Skip to content
SEHATDOC

Privacy Policy

How SehatDoc collects, stores and protects personal and clinical data for clinics and patients in Pakistan.

In effect from 3 April 2026 · Last updated 27 October 2026 (Google user data)

1. Introduction

SehatDoc ("we", "us", or "our") is committed to protecting the privacy and security of your personal and clinical data. This Privacy Policy outlines how we collect, use, store, and protect information within the SehatDoc platform.

Our operations are designed to comply with highest global healthcare data standards and the relevant digital privacy regulations of Pakistan. By using the Service, you consent to the data practices described in this policy.

2. Information we collect

We collect information to provide and improve the Service, manage your subscription, and ensure clinical accuracy. The categories of information collected include:

A. Practitioner & administrative data

This includes personal information provided by the clinic owner or staff during registration:

  • Full names, professional titles, and credentials.
  • Clinic addresses, email addresses, and phone numbers.
  • Billing information and transaction history.
  • Login identifiers and session metadata.

B. Protected health information (PHI)

This is the clinical data you enter about your patients:

  • Patient identifiers (Names, Ages, Genders, Contact Numbers).
  • Medical history, diagnostic notes, and lab results.
  • Prescription history, medication dosages, and allergies.
  • Clinical images and documents uploaded by the practitioner.

3. Purpose of processing

We process your data for the following legitimate professional purposes:

  • To maintain a functional electronic medical record (EMR) system for your clinic.
  • To facilitate appointment bookings and patient flow management.
  • To send automated SMS reminders and notifications to patients on your behalf.
  • To generate financial and clinical analytics reports for your internal clinic use.
  • To verify the professional standing of practitioners using the platform.
  • To provide technical support and resolve platform issues.

4. Data security & storage

We implement robust technical and organizational measures to safeguard your data against unauthorized access, loss, or alteration.

  • Encryption: All data is encrypted in transit using Transport Layer Security (TLS 1.2+) and at rest using AES-256 encryption.
  • Access Controls: We enforce strict role-based access controls (RBAC) within the application, ensuring that receptionists and doctors only see data permitted by their roles.
  • Secure Hosting: Our databases are hosted on Amazon Web Services (AWS), in data centres that hold ISO 27001 certification.
  • Backups: Automated daily backups are maintained to ensure data recovery in the event of local failures.

5. Data sharing & third parties

Non-Disclosure Guarantee: We do not sell, rent, or trade your clinical data, financial records, or patient lists to any third-party marketing or pharmaceutical companies.

Mandatory Disclosure: We may disclose data only under the following limited circumstances:

  • Legal Warrants: When required by a valid legal order or warrant issued by a competent court in Pakistan or official law enforcement authorities (e.g., FIA Cybercrime Wing).
  • Service Providers: Sharing limited metadata with trusted infrastructure partners (e.g., SMS gateway providers) who are contractually bound to maintain confidentiality.

6. Google user data (Google Calendar and Google Meet)

Connecting Google Calendar is optional. A doctor or clinic owner who chooses to connect it signs in with Google and allows SehatDoc to create events in their Google Calendar (the permission Google shows as "View and edit events on all your calendars", scope calendar.events). SehatDoc uses this permission only for the following, and only for the account that connected it:

  • Appointments in your calendar: when an appointment is booked in SehatDoc, or you confirm a booking request from booking.sehatdoc.com, SehatDoc adds one event to your primary Google Calendar with the patient's name, the appointment time and the appointment notes or reason entered in SehatDoc.
  • Google Meet for online consultations: when you start an online consultation from Online Bookings, SehatDoc creates an event with a Google Meet link and keeps that link with the booking so you can copy it for the patient.

What SehatDoc does not do: it does not read, list, change or delete the other events in your calendar, and does not access your contacts, email, Google Drive or any other Google data.

What we store: the access and refresh tokens Google gives us for your account, so events can be added while you are not signed in, and the Meet links SehatDoc created. They are stored in our database, encrypted at rest and in transit (see section 4), and are used only by the SehatDoc servers to create the events above.

Sharing: Google user data is never sold, never shared with or transferred to anyone else, never used for advertising, and never used to develop, improve or train artificial intelligence or machine-learning models, including SehatDoc's own Sehat AI. SehatDoc staff do not read it, except with your permission for support, for security reasons, or where the law requires it.

Disconnecting and revoking access: choose Disconnect next to Google Calendar in SehatDoc (Appointments for clinics; Google Calendar in the listing portal). SehatDoc then deletes the stored tokens and revokes its access at Google. You can also remove SehatDoc at any time at myaccount.google.com/permissions. Events already added stay in your calendar, which you own; you can delete them in Google Calendar.

Deletion: to have all Google user data we hold deleted (tokens and saved Meet links), disconnect as above or email privacy@sehatdoc.com from your account's email address; we delete it within 30 days. Closing your SehatDoc account also deletes it.

SehatDoc's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data retention and deletion

We retain your data for the duration of your active subscription.

  • Account Cancellation: If you cancel your subscription, your data will be archived for a period of thirty (30) days to allow for final records export.
  • Permanent Deletion: After the grace period, all data associated with the clinic will be permanently purged from our primary servers, unless legal or regulatory requirements necessitate longer retention.

8. Your rights

As a User, you have the right to:

  1. Access and export your full dataset at any time in digital formats (CSV/PDF).
  2. Correct any inaccuracies in your professional or clinic information.
  3. Request the permanent closure of your account and deletion of your data.
  4. Configure and manage data access permissions for your staff members.

9. Consent and medical ethics

By using SehatDoc to store patient data, you confirm that you have obtained the necessary verbal or written consent from your patients to store their medical identifiers in a digital format as per the standards of your respective Healthcare Commission.

10. Policy updates

We may update this Privacy Policy to reflect technical or legal changes. Significant changes will be notified to the primary account holder via email. Your continued use of the Service following such updates constitutes acceptance of the revised policy.

For any data-related queries or requests, please contact our Data Protection Officer at: privacy@sehatdoc.com