Privacy Policy

This policy explains what personal data DoctorClub collects, why, how long it is kept, and what you can do about it. It applies to this website and to the DoctorClub application at app.drclub.org.

Who we are

DoctorClub operates a private professional network for licensed medical practitioners in India. For the purposes of Indian data protection law we are the data fiduciary for the personal data described below. You can reach us at hello@drclub.org.

What we collect

Information you give us

• Account details. Phone number or Google account identifier used to sign in, and your name.
• Professional details. Medical registration number, issuing council, qualifications, speciality, workplace and city.
• Verification documents. The registration document you upload so a reviewer can confirm your registration.
• Content you create. Posts, stories, messages, connection requests and opportunity listings.
• Care fund data. If you opt into Care: enrollment status, contribution history, and — where you raise or receive a claim — the bank account details needed to pay it.

Information collected automatically

• Device and browser information, and IP address, used for security and abuse prevention.
• Approximate or precise location, only where you grant permission, used to order directory results by proximity and to place you in a regional group. You can refuse this and continue using the service.
• Aggregate usage analytics, used to understand which features are used.
• Website analytics. Pages viewed on drclub.org, the referring site, any campaign tag in the link you arrived from, and whether you clicked through to the application. This uses no cookies and no cross-site tracking. Visits are grouped using a one-way hash of your IP address and browser, salted with a value that changes every day — so a return visit tomorrow cannot be linked to one today, and your IP address is never stored alongside these records. We honour the Do Not Track setting in your browser.

Why we use it

• To create and operate your account and authenticate you.
• To verify your medical registration — the core function that keeps non-doctors out of the network.
• To let verified members find and message each other.
• To moderate opportunity listings before publication.
• To operate the Care fund, including processing contributions and payouts.
• To detect and prevent fraud, impersonation and abuse.
• To meet legal and regulatory obligations.

What is never public

Your posts, stories, messages, connections and contribution history are visible inside the network only, and are not indexed by search engines.

A public profile page is an explicit opt-in. It is off by default. If you switch it on, only the fields you choose — name, speciality, qualifications, city, workplace and description — are published at a public URL. Your posts, stories, messages, connections, phone number, email, registration document and bank details are never published. Switching it off removes the page, and we ask search engines to drop it from their index.

Who we share it with

We do not sell your personal data. We share it only with:

• Service providers who host, store and secure the service on our behalf, under contract and only for that purpose.
• Payment and banking partners, where necessary to process a Care contribution or payout.
• Other members, to the extent your profile and content are visible inside the network.
• Authorities, where we are legally required to disclose.

How long we keep it

• Account and profile data: while your account is active.
• Verification documents: retained while your account is active as the record supporting your verified status, and deleted with your account.
• Care contribution and payout records: retained after account deletion where financial record-keeping obligations require it, and reduced to what those obligations need.
• Security and abuse logs: retained for a limited period, then deleted.

Your rights

You can, at any time:

• Access and export everything you have posted, as a single file from Settings.
• Correct your profile and professional details. Corrections to a verified registration are re-reviewed.
• Delete your account from Settings. Personal details are permanently removed and sign-in is disabled immediately, subject to the retention obligations above.
• Withdraw consent for location, notifications, a public profile, or Care enrollment, independently of each other.
• Complain to us at hello@drclub.org, and to the relevant data protection authority.

Security

Data is encrypted in transit. Bank account details for Care payouts are encrypted at rest. Access to verification documents is restricted to reviewers who need it. No system is perfectly secure, and we will notify affected members and the appropriate authority of a breach as required.

Children

DoctorClub is for licensed medical practitioners and is not directed at anyone under 18. We do not knowingly create accounts for minors.

Changes

We will update this page when our practices change, and will revise the date at the top. Material changes will be notified in the application.

See also our Terms of Use and Trust & privacy overview.