Privacy Policy
Effective Date: 28 May 2025
Last Updated: 28 May 2025
At docreview.lk, we are committed to safeguarding your privacy and ensuring that your personal data is protected in accordance with applicable laws in Sri Lanka and internationally recognized data protection principles.
This Privacy Policy outlines how we collect, use, store, and disclose your personal information when you access and use our website (the “Platform”).
1. Scope
This Privacy Policy applies to all visitors, users, and others who access docreview.lk (“you”, “your”). By using our services, you consent to the practices described herein.
2. Data We Collect
We may collect the following categories of personal and technical information:
a. Personally Identifiable Information (PII)
- Full name
- Email address
- Phone number (if voluntarily provided)
- Profile photo (if voluntarily uploaded)
- Doctor profile information (if claimed or submitted)
b. Non-Personally Identifiable Information
- IP address
- Device type, browser type, operating system
- Pages visited, time spent, referring URL
- Cookies and similar tracking technologies
c. User-Generated Content
- Reviews, comments, ratings, and feedback submitted by you regarding healthcare professionals
3. Legal Basis for Processing
We process your personal data on the following legal bases:
- Your consent (e.g., submitting a review or signing up)
- Performance of a contract (e.g., when you claim a doctor profile)
- Compliance with legal obligations
- Our legitimate interests, including fraud prevention, platform integrity, and service improvement
4. How We Use Your Information
Your information may be used to:
- Facilitate and display user reviews and doctor profiles
- Improve platform functionality and user experience
- Communicate with you about updates or support requests
- Prevent abuse, fraud, and unauthorized activity
- Comply with legal and regulatory obligations
5. Sharing of Data
We do not sell, rent, or lease your personal information. However, we may share data with:
- Authorized service providers for hosting, analytics, or communications
- Law enforcement or regulatory authorities when legally required
- A third party in the event of a merger, acquisition, or platform restructuring (with due notice provided)
All data sharing is conducted under strict confidentiality and data protection agreements.
6. Data Retention
We retain your personal information only for as long as necessary for the purposes stated in this policy or as required by applicable law. Review content may be retained indefinitely unless removal is requested and granted.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Authenticate users
- Analyze site usage and improve services
- Personalize content
You may manage cookie preferences via your browser settings, although disabling cookies may affect platform functionality.
8. Data Security
We implement appropriate technical and organizational security measures, including SSL encryption, regular security audits, and access control, to protect your personal data from unauthorized access, alteration, disclosure, or destruction.
However, no system can guarantee absolute security. Your use of the platform acknowledges this risk.
9. Your Rights
Subject to applicable laws, you may have the following rights:
- Right to access your personal data
- Right to rectify inaccurate or incomplete data
- Right to request deletion (“right to be forgotten”)
- Right to object to or restrict processing
- Right to data portability
Requests can be made by contacting privacy@docreview.lk. We may require identity verification to process certain requests.
10. Third-Party Links
Our Platform may contain links to third-party websites. We are not responsible for the privacy practices or content of such external sites.
11. Children’s Privacy
Our Platform is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.
12. Changes to This Policy
We reserve the right to update or amend this Privacy Policy at any time. Material changes will be communicated via email or a prominent notice on the Platform.
13. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact:
Privacy Officer
docreview.lk
Email: privacy@docreview.lk