Privacy Policy
Last updated 27 September 2026
BookMyDoc PH ("BookMyDoc", "we", "us") is an online booking service that lets doctors in the Philippines publish a booking page and lets patients book appointments with them. BookMyDoc is operated by Cristina Aracil Digital Marketing Services, Buhang Taft North, Mandurriao, Iloilo City, Philippines.
This policy explains what personal information we collect, why, how long we keep it, and your rights under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.
1. Who is responsible for your information
- If you book an appointment as a patient, the doctor you book with is responsible for your booking information (the "personal information controller"). BookMyDoc processes it on the doctor's behalf, only to run the booking service (we are the "personal information processor").
- If you are a doctor or clinic staff member using BookMyDoc, BookMyDoc is responsible for your account information.
- For visitors to our website, BookMyDoc is responsible for the limited technical information described below.
2. Information we collect
From patients (when you book)
Full name; mobile number; email address; Messenger name or profile link (optional); whether you are a new or follow-up patient; your HMO, if any; the doctor, clinic, date and time (or queue number) you book, including whether it is an in-person or online consultation; a record that you agreed to this policy, and when.
We do not ask for your symptoms, reason for visit, medical history or any other health details. Please do not include health details anywhere in your booking. Because booking with a particular doctor could indicate something about your health, we treat all booking information with the same care as sensitive personal information.
From doctors
Name, title, specialty and sub-specialty; PRC licence number and licence validity date; a photo of your PRC ID (for verification only); a mobile number for verification; profile photo, biography, consultation fee, HMOs accepted and languages; clinic names, addresses, cities, contact numbers and schedules; teleconsultation settings, including your meeting link and payment instructions; login email and password (stored in encrypted, non-readable form) and two-factor authentication settings; subscription and payment records, including receipts you upload; feedback you choose to give us; notification preferences, and device notification settings if you turn on phone notifications.
From clinic staff (secretaries)
Name, login email and password, and which doctor you work with.
Technical information
If you install the BookMyDoc app on your phone, your upcoming bookings may be saved on your own device so you can see them later; this stays on your device and is not sent to us.
3. How we use information
- To create and manage bookings, and to send booking confirmations, reminders and cancellation notices by email
- To show doctors and their staff their bookings so they can prepare for and contact their patients
- To verify that doctors hold a valid PRC licence before their booking page goes live
- To manage doctor accounts, subscriptions and payments
- To keep the service secure and prevent fraud and abuse
- To improve the service, using feedback and non-identifying usage information
- To meet our legal obligations
We do not sell personal information. We do not share it for advertising. We do not place advertising or tracking tools on doctor booking pages or patient booking pages.
4. Who we share information with
- The doctor and their authorised staff see the bookings made with them.
- Service providers who help us run BookMyDoc, only as needed to provide their service and under confidentiality obligations: our cloud hosting, database and email provider.
- Authorities, where required by law or a lawful order.
Some of these providers may store or process information outside the Philippines. We choose providers that apply appropriate security measures and require them to protect your information.
Teleconsultations take place on the video or calling platform your doctor chooses, which handles the call under its own privacy policy. BookMyDoc does not record or store calls.
5. How long we keep information
| Information | How long we keep it |
|---|---|
| Patient name, mobile number, email and Messenger details | Removed 60 days after the appointment date. The booking record (date, time, clinic, status) is kept without these details. |
| Consent records | Kept with the booking record. |
| Doctor PRC ID photos | Deleted 30 days after approval; 1 year if verification is declined; 90 days if a sign-up is not completed. May be kept longer if needed to investigate suspected fraud or meet a legal obligation. |
| Verification records (what was checked and when) | For as long as needed to demonstrate due diligence and meet legal obligations. |
| Doctor and staff account information | While the account is active, and up to 1 year after it is closed. |
| Payment receipts and records | For the period required by Philippine tax and accounting regulations. |
6. How we protect information
- All connections are encrypted.
- Access is limited by role: patients' booking details are visible only to the doctor they booked with and that doctor's authorised staff.
- Booking management links are private and stored in scrambled form, so they cannot be read from our database.
- PRC ID photos and payment receipts are stored privately and visible only to authorised BookMyDoc staff.
- Administrator accounts require two-factor authentication.
- The booking form collects no free-text health information.
If a personal data breach occurs that is likely to put you at risk, we will notify the National Privacy Commission and affected individuals as required by law.
7. Your rights
Under the Data Privacy Act, you have the right to be informed, to access your information, to object to processing, to have inaccurate information corrected, to have your information erased or blocked, to data portability, to be compensated for damages, and to file a complaint with the National Privacy Commission.
- Patients: you may contact the doctor or clinic you booked with, or contact us and we will forward your request to them. You can cancel a booking at any time using the "Manage booking" link in your confirmation email, or find your bookings using Find my booking.
- Doctors and staff: contact us directly.
We will respond within a reasonable time and may need to verify your identity first.
8. Bookings for children or others
A parent, guardian or authorised person may book on behalf of a child or another person. By doing so, you confirm you are authorised to provide their information.
9. Changes to this policy
We may update this policy. We will post the new version here with a new "last updated" date, and notify doctors by email of significant changes.
10. Contact us
Data Protection Officer
Email: privacy@bookmydoc.site
Phone: +63 920 413 9012
Address: Buhang Taft North, Mandurriao, Iloilo City, Philippines
You may also contact the National Privacy Commission at privacy.gov.ph.