Privacy Policy

1. Introduction

Welcome to URO-ONCO CONNECT ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you seek our medical services, use our website, and access our platform (collectively, the "Service"). URO-ONCO CONNECT is a premier uro-oncology clinic specializing in cancer treatment, robotic surgery, and comprehensive urological care provided by Dr. Anshuman Singh, a highly experienced Uro-Oncologist and Robotic Surgeon.

2. Information We Collect

2.1 Personal Information

• Contact Information: Name, email address, phone number, professional title
• Professional Information: Medical qualifications, specialization, years of experience, current workplace, medical council registration number
• Account Information: Username, password (encrypted), login credentials, session tokens
• Educational Background: Medical degree details, previous certifications, training history

2.2 Medical Information

• Appointment Records: Appointment dates, times, and medical history relevant to consultations
• Medical Records: Patient medical history, diagnosis, treatment plans, and clinical notes
• Treatment Information: Treatment details, surgical records, follow-up information
• Health Data: Health conditions, medications, allergies, and other relevant medical information

2.3 Usage Information

• Platform Usage: Course materials accessed, time spent on training modules, interaction patterns
• Communication Data: Emails with faculty, support interactions, forum participation
• Learning Analytics: Study patterns, assessment performance, engagement metrics

2.4 Payment Information

• Course Fees: Program enrollment fees, payment history, billing information
• Payment Processing: We use secure payment gateways for processing course fees. Payment card details are handled securely by our payment partners and not stored on our servers
• Scholarship Information: Scholarship applications, financial aid details, payment plans

3. How We Use Your Information

3.1 Primary Purposes

• Medical Services: Provide uro-oncology consultations, cancer treatment, and surgical services
• Patient Care Management: Manage appointments, medical records, and treatment plans
• Clinical Support: Support patient care coordination and follow-up treatment
• Health Monitoring: Track patient progress and treatment outcomes

3.2 Service Operations

• Account Management: Create and maintain your patient account
• Authentication: Verify your identity and secure your account
• Patient Support: Respond to your medical inquiries and provide assistance
• Service Improvement: Analyze patient feedback to improve our medical services

3.3 Communication

• Medical Communications: Send appointment reminders, treatment updates, and medical information
• Health Updates: Share health tips, treatment options, and medical updates (with your consent)

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal or health information to third parties for commercial purposes.

4.2 Authorized Sharing

• Medical Specialists: With your explicit consent, we may share relevant medical information with other healthcare providers for treatment purposes
• Medical Councils: We may share medical information with medical councils and regulatory bodies as required by law
• Healthcare Institutions: With your permission, we may share your medical records with other healthcare institutions for continuity of care

4.3 Legal Requirements

We may disclose information when required by law, court order, or to protect our rights and safety.

5. Data Security

5.1 Security Measures

• Encryption: All data is encrypted in transit and at rest
• Access Controls: Strict access controls limit who can view your information
• Secure Authentication: Multi-factor authentication and secure session management
• Regular Audits: Regular security assessments and vulnerability testing

5.2 Educational Data Protection

• Professional-Grade Security: We implement educational institution-grade security measures
• Data Minimization: We collect only necessary information for training program provision
• Secure Transmission: All educational data transmission uses industry-standard encryption
• Credential Protection: Professional qualifications and certifications are securely stored

6. Your Rights and Choices

6.1 Access and Control

• Data Access: Request a copy of your personal and health information (through contact details as given below)
• Data Correction: Update or correct inaccurate information
• Data Deletion: Request deletion of your account and associated data

7. Data Retention

• Active Accounts: We retain your data while your account is active
• Inactive Accounts: Data may be retained for up to 3 years after account deactivation
• Legal Requirements: Some data may be retained longer to comply with legal obligations
• Health Records: Medical records may be retained for up to 7 years as per healthcare regulations

8. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. Third-Party Services

9.1 Integrated Services

• Payment Processors: For secure payment processing (Razorpay and other payment gateways)
• Cloud Storage Providers: For secure data storage and backup
• Email Services: For communication with patients (Google Workspace, SendGrid)
• Appointment Management Systems: For appointment scheduling and patient management

9.2 Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy in the app
• Sending an email notification
• Displaying a prominent notice in the app

11. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

12. Compliance

This Privacy Policy complies with:

• Information Technology Act, 2000 (India)
• Personal Data Protection Bill (India)
• General Data Protection Regulation (GDPR) principles
• Educational data protection standards
• Medical Council of India guidelines for educational institutions