Purpose and Applicability
This Privacy & Data Protection Policy describes how DrCertificate.com collects, stores, processes, and safeguards personal, transactional, and health-related data provided by users of our platform and services. By accessing our website or services, completing a form, or making a payment, you provide explicit consent to the practices outlined herein.
Information Collected
DrCertificate.com collects only the essential data required for service provision:
- Personal Data: Name, age, gender, address, phone number, email address, government-issued ID where necessary.
- Medical Data: Reason for consultation, symptoms, illness duration, and recipient organization details.
- Transactional Data: Payment details processed via secure payment gateways such as Stripe.
- Technical Data: IP address, device identifiers, browser type, cookies, session logs, and usage analytics.
Purpose of Data Processing
Any data collected is used strictly for:
- Facilitating medical consultations and issuing certificates.
- Verifying submission authenticity and preventing misuse.
- Maintaining records, audit trails, and transaction mechanisms.
- Ensuring platform security and integrity.
- Complying with legal, fiscal, and regulatory obligations.
Data Storage & Retention
All data is stored securely on encrypted servers operated by DrCertificate.com or trusted partners. Personal and consultation data will generally be retained for a period of fifteen (15) days post-transaction, after which the data will be deleted or anonymized unless law requires longer retention.
Data Access & Disclosure
Access to user data is limited to authorized personnel:
- Registered health professionals involved in consultation and certificate issuance.
- Payment processors and technical vendors under confidentiality obligations.
- Law enforcement or regulatory bodies if required by law.
DrCertificate.com does not sell or rent user data to third parties.
Security Measures
DrCertificate.com employs comprehensive security measures including encryption, firewall protections, access controls, and regular security reviews to protect user data. Nonetheless, absolute security over the internet cannot be guaranteed, and users are advised to protect their login credentials.
International Data Transfer & Compliance
Although operated by Health Venture OU, data processing may occur in applicable jurisdictions, with safeguards to ensure compliance with data protection laws such as GDPR or local standards, including appropriate contractual mechanisms.
User Rights
Users have rights to:
- Access their personal data in our records.
- Rectify inaccuracies or incomplete data.
- Request deletion of their data, subject to legal obligations.
- Restrict or object to certain data processing activities.
Requests should be sent to care@drcertificate.com. Data deletion is subject to retention policies, and once deleted, data cannot be restored.
Legal Bases for Processing
The processing of your data is based on:
- Your explicit consent when submitting your data and completing payment.
- Performance of the contract of service.
- Compliance with legal obligations.
- Legitimate interests such as security, fraud prevention, and service improvement.
By proceeding, you acknowledge that the consultation begins immediately upon payment, and statutory withdrawal rights may no longer apply once the service starts, as per applicable law.
Governing Law & Dispute Resolution
This policy is governed by the laws that apply to Health Venture OU and to the service you use. Any dispute is decided by the courts with authority under those laws, unless applicable law provides otherwise.
Contact
For questions or privacy rights, contact us at:
Email: care@drcertificate.com
Address: KMC Armstrong Corporate Center, H.V. Dela Costa, Salcedo Village, Makati City, 1227 Metro Manila, Philippines