Privacy & Data Security Policy

Welcome to the Homeopathy Clinic Management System (referred to as "the System" or "our Platform"). We are committed to safeguarding the privacy and confidentiality of patients, doctors, pharmacists, reception staff, and admin users.

This Privacy Policy explains how patient health summaries, diagnostic records, symptoms, and administrative workflows (such as tokens, daily closing logs, and branch-level transactions) are managed, stored, and protected in compliance with healthcare data norms.

In order to deliver personalized holistic care and streamline clinic operations, we collect and process several categories of information:

• Patient Demographics: Full name, age, gender, mobile phone number, and shipping addresses (for direct medicine deliveries).
• Clinical Information: Recorded symptoms, medical histories, token queues, homeopathic prescriptions, and custom symptom registers compiled during clinical consultations.
• Financial & Transaction Records: Due logs, collectable fees, payment histories, and daily branch-wise financial closing statements.
• Staff Access Metadata: Account emails, usernames, system access logs, branch assignments, and audit trails of approvals (such as daily closing resets).

Your information is exclusively used to facilitate accurate treatment, manage queues, and secure operations:

We enforce a strict Role-Based Access Control (RBAC) policy. We do not sell, trade, or distribute clinical data to third-party advertisers. Data visibility is structured as follows:

To ensure high-grade safety, the system implements the following layers of security:

• Secure Authentication: All clinic staff accounts are protected via password encryption hash algorithms (Bcrypt).
• Encrypted Transfers: Data moving between the mobile app, admin panel, and servers is encrypted using Secure Socket Layer (SSL/TLS).
• Audit Logging: Every diagnostic change, prescription dispatch, and daily closing is recorded with user attribution and timestamp metadata.
• Session Controls: Active sessions automatically expire upon inactivity to prevent unauthorized access from shared clinic terminals.

Patients retain control over their medical and personal data. They have the following rights, which can be exercised through the clinic administrator:

• Access & Portability: Obtain copies of medical records, prescription timelines, and financial summaries.
• Rectification: Request correction of inaccurate names, incorrect mobile numbers, or age entries.
• Erasure (Right to be Forgotten): Request the archiving or deletion of records, subject to local regulatory requirements for medical record retention.

We review and update this policy periodically to reflect system updates, feature integrations, and legislative changes. When updates are published, the "Last Updated" date at the top of this page will be revised. We recommend clinic staff and users review this document periodically.

For any inquiries regarding data security, patient consent, role access configurations, or to report a system vulnerability, please contact our clinic administration team: