Privacy Policy

1. Introduction

ChamberBD ("we", "our", "us") is a healthcare practice-management platform for doctors, clinics and patients in Bangladesh. We are committed to protecting the privacy and security of your personal information, including sensitive medical data. This Privacy Policy explains how we collect, use, store, and share information when you use our platform.

We process personal and health-related data in line with applicable Bangladeshi laws, including the Bangladesh Digital Security Act, 2018, the draft Bangladesh Data Protection Act (Personal Data Protection Ordinance), and relevant Directorate General of Health Services (DGHS) guidance for patient information. Where users access the service from outside Bangladesh, we apply GDPR/UK-GDPR principles on a best-effort basis.

2. Information We Collect

2.1 Doctor/Practitioner Information

• Full name, email, phone number
• Medical qualifications, degrees, specializations
• Chamber/clinic addresses and schedules
• Profile photo and digital signature
• Payment and billing information

2.2 Patient Information

• Full name (English and Bengali), phone, email
• Date of birth, gender, blood group
• Address and district
• Medical history, prescriptions, diagnoses, vitals
• Appointment and payment records
• Uploaded documents and medical files

2.3 Automatically Collected Information

• IP address and device information
• Browser type and operating system
• Usage patterns and access logs
• Cookies for session management

3. How We Use Your Information

• Service Delivery: To provide clinic management, appointment scheduling, prescription creation, and billing services
• Communication: To send appointment reminders, verification codes, and service notifications
• Improvement: To analyze usage patterns and improve platform features
• Security: To detect fraud, prevent abuse, and protect user accounts
• Legal Compliance: To comply with applicable laws and regulations

4. Data Storage & Security

This is the same, dated list as our Security page, checked on 2026-10-14.

• ChamberBD's application and database run on a server rented from Hetzner Online in its Helsinki, Finland data centre (European Union). Data is not stored in Bangladesh.
• Uploaded files (prescription images, appointment documents, receipts, diagnostic reports) are stored on the same server.
• The database is not reachable from the internet. The server runs a firewall, blocks repeated failed logins and installs security updates automatically.
• Every day a copy of both databases and all uploaded files is made, checked and kept for 7 days — on the same server. A test restore on 5 October 2026 recovered both databases and every file. The copies are not yet encrypted or stored anywhere else — see Not covered yet.
• Every ChamberBD website and app is served over HTTPS. Plain-HTTP requests are redirected to HTTPS, and browsers are told to use HTTPS only (HSTS, 180 days, including subdomains).
• Traffic passes through Cloudflare. The connection from your browser to Cloudflare is encrypted; the connection from Cloudflare to our server is not yet encrypted — see Not covered yet.
• Standard browser protections are switched on: no framing by other sites, no content-type sniffing, a strict referrer policy.
• Passwords are stored only as salted one-way hashes (bcrypt or Argon2). They are never sent back by our API.
• Sign-in uses signed tokens. Refresh tokens are rotated, and signing out revokes the access token.
• Separation between accounts: every request is tied to one account, and every database query is filtered by that account in our application. ChamberBD Clinic, Physio, Dental and Hijama use a separate database from the doctor app.
• Doctor app staff: each staff account has its own permissions in each chamber — for appointments, patients, prescriptions, payments, expenses and reports. Reports need their own permission. Staff who handle appointments, prescriptions or payments can also see the patient list, so give staff accounts only to people who should see it.
• Clinic products: each role (reception, accountant, doctor, pharmacist and others) has its own permissions, access can be limited to branches, and a clinic doctor sees only their own patients' clinical records.
• ChamberBD support: two ChamberBD administrators can open an account to help with support. Since 5 October 2026 each such access is recorded in an internal audit log; you cannot view that log in your dashboard yet.

Not in place yet — we do not claim these:

• Backups that are encrypted and kept away from this server (off-site), with restores tested on a schedule.
• Encryption of stored data (database and uploaded files) at rest.
• Encryption between Cloudflare and our server.
• A log of who viewed or changed patient records that you can review. (ChamberBD support access is logged internally, but that log is not visible to you yet.)
• Self-service deletion of patient records and accounts, and automatic retention schedules.
• Limits on repeated login attempts and on API requests per network address. (The limiter in our code does not take effect yet, so we no longer claim it.)
• Withdrawing a shared prescription link from the dashboard.
• A documented incident-response and breach-notification process.

5. Data Sharing

We do not sell, rent, or trade personal or medical data. We may share data only in these cases:

• With the Doctor or Clinic: Patients' records are accessible to the doctor or clinic that created them and the staff they authorise. Two ChamberBD administrators can open an account to provide support (see section 4).
• Public Prescriptions: When a doctor shares a prescription via a public link, only the specific prescription data is visible
• Public Doctor Profiles: Doctor name, qualifications, specialties, and chamber details are publicly visible in the doctor directory
• Legal Requirements: If required by law, court order, or government authority
• Service Providers: These services process data on our behalf:
  • Hetzner Online — Server hosting (Helsinki, Finland): Everything stored in ChamberBD
  • Cloudflare — DNS, HTTPS and content delivery: All traffic to ChamberBD sites and apps
  • OpenAI — Chamber AI (optional dictation assistant in the doctor app): Text the doctor dictates and the prescription draft's notes (complaints, history, diagnosis, investigations, advice). We keep these AI requests for 90 days to fix problems; ChamberBD administrators can read them. Do not dictate patient names or phone numbers.
  • Google — "Sign in with Google" (Firebase); website analytics: Sign-in identity of doctors who choose Google sign-in; usage analytics on our websites and apps
  • PixelFly — Server-side hosting of our Google Analytics tag: The same website and app usage analytics that Google Analytics receives
  • Resend — Email: Emails to doctors and clinic users (sign-up codes, account messages)
  • Meta, Microsoft Clarity — Advertising measurement, usage recordings: Loaded only after you accept analytics cookies
  • EPS (Easy Payment System) — Online subscription payments (card and mobile wallets): The payer's name, email, phone and the amount. Card and wallet details are entered on EPS's own page; ChamberBD never receives them.
  • Rosuii — Opens the EPS checkout for ChamberBD (the EPS merchant account is registered on Rosuii) and passes the result back: The same payment details as EPS (name, email, phone, amount) and the payment status
  • BulkSMSBD — SMS to patients, when a doctor turns it on: Patient phone number and the message text

6. Separation Between Accounts

Each doctor's and each clinic's data is kept separate: every request is tied to one account, and every database query is filtered by that account in our application. ChamberBD Clinic, Physio, Dental and Hijama use a separate database from the doctor app. No doctor can see another doctor's patient records, appointments or financial data through ChamberBD.

7. Cookies, Analytics & Marketing Pixels

We use essential cookies and browser storage for sign-in and sessions (always on). For analytics and advertising:

• Google Analytics 4 (served through PixelFly's server-side tagging) — loads on every page. Until you accept analytics cookies it sets no cookies and sends only anonymous, cookieless measurements; after you accept it uses analytics cookies. IP anonymisation is on.
• Meta (Facebook) Pixel — advertising measurement; loaded only after you accept.
• Microsoft Clarity — usage recordings to fix usability problems; loaded only after you accept, and inside the doctor app all text on screen is masked.

You can withdraw consent any time by clearing cbd_consent from your browser storage or by emailing privacy@chamberbd.com. Medical records are never sent to analytics or marketing tools.

8. Your Rights (Data Subject Access Requests)

You have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion / "Right to be forgotten": Request deletion of your account and associated data
• Export: lists and reports in the dashboard — appointments, patients, prescriptions, payments, expenses — can be downloaded as CSV. A complete one-click export of an account is not available yet; email support@chamberbd.com and we will prepare one.
• Restriction & objection: Limit how we process your data, including opting out of marketing analytics
• Withdraw consent: Any consent given for analytics/marketing can be withdrawn at any time

To exercise these rights, email privacy@chamberbd.com or support@chamberbd.com with the subject line "DSAR — your-request-type". We respond within 30 days.

Closing an account: email support@chamberbd.com. We deactivate it: sign-in and the public profile and booking pages stop. Tell us if you also want the data deleted; we delete it and confirm in writing what was removed.

Deleting records: patient records and prescriptions cannot be deleted from the dashboard today. Patients should ask their treating doctor, or email privacy@chamberbd.com with the phone number on the record so we can verify the request.

9. Data Retention

How long data is kept: records are kept while your account exists; there is no automatic deletion schedule yet. After an account is closed you can ask for a copy of your data for 30 days. Data is deleted when you ask us to, except records Bangladeshi law requires us to keep, such as payment records for tax.

Chamber AI requests are kept for 90 days (see section 5). Anonymised analytics data may be kept longer.

10. Children's Privacy

Our platform is designed for licensed medical practitioners. We do not knowingly collect personal information from children under 18 without parental consent. Patient records for minors are managed by the treating physician.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email or in-app notification. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Public Prescription Links & Patient PHI

Doctors may generate a public prescription link using a random, unguessable code to share a single prescription with the patient (for example via WhatsApp). The link only shows that single prescription — not the patient's full record or other visits.

Prescription links: a shared prescription opens at an unlisted address and is marked so search engines do not list it. Anyone who has the link can open it, and a link cannot be withdrawn from the dashboard yet — share it only with the patient.

13. Grievance & Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact our Data Protection point of contact: