PDPA Compliance

Our Commitment to Your Privacy

Doktura.ai is dedicated to ensuring the confidentiality, security, and integrity of all personal data we process. Our platform is designed to align with the principles of the PDPA, ensuring that your sensitive information, including health data, is handled with the utmost care and responsibility.

How We Uphold PDPA Principles

1. Data Security & Encryption

We implement robust technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. This includes:

• Data in Transit: Encrypting all data transmitted between our platform and your device using industry-standard protocols like TLS.
• Data at Rest: Encrypting all personal data stored in our secure, private cloud infrastructure using advanced AES-256 encryption.

2. Purpose Limitation & Consent

• We only collect and process your personal data for specific, explicit, and legitimate purposes that are clearly communicated to you in our Privacy Policy.
• We will obtain your explicit consent before processing any sensitive personal data, and you have the right to withdraw this consent at any time.

3. Access Control & Confidentiality

Access to your personal data is strictly limited to authorized personnel and licensed medical professionals who require it to provide you with our services. We enforce strong authentication measures and maintain comprehensive audit logs to ensure accountability and prevent unauthorized access.

4. Data Integrity & Retention

We take reasonable steps to ensure that your personal data is accurate and up-to-date. We retain your data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal and regulatory requirements.

Your Rights as a Data Subject Under PDPA

In accordance with the PDPA, you have the right to:

• Right to Access: Request access to and obtain a copy of your personal data that we hold.
• Right to Correct: Request the correction of any inaccurate or incomplete personal data.
• Right to Withdraw Consent: Withdraw your consent for the processing of your personal data at any time.
• Right to Prevent Processing: Request that we cease processing your data if it is causing or is likely to cause you damage or distress.

To exercise any of these rights, please get in touch with our dedicated privacy team.