Privacy Policy

1. Scope

This Privacy Policy describes how the Odocto platform (the "Platform"), operated by the Odocto operator ("we", "us", "our"), processes personal information when you use the websites, applications, and related services we make available.

Independent healthcare practitioners and their organisations use the Platform to offer and manage appointments and related communications. Those practitioners are separate controllers for patient health information they collect in their professional capacity. This Policy focuses on information processed for the operation of the Platform itself.

2. Personal information we process

We may process the following categories of information, depending on how you use the Platform:

Account and profile data: name, contact details, language preferences, authentication identifiers, and similar account information.

Booking and service data: appointment requests, status, timestamps, messages sent through the Platform in connection with a booking, and related operational records.

Technical and usage data: device and browser type, IP address, approximate location derived from IP where available, diagnostic logs, and product analytics needed to secure and improve the service.

Payment-related data may be processed where you purchase paid features; payment details are typically handled by our payment partners, and we receive limited transaction metadata.

3. Purposes and legal bases

We use personal information to provide, secure, and improve the Platform; authenticate users; facilitate scheduling between patients and practitioners; communicate service-related notices; detect and prevent fraud, abuse, and security incidents; comply with legal obligations; and enforce our Terms of Use.

Where required by applicable law, we rely on appropriate legal bases such as performance of a contract, legitimate interests that are not overridden by your rights, compliance with legal obligations, or consent where we expressly request it.

4. Sharing and processors

We may share information with independent practitioners and their authorised staff when it is necessary to operate a booking you have requested or to enable the services they offer through the Platform.

We use vetted service providers (for example hosting, communications, analytics, security, and payment processing) who process information on our instructions and are bound by confidentiality and data-processing obligations.

We may disclose information if required by law, regulation, legal process, or a lawful request from public authorities, or to protect the rights, safety, and integrity of users, the public, or the Platform.

5. International processing

The Platform may be operated from or use infrastructure in more than one country. Where personal information is transferred across borders, we implement appropriate safeguards in line with applicable law, such as contractual clauses or equivalent mechanisms, where required.

6. Retention and security

We retain personal information for as long as needed to provide the Platform, fulfil the purposes described in this Policy, resolve disputes, enforce agreements, and meet legal, accounting, or reporting requirements.

We implement technical and organisational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

7. Your rights

Depending on where you live, you may have rights to access, rectify, erase, restrict or object to certain processing, data portability, and to withdraw consent where processing is consent-based. You may also have the right to lodge a complaint with a supervisory authority.

To exercise rights, please use the contact channels made available in the application or on the official Odocto site. We may need to verify your identity before responding.

8. Children, changes, and contact

The Platform is not directed at children under the age where they cannot lawfully provide consent in their jurisdiction without parental authority. If you believe we have collected information from a child inappropriately, contact us so we can take appropriate action.

We may update this Policy from time to time. We will post the updated version and adjust the "Last updated" date. Material changes may be communicated through the Platform or other reasonable means.

For privacy questions, use the contact options provided in the application or on the official Odocto site. Do not include sensitive health information in unsolicited messages unless a secure channel is offered for that purpose.