Privacy Policy

📋1. Information We Collect

We only collect basic contact and reservation details needed to generate your serial token.

When you reserve an OPD token on BookMySerial, we collect minimal personal details:

• Patient Name: Used by clinic reception to identify your appointment.
• Mobile Number: Used for secure OTP sign-in, token SMS, and live updates.
• Doctor & Clinic Selected: Necessary to route your serial to the right chamber.
• Appointment Date: Required to schedule your position in the OPD queue.
• Payment Transaction ID: Recorded by payment gateways to verify your ₹10 fee.

🎯2. Why We Collect It

Your details are used strictly to run the digital queue and notify you when your turn arrives.

• To allocate your sequential OPD token number at the selected clinic.
• To display live queue progress and estimated consultation time on your phone.
• To send automated SMS or WhatsApp notifications if the doctor is delayed.
• To maintain your personal booking history so you can track past visits.

🚫3. What We Never Collect

BookMySerial does not collect, read, or store confidential medical treatment data.

Your consultations, medical diagnosis, and treatment discussions remain strictly between you and your doctor inside the chamber.

🔒4. How Your Data Is Protected

We use industry-standard encryption and secure token-based logins to keep your information safe.

• TLS Encrypted Communication: All data sent between your browser and our servers is encrypted in transit.
• Passwordless OTP Verification: No passwords to remember or lose; login happens securely via mobile SMS OTP.
• Protected Database Storage: Servers are hosted in secure Indian data facilities with automated security controls.

👥5. Who Can Access Your Data

Only you and the clinic receptionist managing your specific doctor chamber can view your booking.

We implement strict isolation between healthcare providers. One clinic can never access, search, or view another clinic's patients or queue lists.

🤝6. Data Sharing Policy

We never sell, rent, or trade your personal information with third parties.

Data is shared strictly with trusted technology infrastructure partners to deliver your service:

• Payment Gateways (Razorpay): To process your ₹10 convenience fee securely without storing your card or UPI PIN.
• Telecom SMS Gateways: To deliver OTP codes, token numbers, and doctor delay announcements to your phone.
• Legal Authorities: Only when strictly required by a court order or applicable Indian law.

⏱7. Data Retention

We retain booking records only as long as necessary to provide service and fulfill legal accounting rules.

• Active serial tokens are kept live during the appointment date.
• Completed and cancelled booking history is retained in your profile so you can reference payment receipts.
• Inactive accounts or deleted records are permanently wiped upon verified user request.

🛡8. Your Rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act (2023), you hold complete ownership of your personal data.

• Right to Access: You can view all personal details and booking history in your account at any time.
• Right to Correction: You can edit or update your name, email, or profile information via the Edit Profile tab.
• Right to Withdraw Consent: You may sign out and discontinue using BookMySerial whenever you choose.
• Right to Grievance Redressal: You can contact our Data Protection Officer for prompt resolution of privacy concerns.

🗑9. Delete My Data

You can request complete deletion of your account and personal history at any time.

To erase your personal data from BookMySerial:

• Email our team at support@bookmyserial.in with your registered mobile number.
• Or submit a request via our in-app support desk under the Profile section.
• Your data will be permanently removed within 30 days, except for statutory payment invoices required by tax regulations.

📬10. Contact Data Protection Officer

We have appointed a designated Grievance Officer in compliance with Indian privacy legislation.