Data Retention Policy

1. Purpose

This policy describes how long personal data is kept on the DrOnline.io platform, why it is kept, and how it is destroyed when no longer needed. The platform is hosted and managed by Digital Commercial Brokerage and Trading Services (with its registered office at Al Jazeera Tower, Building 186, Street 836, Zone 61, West Bay, Doha, State of Qatar); all personal and medical data is controlled and stored under the authority of Royal Link Healthcare Services, the Data Controller, which sets the retention requirements below.

Retention is set by reference to: (a) Qatar's Personal Data Privacy Protection Law (PDPPL) data-minimisation principle, (b) Qatar Ministry of Public Health retention guidance for medical records, (c) Qatari tax and accounting law for financial records, and (d) reasonable operational needs (security, fraud prevention, dispute resolution).

2. Retention schedule

Data category	Retention period	Reason
Uploaded medication / prescription photos	Deleted automatically once the doctor has completed their review	Photos are no longer needed once the consultation is reviewed
Identity documents (Qatar ID etc.)	Deleted within 90 days of identity verification, unless required for an open dispute or regulatory request	Verification only; not part of the longer-term medical record
Body / face photos used for visual assessment	Original deleted automatically once the doctor has completed their review; AI-generated visualisations retained with the consultation record (deletable on request)	Minimisation; visualisations are not real photographs
Medical consultation record (questionnaire, doctor notes, prescription)	Held under the authority of Royal Link Healthcare Services for the period required by Qatar Ministry of Public Health guidance — typically 10 years from last clinical activity for adult records	Regulatory medical-record retention
Patient–doctor messages and call metadata	Retained alongside the consultation record	Part of the clinical record
Account profile (name, email, phone, address)	For the lifetime of the account; deleted on request, subject to the regulatory items above	Service delivery
Order and payment records	10 years from the date of the transaction	Qatar tax and accounting law
Delivery records	2 years from delivery completion	Operational dispute resolution
Application logs and security event logs	90 days for general logs; 12 months for security-relevant events	Security, fraud prevention, troubleshooting
Database backups	Rolling 30 days	Disaster recovery
Marketing-consent records (if you opt in)	Until you withdraw consent, plus 12 months for evidence	Demonstrating consent

3. How deletion happens

Automated deletion routines run for time-limited categories (e.g. uploaded photos after doctor review).
On a verified deletion request, account data is removed from active systems. Items required for legal or regulatory retention are kept for the minimum period required and then deleted.
Items in encrypted backups are overwritten as the backup window rolls forward (typically within 30 days).

4. Your rights

You can ask to access, correct, port or delete your data at any time, subject to the retention exceptions above. Requests that relate specifically to the clinical record are handled by Royal Link Healthcare Services, since it is the controller of that record. We will help route such requests to Royal Link Healthcare Services.

See the Privacy Policy for the full list of rights and how to exercise them.

5. Contact

Privacy: privacy@dronline.io
Data Controller: Royal Link Healthcare Services
Platform Operator: Digital Commercial Brokerage and Trading Services, Al Jazeera Tower, Building 186, Street 836, Zone 61, West Bay, Doha, State of Qatar