Privacy Notice
Who is responsible
Knowledge Treasures LLP, 14/727, Ekkaparamba, Thadapparamba, Kuzhimanna, Ernad, Malappuram 673641, Kerala, India · sales@knowledgetreasures.com · +91 99472 69331. This notice covers DigitoDoc itself: practices signing up and the screens for doctors and their team.
Patients
If you ask a practice for an appointment, that practice's privacy notice is on its booking page. The practice is responsible for that data; we only process it on the practice's behalf (contract under Art. 28 GDPR).
What data we process
Name and email address of the person who signs up the practice and of the practice team; the password only in scrambled form (we cannot read it); the practice's details (name, address, phone, specialty, opening hours); billing details for payment. We never see card numbers.
Why, and on what legal basis
To run the account, provide the service and bill for it (Art. 6(1)(b) GDPR); to keep invoices (Art. 6(1)(c) GDPR, legal periods); to protect the service from misuse (Art. 6(1)(f) GDPR).
Who processes the data for us
Vercel Inc. (web hosting, servers in Frankfurt am Main); Supabase Inc. (database in Frankfurt am Main); Brevo (Sendinblue SAS, Paris) for emails; Paddle.com Market Ltd (London) for payments — Paddle is the seller and issues the invoices; WhatsApp messages through Meta Platforms Ireland Ltd. Where a provider is outside the EU, an EU adequacy decision or the EU standard contractual clauses apply.
Cookies
We only set the cookie that keeps you signed in. There are no analytics or advertising tools.
How long
As long as the account exists. After cancelling we delete the data, except invoices we must keep by law.
Your rights
Access, correction, deletion, restriction, data portability and objection (Art. 15–21 GDPR). Write to sales@knowledgetreasures.com. You can also complain to a data-protection supervisory authority.