Privacy Policy – DoorPatho

Last Updated: September 16, 2025

DoorPatho (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our services.

1. Applicability

This policy applies to all users of DoorPatho, including individuals booking tests and partner pathology labs using our platform.

2. Information We Collect

Personal Details: Name, mobile number(s), city, selected test(s), address (for sample collection).
Authentication Info: OTP verification via Google Firebase (we do not store passwords).
Booking & Consent Records: Booking metadata and WhatsApp consent relationships between numbers (e.g., “login number” and “consent number”), timestamps of opt-in/opt-out.
Technical: Device/browser info, cookies or local storage items (e.g., city preference, session state).

3. Purpose of Data Collection

To authenticate users and manage accounts.
To book, schedule, and fulfill medical tests (including sharing necessary details with labs).
To send service communications (SMS/WhatsApp) related to bookings, updates, and support.
To maintain an auditable consent trail for WhatsApp communications.
To analyze usage and improve services.

4. OTP Authentication

We use Google Firebase to verify mobile numbers via OTP. We do not store passwords or payment card details.

5. Cookies and Local Storage

We may use cookies or browser storage to remember preferences such as city selection and login state.

6. Data Storage and Retention

Data is stored using Google Cloud/Firebase. Booking and consent records are retained for as long as your account remains active or as required for legal/regulatory purposes. We may retain minimal logs to evidence consent changes (opt-in/opt-out) and service delivery.

7. Data Sharing

With partner labs to process tests and deliver reports.
With service providers such as Google (Firebase) and Meta/WhatsApp (for WhatsApp Business messaging), and telecom/SMS gateways.
With authorities when required by law.
We do not sell personal data.

We send WhatsApp messages only where consent exists. Consent may be given by the logged-in user for their own number, or (when booking for someone else) for both numbers. Our system maintains a pairwise consent record between the “login mobile number” and the “consent mobile number.”

Self-booking: Consent applies to your own number.
Booking for someone else: Consent applies to both numbers. If the other person later logs in and provides their own consent, that direct self-consent overrides any prior proxy consent.
Scope: WhatsApp messages may include confirmations, rescheduling updates, collection reminders, and support notifications. Marketing messages (if any) are sent only with explicit consent and can be withdrawn at any time.

Short notice shown in the booking flow: “By confirming, you consent to WhatsApp messages to all provided numbers.”

9. How to Stop WhatsApp Messages (Opt-Out)

You can withdraw WhatsApp consent at any time. Email support@doorpatho.com with the subject “STOP WHATSAPP” and include:

Your full name
The phone number(s) to stop
Whether you’re stopping consent for yourself, for someone else, or both
(Optional) Booking reference(s)

We will process your request within up to 5 working days (depending on the situation). We may contact you to verify your identity or relationship (for “booking for someone else” cases). After processing, we will stop WhatsApp communications for the specified number(s). Legally-required or strictly transactional messages may still be sent via SMS if necessary.

10. Re-Enabling WhatsApp Consent

If you previously opted out and later book again or write to us to re-enable consent, we will mark your WhatsApp consent as active and resume messages to the specified number(s). Re-enable requests should be sent to support@doorpatho.com.

11. Booking for Someone Else

When you book for another person, you confirm you have authority to share their details and receive communications for this booking. If that person later creates their own DoorPatho login and provides direct consent, their self-consent overrides prior proxy consent and we will stop WhatsApp messages associated with the proxy relationship.

12. Your Rights

Subject to applicable laws, you may request access, correction, deletion, withdrawal of consent, or raise a complaint about our handling of your data. We will respond within a reasonable time.

13. Security

We use HTTPS, encryption, access controls, and secure infrastructure. Never share your OTP with anyone.

14. Data Deletion

To request deletion of your data (subject to legal/regulatory retention), contact support@doorpatho.com. We will guide you through identity verification and timelines.

15. Children’s Privacy

This platform is not intended for children under 13 without parental/guardian consent.

16. Policy Updates

We may update this policy from time to time. The “Last Updated” date will reflect the latest version.

17. Contact & Grievance

Grievance Officer: Data Protection Officer

Email: support@doorpatho.com

Jurisdiction: India