Data Retention & Deletion

This page explains how long Doctorz keeps your data and how it can be removed, in line with the Personal Data Protection Ordinance 2025. It complements our Privacy Policy.

1. Prescriptions and the trash window

Your treating doctor is the controller of your clinical records; Doctorz stores them securely on your behalf. When a prescription is removed, it first goes to a recoverable trash window before permanent deletion:

Even if a doctor removes a prescription, you always keep your own copy of any prescription issued to you.

2. Account and transaction records

We retain your account, booking and payment records for up to 5 years to meet legal, tax and dispute-resolution obligations, after which they are deleted or anonymised.

3. Doctor identity photographs

To verify that a doctor is who they say they are, we take photographs of the doctor’s face during registration and compare them with the photograph held on the BMDC register. These are biometric data and are treated as sensitive personal data.

• They are kept for as long as the doctor’s account exists, because they are the record of that verification and may be needed if a patient or a regulator questions it.
• They are stored on private storage that is not publicly reachable, and are never shown to patients.
• If we remove a doctor’s photographs for any reason, the doctor is asked to submit new ones before they can continue consulting.
• They are permanently deleted, along with the image files themselves, when the doctor’s account is deleted.

4. Documents you upload

Certificates and registration documents uploaded by a doctor, and medical reports a patient shares for a consultation, are kept while the account exists and are deleted with it.

A patient can remove a report they have shared up until that consultation is finished. After the visit is complete the report stays with the consultation record, because it forms part of the clinical history the doctor relied on. It is deleted when the account is deleted.

5. Unverified doctor accounts

A doctor account that is not verified against BMDC records within 3 working days of registration may be removed, along with its associated data.

6. If we close the service

If Doctorz discontinues, we will give at least 3 months’ notice where reasonably possible, so you can download your prescriptions and withdraw any wallet balance before data is deleted.

7. Requesting deletion

You can ask us to delete your personal data at any time by contacting our data-protection officer. Some records may be kept for the minimum period the law requires even after you ask for deletion.

8. Where your data is stored

Your data is hosted in Bangladesh (BDIX VPS), with at least one real-time copy kept within Bangladesh as required by the data-residency rule of the Personal Data Protection Ordinance 2025.