Legal
Privacy Policy
Last updated: 28 July 2026
1. Information We Collect
We collect information you provide directly to us when you register for SihatSuite, including your organisation name, contact details, and administrator credentials.
We also collect information about how you use our services, including log data, device information, and usage patterns, to improve the platform and ensure security.
2. How We Use Your Information
We use the information we collect to provide, maintain, and improve our services, to process transactions, send service-related communications, and respond to your requests.
We do not sell, rent, or share your personal information with third parties for their marketing purposes.
3. Data Storage and Security
Your data is stored on secure cloud infrastructure. We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security audits.
Each tenant's data is logically isolated. Your patient and clinical data is never shared with other organisations using SihatSuite.
4. Patient Data
As a healthcare platform, we treat patient data with the highest level of sensitivity. Patient records, diagnostic results, and clinical information stored in SihatSuite are owned by the subscribing organisation and are never accessed by SihatSuite staff except for technical support purposes with explicit consent.
5. Data Retention
We retain your account information for as long as your subscription is active and for a reasonable period thereafter. Upon account deletion, we will remove your data within 90 days, except where required by law.
6. WhatsApp & Messaging Communications
Where enabled by your organisation, SihatSuite delivers reports and invoices to patients over WhatsApp using approved message templates. Messages are sent only to the phone number recorded for the patient by your organisation, and the patient report link is protected by a PIN (the last 4 digits of the registered phone number).
WhatsApp messages are delivered through Meta's WhatsApp Business Platform and are subject to Meta's own terms and privacy practices. Your organisation is responsible for obtaining any patient consent required before sending such messages.
7. Cookies
SihatSuite uses secure, HTTP-only session cookies for authentication. We do not use tracking cookies or third-party advertising cookies.
8. Your Rights
You have the right to access, correct, or request deletion of your personal information. To exercise these rights, contact us at sihatsuite@gmail.com or call +880 1971656985.
9. Governing Law
This Privacy Policy is governed by the laws of the People's Republic of Bangladesh. Any disputes arising in connection with it are subject to the exclusive jurisdiction of the courts of Bangladesh.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of SihatSuite after changes constitutes acceptance of the updated policy.
11. Contact
If you have questions about this Privacy Policy, please reach us at sihatsuite@gmail.com or +880 1971656985.
