense.

5. Your Rights & Accessing the Data Protection Officer (DPO)

Under GDPR and applicable data protection regulations, you hold the following rights regarding your personal information :

Right of access & disclosure : Obtain a complete copy of all personal records maintained.

Right to rectification : Update inaccurate, outdated, or incomplete details.

Right to erasure ("Right to be forgotten") : Request account termination and deletion (subject to statutory medical archiving laws).

Right to data portability : Download personal records in a structured, commonly used machine-readable format.

Right to object & restrict : Object to non-essential data operations outside core medical care.

To exercise any of these statutory rights, please contact our Data Protection Officer :

DPO / Privacy Office : privacy@dooctor.online

Support & Compliance Contact : support@dooctor.online