Privacy Policy
All personal data, including health information, is handled in a manner that complies with the EU General Data Protection Regulation (GDPR) and the US Health Insurance Portability and Accountability Act (HIPAA).
This policy explains what DoctorsQuick collects when you visit this website or use our online prescription service, why we collect it, who sees it, and the choices you have.
Who we are
DoctorsQuick (“we”, “us”) provides online access to prescription care in which every request is reviewed by a doctor. For anything about your data, email hello@doctorsquick.com.
What we collect
- Contact details. Your email address and anything you write when you contact us or ask to get started.
- Health information. What you tell us in an assessment: your health, symptoms, medical history and current medicines, plus any photos or documents you share or a doctor asks for.
- Care records. The doctor’s questions and decisions, prescriptions issued, and messages between you and the people involved in your care.
- Technical data. Your IP address, browser and device type, the pages requested and the time of each request. Our hosting provider records these in server logs to deliver and protect the website.
We do not buy data about you from other companies.
How we use it, and our legal basis
- To provide the care you ask for. Reviewing your assessment, making a prescribing decision and telling you the outcome. We do this to perform our agreement with you. For health information we rely on your explicit consent and on the provision of health care by, or under the responsibility of, a health professional (GDPR Article 9(2)(a) and (h)).
- To answer you. Replying to enquiries and letting you know when you can start, at your request.
- To keep the website secure and working. This is in our legitimate interests and yours.
- To meet legal duties. Medical record-keeping, prescribing rules and lawful requests from authorities.
We do not use health information for advertising, and we do not sell personal data.
Who sees your data
- The doctors who review your request, and the clinical staff who support them.
- The pharmacy you take your prescription to.
- Service providers that run our systems, such as website hosting and email (currently Vercel and Google). They act on our instructions under contracts that require them to protect the data.
- Regulators, courts and other authorities, when the law requires it.
HIPAA
Where HIPAA applies to the care you receive, your health information is treated as protected health information. It is used and disclosed only as HIPAA allows: for treatment, payment and health care operations, as required by law, or with your written authorisation. Any provider that handles it on our behalf must agree in writing to safeguard it.
Transfers outside your country
Some of our providers process data in the United States and in other countries outside the one you live in. When personal data leaves the European Economic Area or the United Kingdom, we rely on safeguards recognised under GDPR, such as the European Commission’s standard contractual clauses or an adequacy decision.
How long we keep it
We keep personal data only for as long as it is needed for the purposes above. Medical records are kept for the period required by the law that applies to the care you received. Enquiries are deleted once they have been dealt with and are no longer needed.
Security
Data is encrypted in transit. Access to health information is limited to the people involved in your care and those who maintain our systems, all of whom are bound by confidentiality. Please do not include sensitive medical information in an ordinary email.
Your rights
Under GDPR you can ask us to:
- give you a copy of your personal data;
- correct data that is wrong or incomplete;
- delete your data, where we have no legal duty to keep it;
- restrict or stop a particular use of your data;
- send your data to you or to another provider in a portable format.
Where we rely on your consent, you can withdraw it at any time. Where HIPAA applies, you can also ask for a copy of your health records, ask for corrections, and ask for a list of certain disclosures.
To use any of these rights, email hello@doctorsquick.com. We reply within one month. You also have the right to complain to the data protection authority in the country where you live or work.
Cookies
This website does not use advertising or analytics cookies. The Cookie Policy has the detail.
Children
The service is for adults aged 18 and over. We do not knowingly collect personal data from children.
Changes to this policy
When we change this policy we post the new version here and update the date at the top. If a change is significant, we will tell you before it takes effect.
Contact
Questions about this policy or your data: hello@doctorsquick.com.
