Privacy notice

Who we are

LankaNova Digital Solutions (“LankaNova”, “we”) makes and supports Doctor Wallet. You can reach us on 077 385 0235 or through the contact form.

Three different situations

What we do with personal data depends on who you are.

• Visitors to this website. We are responsible for what you send us.
• Doctors who list themselves in the directory. We are responsible for the public profile.
• Patients of a clinic that uses Doctor Wallet. The clinic decides what is recorded about you and why; we provide the software and store the clinic's data for it. We act on the clinic's instructions.

This website

If you use the contact or demo form we keep your name, clinic, phone, email, town and message so we can reply and follow up. We keep a short, non-reversible code derived from your internet address to limit abuse of the form. We use no advertising or tracking cookies.

We keep contact requests only as long as we need them to deal with your request and for our records of enquiries, then delete them.

The doctor directory

A doctor chooses to be listed and chooses every detail shown: name, qualifications, specialty, clinic, town, address, phone, hours, an optional fee and a short biography. Nothing is shown until we have checked the profile. A doctor can hide their profile at any time from their clinic's Doctor Wallet. No patient information is ever part of the directory.

Patients' records in the clinic software

• A clinic's records are kept in an encrypted database on the clinic's own PC, and a copy in a private database that belongs to that clinic alone, in a cloud data centre in Singapore.
• We don't read patients' records. Our support tools show a clinic's licence and payments, not its patients.
• Text messages are sent through a Sri Lankan SMS provider and contain only what the clinic's templates say, such as a token number or a visit date.
• If a clinic switches on the patient portal for you, we hold your phone number to send you one-time sign-in codes, and you can see the records the clinic chooses to show.
• If a clinic refers you to a laboratory, the laboratory sees only the details it needs to do the test, such as your name, age and sex, and the tests requested.

Your rights

You may ask whether we hold personal data about you, ask for a copy, and ask for it to be corrected or deleted. For website enquiries and directory profiles, contact us. For your medical records, please ask your clinic; it is the one that decides what is recorded, and it can tell us what to change or delete.

Security

We encrypt clinic databases on disk, hash passwords, limit what each role can see and keep an activity log. See our security page. No system is perfectly safe; if something goes wrong that affects you, we will tell the clinic and the people affected without delay.

Changes

If we change this notice we will update the date above. This page is a summary in plain language, not legal advice.