Privacy Policy
Your privacy and data security are our top priorities. Learn how we protect your personal and medical information.
Quick Navigation
Privacy Overview
At MyDocNest, we understand that your health information is deeply personal and sensitive. This Privacy Policy explains how we collect, use, protect, and share your information when you use our healthcare platform. We are committed to maintaining the highest standards of privacy and security.
This Privacy Policy is prepared in compliance with the Personal Data Protection Act, 2026 (PDPA) of Bangladesh, along with applicable provisions under the Cyber Security Ordinance, 2025, and international healthcare data protection standards. As a healthcare platform handling sensitive personal and medical information, MyDocNest is classified as a data fiduciary under the PDPA and adheres to its requirements for lawful processing, consent management, data subject rights, and breach notification.
Our Commitment
We never sell your personal data. We only share information with your explicit consent or as required by law. Your medical information is encrypted and stored securely.
Data Security
All data is encrypted using industry-standard AES-256 encryption. We conduct regular security audits and maintain strict access controls.
Your Control
You have full control over your data. Access, edit, or delete your information at any time through your account settings.
Data Localization & Storage
In accordance with PDPA 2026 requirements for sensitive healthcare data, MyDocNest maintains at least one synchronized real-time copy of restricted and medical data within Bangladesh's borders. Cross-border data transfers, where applicable, are conducted only with appropriate safeguards and disclosed to users in advance.
Accountability
MyDocNest has appointed a designated Chief Data Officer responsible for ensuring ongoing compliance with the PDPA. We recognize that violations of data protection obligations under this Act may result in significant financial penalties for non-compliant organizations, and we maintain strict internal controls to prevent such violations.
Data We Collect
We collect only the information necessary to provide you with quality healthcare services. Here's what we gather and why:
Personal Information
- Full name and contact details
- Date of birth and gender
- Emergency contact information
- Profile photographs
Medical Information
- Medical history and conditions
- Medication records
- Appointment history
- Doctor consultations and notes
Technical Data
- IP address and device information
- Browser type and version
- Usage patterns and preferences
- Location data (with consent)
Communication Data
- Messages with healthcare providers
- Support requests and responses
- Email communications
- SMS notifications
How We Use Your Data
We use your information solely to provide and improve our healthcare services. Here are the specific purposes:
Healthcare Services
Platform Improvement
Data Protection Measures
We implement multiple layers of security to protect your sensitive information. Here are our key protection measures:
End-to-End Encryption
All sensitive data is encrypted using industry-standard AES-256 encryption
Secure Servers
Data stored on secure, certified servers with regular security audits
Access Controls
Strict role-based access controls with multi-factor authentication
Regular Backups
Automated daily backups with encrypted storage and recovery testing
Security Incident Response
In the event of a data breach, we will notify affected users and the relevant regulatory authority in accordance with the timelines prescribed under the Personal Data Protection Act, 2026. We maintain detailed incident response procedures and work with cybersecurity experts to prevent future occurrences.
Your Data Rights
You have comprehensive rights regarding your personal data. Here's what you can do:
Response Time
We respond to all data requests within 30 days. For urgent requests related to medical emergencies, we provide expedited processing within 48 hours. Contact our privacy team for assistance.
Third-Party Services
We work with trusted third-party services to provide you with the best healthcare experience. Here's how we handle data sharing:
Healthcare Providers
With Your Consent
We only share your medical information with healthcare providers you choose to consult
Secure Communication
All communications are encrypted and logged for security purposes
Service Providers
Cloud Storage
Secure cloud providers with SOC 2 compliance and encryption, with Bangladesh-based data residency for restricted data as required by PDPA 2026
Payment Processing
PCI-compliant payment processors for secure transactions
Analytics
Privacy-focused analytics tools with anonymized data
Contact Our Privacy Team
Have questions about this privacy policy or need to exercise your data rights? Our privacy team is here to help.
Questions About Privacy?
Our privacy team is ready to help with any questions about your data protection rights or this privacy policy.