HomeLegal & Privacy

Privacy Policy

Learn how Cizqueue and Dotworld Technologies protect your clinic operations, patient confidentiality, and medical queue records.

1. What We Collect and Why

Our guiding principle is to collect only what we need. Here is what that means in practice.

Identity and Access

When a healthcare facility or solo practice registers on Cizqueue, we collect basic identifying information such as clinic name, administrator credentials, doctor profiles, and staff user logins. This information is used solely to deliver the service and authorize access to your clinic workspace.

Patient and Appointment Data

When you use Cizqueue to manage queues and appointments, we capture patient details (such as name, phone number) and appointment records as the core function of our service. Please note that "appointment records" strictly refers to patient visit history, their names, and phone numbers. We do not collect, process, or store any sensitive medical data, health records, or diagnosis information. This basic contact data is processed and stored solely to allow you to coordinate patient visits, generate tokens, and send SMS/WhatsApp notifications.

Billing Information

When you make a payment for a Cizqueue subscription, your transaction is processed directly through our third-party payment gateway. We do not store your card details on our servers. We retain only billing metadata such as transaction ID, amount, and date for accounting and dispute resolution purposes as required under Indian law.

Session Data

We collect basic session information such as the date, time, clinic location, number of tokens generated, consultation status, and transaction details. This is used for operational and accounting purposes only.

Website and App Interactions

We collect information about your interactions with the Cizqueue dashboard, kiosk, and web interfaces for analytics and statistical purposes. This includes device information, session duration, and error logs to help us maintain and improve the service.

Anti-Bot Assessments

We may use CAPTCHA services across our applications to mitigate brute force attempts and as a means of spam protection.

Cookies

Where applicable on our web interface, we use persistent first-party cookies and some third-party cookies to store certain preferences and support analytics. You can adjust cookie settings in your browser, although some aspects of our service may not function properly if cookies are disabled.

Voluntary Correspondence

When you contact us with a question or to ask for help, we keep that correspondence, including your email address, so that we have a history of past correspondence to reference if you reach out in the future.

2. When We Access or Share Your Information

How and when your data is shared with subprocessors or authorities.

To Provide the Service

We use third-party subprocessors to help run our applications and provide the Services to you. This includes cloud hosting providers (e.g., AWS, Digital Ocean) for data storage, and telecom gateways for SMS notifications. These subprocessors are contractually obligated to handle your data securely and only for the purposes of providing services to us.

Payment Processing

We use a third-party payment gateway to process transactions. Your payment card details are handled entirely by the payment processor under their own security standards and privacy policy. We do not store card details on our servers.

To Investigate Abuse

Accessing a customer's session data when investigating potential abuse is a measure of last resort. We want to protect the privacy and safety of both our customers and the people reporting issues to us. If we discover the Services are being used for a restricted purpose, we will take action as necessary, including notifying appropriate authorities where warranted.

Aggregated and De-identified Data

We may aggregate and de-identify information collected through the Services. We may use de-identified or aggregated data for operational or analytical purposes.

When Required by Law

Dotworld Technologies Private Limited is an India-registered company. Our policy is to not respond to government requests for user data unless we are compelled by legal process. We will comply with requests from Indian law enforcement authorities when presented with a valid court order, warrant, or legal notice under applicable Indian law, including the Information Technology Act, 2000. It is our policy to notify affected users before we share data unless we are legally prohibited from doing so, or in emergency cases.

3. Your Rights With Respect to Your Information

We strive to apply the same data rights to all customers.

  • Right to Know: You have the right to know what personal information is collected, used, and shared.
  • Right of Access: You may request access to your personal information during the retention period.
  • Right to Correction: You have the right to request correction of inaccurate personal data.
  • Right to Erasure: You may request deletion of your clinic account and associated patient data. Contact us at [email protected].
  • Right to Restrict Processing: You have the right to request restriction of how and why your personal information is used.
  • Right to Object: You have the right, in certain situations, to object to how your personal information is processed.
  • Right to Non-Discrimination: We will not treat you differently or provide a lower level of service because you have exercised your data privacy rights.
  • Right to Complain: You have the right to make a complaint regarding our handling of your personal information with the appropriate supervisory authority under Indian law.

To exercise any of these rights, please contact us at [email protected].

4. How We Secure Your Data

Measures taken to ensure your data remains protected.

  • All data is encrypted via SSL/TLS when transmitted from our servers to your browser or device.
  • Database records and session data are stored with encryption at rest on our cloud infrastructure.
  • Access to customer data is restricted to authorized personnel on a need-to-know basis.
  • We perform regular security assessments of our infrastructure.
  • We use cloud infrastructure which may host data in India or other global regions. By using our Services, you acknowledge and consent to this cross-border data processing.

5. Data Retention

Our policies regarding how long we keep your data.

  • Operational data, patient logs, and completed appointments are retained for as long as your clinic maintains an active Cizqueue subscription, enabling you to access historical reports.
  • Upon account termination or explicit request, all associated operational data is permanently deleted from our active systems and backups within a standard timeframe.
  • Billing and transaction records may be retained longer as required by Indian tax and accounting laws, including GST regulations (typically 7 years).

6. Location of Site and Data

Where your data is physically hosted.

Our Services are hosted on reliable cloud providers such as Amazon Web Services (AWS) and Digital Ocean. Your data may be stored and processed in data centers operated by these providers, located in India or other regions globally. By using our Services and providing your personal information, you consent to the storage, transfer, and processing of your data in these locations.

7. Children's Privacy

How we handle data related to minors.

While clinics may use Cizqueue to manage appointments for pediatric patients, the Cizqueue platform itself is not directed at children under the age of 13 for direct use. We expect clinics to obtain the necessary parental or guardian consent before entering a minor's data into the system. If you believe a minor's data has been inappropriately collected without parental consent, please contact us immediately at [email protected].

8. Changes and Questions

Policy updates and grievance officer contact details.

We may update this policy as needed to comply with relevant regulations and reflect any new practices. Whenever we make a significant change, we will refresh the date at the top of this page.

Have any questions, comments, or concerns about this privacy policy, your data, or your rights? Please get in touch by emailing us at [email protected] and we will be happy to assist.

Grievance Officer

(as required under the Information Technology Act, 2000)

Contact: [email protected]

Have questions about your clinic's privacy?

Our data protection officer and healthcare compliance specialists at Dotworld Technologies are ready to assist you with data requests or inquiries.

Contact Privacy Desk