Clinical Queue Privacy Policy

1. Sovereign Purpose & Regulatory Alignment

RashuvMed, a healthcare technology division of Rashuv Technologies, provides outpatient queue coordination infrastructure for clinics, nursing homes, and hospitals across India. Our clinical architecture is formulated in strict compliance with:

• Digital Personal Data Protection Act 2023 (DPDP Act): Operating on strict purpose limitation, data minimization, and lawful verifiable consent.
• Information Technology Act 2000 (IT Act) & SPDI Rules: Implementing comprehensive technical and organizational safeguards for electronic patient interactions.
• National Digital Health Framework Principles: Respecting the sovereign boundary between queue logistics and clinical consultation secrecy.

2. Data Collection & Strict Minimization Principles

RMedQ operates on a zero-overhead principle. We believe patients should never be burdened with forced mobile app downloads, account passwords, or extensive personal questionnaires simply to wait for an outpatient doctor consultation.

When an outpatient token is generated via counter QR code, reception entry, or self-check-in kiosk, we collect only the minimal data points necessary to assign and communicate the queue token:

• Patient Full Name: Used by the reception desk and doctor cabin to call the patient respectfully when their turn arrives.
• Age & Gender: Used for clinical categorization (e.g., pediatric queue prioritization, geriatric assistance, or gynecological cabin routing).
• Mobile Phone Number: Used exclusively for two operational functions: (a) authenticating the request via one-time SMS verification to prevent automated queue spam, and (b) sending live SMS alerts regarding queue progress (e.g., "Your Token #A-15 is next in line at Cabin 2").
• Assigned Token Identifier & Cabin: A sequential token number (e.g., #A-15) and designated consulting doctor cabin.

3. Separation of Queue Logistics from Private Medical Records

RMedQ does not store, index, sell, or profile sensitive patient medical histories. The consulting doctor may record consultation completion and fee deposition at the counter, but private diagnostic records are not subjected to public queue telemetry.

4. SMS Verification & Communication Consent

By entering your mobile phone number during OPD registration or scanning a clinic QR code, you provide explicit, revocable consent for RMedQ to transmit transactional operational messages regarding your consultation:

• Identity Verification: One-Time Password (OTP) validation to verify patient phone possession.
• Live Wait-time Tracking: Real-time alerts when your token advances or when the clinic experiences emergency delays.
• Zero Commercial Marketing: We never send promotional advertisements, pharmaceutical marketing, or loan offers to patient mobile numbers.

5. Ephemeral Queue Lifecycle & Daily Auto-Archival

Outpatient clinic operations run on discrete daily cycles. Accordingly, our data retention operates on an ephemeral queue policy:

• Active waiting tokens and queue passes are live during the clinic operating hours of that date.
• At the conclusion of each day's clinic session, daily active tokens are archived and cleared from the live look-up stream.
• Public links from expired token passes will show the consultation cycle as concluded and cannot be used by unauthorized third parties to monitor subsequent clinic days.

6. Waiting Hall Public TV Display Privacy

To maintain absolute patient privacy in crowded waiting rooms and outpatient reception lobbies, RMedQ TV Streaming Mode adheres to strict display hygiene:

• TV screens display only the Token Sequence Number (e.g., "#A-15"), the consulting doctor's cabin number, and an optional first name where customary for clinic clarity.
• Mobile phone numbers, complete residential addresses, consultation fees, and clinical conditions are never broadcast on waiting hall TV screens.
• Audible chimes sound non-intrusive alert tones without broadcasting private clinical data over public speaker systems.

7. Multi-Tenant Clinic Isolation & Infrastructure Security

Each clinic, doctor cabin, and hospital department operating on RashuvMed has its own cryptographically isolated tenant boundary:

• Data Residency in India: All clinical telemetry and database stores are hosted within India (Google Cloud Platform Asia-South 1 datacenters in Mumbai and Delhi), ensuring sovereign compliance with Indian data sovereignty mandates.
• Encryption Standards: Data is encrypted in transit over TLS 1.3 cryptographic protocols and at rest with AES-256 cloud storage encryption.
• Role-Based Access Control (RBAC): Clinic receptionists have access only to fee collection and check-in queues for their designated facility; doctors have access only to their assigned cabin queue.

8. Patient Rights, Data Erasure & Grievance Redressal

Under the Digital Personal Data Protection Act 2023, patients possess full rights regarding their personal identifiers:

• Right to Correction & Erasure: Patients may request clinic reception or our privacy team to correct or purge their mobile contact number from clinic logs.
• Right of Grievance Redressal: Inquiries, requests for data verification, or privacy grievances may be directed to our appointed Data Protection & Grievance Redressal Officer: