Privacy Policy
Last updated: [DD Month 2026]
Data Fiduciary: [LEGAL ENTITY NAME — e.g., ____ Pvt. Ltd.], [REGISTERED ADDRESS, Gurugram, Haryana, PIN] (“we”, “us”, “the platform”). Contact for privacy matters: complaints@doctorrating.in
1. What this policy covers
This policy explains what personal data we collect on doctorrating.in, why, how it is used, and your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act).
2. Data we collect, and why
| Who | Data | Purpose | Legal basis |
|---|---|---|---|
| Visitors | Basic analytics (pages, device type) | Improve the site | Consent (banner) |
| Early-access signups | Email, WhatsApp (optional) | Notify about launch | Consent at form |
| Patients writing reviews | Phone (OTP), review content, ratings | Verify a real reviewer; publish review (anonymous by default) | Consent at submission |
| Patients using complaint tool | Name, contact, complaint details, evidence uploads | Generate complaint letter; track status | Consent at submission |
| Doctors responding | Name, registration no., email/phone, response text | Verify identity; publish response | Consent at submission |
We do not sell personal data. We do not display advertising. We do not collect Aadhaar numbers.
3. Doctor profile data
Doctor profiles are built from publicly available statutory registry data (NMC / State Medical Council registers): name, registration number, qualification, registration status. We display it with its source and the date we checked it. Doctors may report errors via the profile’s report-an-error link or to complaints@doctorrating.in.
4. Anonymity of reviewers and complainants
- Reviews are published anonymously by default; your identity is not shown unless you choose otherwise.
- If you submit engagement proof (prescription, bill), the doctor never sees the document — only our confirmation that engagement was verified.
- Complaint details are never published. Your complaint letter is generated for you to send to the authority.
5. Health information
Review prompts and the complaint tool may involve information about your health. We ask you not to include unnecessary medical detail, and our systems prompt you to remove identifying or sensitive specifics before publication. Such content is used only for the purpose you submitted it for.
6. Storage, retention, and security
- Stored on cloud infrastructure with encryption in transit and at rest.
- Reviews retained while published. Complaint records retained for [24 months] after closure, then deleted.
- Early-access contacts deleted on request or [12 months] after launch communications end.
7. Sharing
We share personal data only: (a) with service providers strictly needed to operate the platform (hosting, OTP/SMS, WhatsApp messaging), under contract; (b) when required by law, court order, or a lawfully empowered government agency; (c) never with the doctor you reviewed or complained about, except content you chose to publish.
8. Your rights (DPDP Act)
You may access a summary of your personal data; request correction or erasure; withdraw consent (which stops future processing but may end the related service); nominate a person to exercise your rights; and complain to us at complaints@doctorrating.in, and thereafter to the Data Protection Board of India.
9. Children
This platform is not directed at children. We do not knowingly process children’s data; reviews must be written by users 18+.
10. Changes
We will post changes here with a revised date. Material changes will be notified on the site.