Privacy policy

Who we are

VisitQless is a queue and token management service for clinics. When you book a token through VisitQless, we act as a data processor on behalf of the clinic you are visiting. The clinic remains the data fiduciary for your visit records.

This policy explains what we collect, why we collect it, how long we keep it, and the rights you have under the Digital Personal Data Protection Act, 2023.

What we collect

• Patient name, mobile number, age and gender — supplied by you when you book a token.
• Your reason for the visit, if you choose to enter one. This is optional and is shown only to the clinic.
• Booking records: the clinic, doctor, date, time slot and token number.
• If you refer a clinic, its name and your mobile number, so we can tell you when it joins. We do not share your number with that clinic.
• Approximate location, only if you grant browser location permission, and only to show clinics near you. We do not store your coordinates.
• Basic technical data such as your IP address, used for security, abuse prevention and audit logs.

Why we collect it

We do not sell your personal data. We do not share it with advertisers. We do not use it to build a profile of you across clinics.

• To issue and hold your token, and to show your live position in the queue.
• To send the one-time code that confirms your booking, or that lets you look up your bookings, to your mobile number.
• Your live tracking page shows your place in the queue and when to leave. We do not send reminders or queue updates to your phone.
• To let the clinic's front desk check you in, and manage the day's queue.
• To keep an audit trail of changes to bookings, which protects both you and the clinic.

Who can see your data

• The clinic you booked with, and its authorised front desk staff.
• Our messaging providers, strictly to deliver your one-time verification codes.
• Our payment provider, if the clinic collects payment through VisitQless. We never store your card or UPI credentials.
• Law enforcement or regulators, where we are legally required to disclose.

How long we keep it

Active and upcoming bookings are kept until the visit is complete. Past booking records are retained for 24 months so that clinics can honour follow-up visits and meet their own record-keeping obligations, then deleted.

Audit logs are retained for 24 months. One-time passcodes are deleted within minutes of use or expiry.

Your rights

To exercise any of these rights, write to privacy@visitqless.com with the mobile number you booked with.

• Access — ask for a copy of the personal data we hold about you.
• Correction — ask us to fix data that is wrong or out of date.
• Erasure — ask us to delete your data, where we are not required to keep it.
• Grievance redressal — raise a complaint with our Grievance Officer, who will respond within 30 days.

Security

Access to your booking is protected by a one-time passcode sent to your mobile number, or by the private tracking link we send you. Treat that link as private — anyone who has it can view, reschedule or cancel that booking.

Data is encrypted in transit. Access by clinic staff is scoped to their own clinic and recorded in an audit log.

Changes to this policy

If we make a material change, we will update the date at the top of this page and, where the change affects how we use your data, notify you on your next booking.

Contact

Grievance Officer, VisitQless — privacy@visitqless.com. We respond to privacy requests within 30 days.