Legal

Privacy Policy

Last updated: 28 July 2026

1. Information We Collect

We collect information you provide directly to us when you register for SihatSuite, including your organisation name, contact details, and administrator credentials.

We also collect information about how you use our services, including log data, device information, and usage patterns, to improve the platform and ensure security.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, to process transactions, send service-related communications, and respond to your requests.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

3. Data Storage and Security

Your data is stored on secure cloud infrastructure. We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security audits.

Each tenant's data is logically isolated. Your patient and clinical data is never shared with other organisations using SihatSuite.

4. Patient Data

As a healthcare platform, we treat patient data with the highest level of sensitivity. Patient records, diagnostic results, and clinical information stored in SihatSuite are owned by the subscribing organisation and are never accessed by SihatSuite staff except for technical support purposes with explicit consent.

5. Data Retention

We retain your account information for as long as your subscription is active and for a reasonable period thereafter. Upon account deletion, we will remove your data within 90 days, except where required by law.

6. WhatsApp & Messaging Communications

Where enabled by your organisation, SihatSuite delivers reports and invoices to patients over WhatsApp using approved message templates. Messages are sent only to the phone number recorded for the patient by your organisation, and the patient report link is protected by a PIN (the last 4 digits of the registered phone number).

WhatsApp messages are delivered through Meta's WhatsApp Business Platform and are subject to Meta's own terms and privacy practices. Your organisation is responsible for obtaining any patient consent required before sending such messages.

7. Cookies

SihatSuite uses secure, HTTP-only session cookies for authentication. We do not use tracking cookies or third-party advertising cookies.

8. Your Rights

You have the right to access, correct, or request deletion of your personal information. To exercise these rights, contact us at sihatsuite@gmail.com or call +880 1971656985.

9. Governing Law

This Privacy Policy is governed by the laws of the People's Republic of Bangladesh. Any disputes arising in connection with it are subject to the exclusive jurisdiction of the courts of Bangladesh.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of SihatSuite after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy, please reach us at sihatsuite@gmail.com or +880 1971656985.

Privacy Policy — SihatSuite