Doctosan Privacy Policy

Booking attribution

Our booking links carry this directory’s domain and campaign information, including the campaign or referring website that brought you here when available. A random session identifier links a booking-button click to a successfully submitted booking request. It is not based on your IP address or contact details. Our configured analytics services (Google Analytics, PostHog, MetricsMage and, when enabled, Amplitude) receive these events and campaign fields, not names, contact details, appointment times or private form links. The booking provider stores the attribution with the booking so the business can report its sources and later outcomes. A submitted request does not mean an approved appointment or completed stay. We honor Do Not Track and Global Privacy Control for this journey measurement.

First-party contact and shared-link measurement

Where first-party measurement is enabled, we use the request IP on our server to create a keyed fingerprint scoped to one listing and one day. We do not store the raw IP in this measurement record or send it or its fingerprint to Google Analytics or PostHog. Contact fingerprints expire after 24 hours; new confirmed shared-link records expire after seven days. We honor Do Not Track and Global Privacy Control for this measurement. A matching network suggests a returning visitor; a different network after a WhatsApp click is only a possible recipient for staff review. Networks can be shared or change, links can be forwarded and previews can open them. This does not identify an owner, verify a claim, establish permission to contact anyone or send any message automatically. Contact support to object or ask about this processing.

Controller and scope

Doctosan operates this directory. This policy covers the website, iOS app, and support communications. Doctosan is an informational directory of healthcare professionals and facilities; it does not provide medical care or store medical records.

Information we process

• Public professional listing data, such as name, address, phone, website, specialty, hours, coordinates, and ratings or counts published by the source.
• Standard technical data needed to deliver and protect the service, such as IP address, device or browser type, requested URL, time, and security logs.
• Usage data collected through analytics, such as pages visited, referrer, session, interactions, device, browser, and approximate location derived from the IP address.
• Your email address and the content you choose to send when you ask for support or a listing correction.
• If you create an account, your email, international phone number, first and last name, selected role (patient or medical professional), protected authentication credential, and session-security data.

You can browse the directory without an account. Doctosan does not process payments or bookings, request precise location, or ask you to enter health information.

Website, maps, and device features

The app displays Doctosan in a web view that may keep website cache and local data on your device. When you view a map, Amazon Location Service receives the technical request needed to display it. If you open phone, WhatsApp, Google Maps, or an external website, the chosen third party’s privacy terms apply.

The current directory does not activate camera, file picker, Bluetooth, or notifications, and the app does not request those permissions automatically. The iOS shell can obtain an Apple Ads attribution token and make it available inside the web view, but Doctosan does not send or use it without an active campaign. Google Analytics and PostHog load through Google Tag Manager to measure use of the directory. PostHog also creates session replays; values entered in non-password fields may be included in those replays, while passwords are masked before they are sent.

Cookies and local storage

Doctosan loads Google Tag Manager, Google Analytics, and PostHog when you use the website. These services may set first-party cookies and process the usage data described above. Your browser or the app may also retain technically necessary cache and local storage to load pages, remember display preferences, and keep the tokens for a signed-in session.

Purposes, providers, and retention

We use information to display and maintain the directory, answer requests, create and authenticate accounts, apply the selected role, correct data, prevent abuse, secure the service, meet legal obligations, understand use of the directory, and improve it. Hosting, authentication, network, and security providers may process data for us. Google processes analytics data under its privacy policy, and PostHog processes it under its privacy policy. We do not sell personal information for advertising.

We retain correspondence and technical logs only as long as reasonably needed for those purposes, incident resolution, and legal compliance. Providers may process information in other countries under applicable safeguards. We use reasonable security measures, but no online service can guarantee absolute security.

Your rights

Depending on where you live, you may request access, correction, deletion, restriction, objection, or portability and complain to your data-protection authority. Email info@doctosan.com. We may verify your identity or authority before acting.

If you have an account, you can delete it yourself at any time from the Account page. This permanently deletes your account data, including your profile, photo, and login credential. An encrypted recovery copy of the deleted records is kept for 14 days and then erased automatically. Public directory listings are not part of your account.

Children, changes, and contact

Doctosan is not directed to children submitting personal information. We may update this policy and will publish the current version and its effective date here. The operator is Doctosan, 30 N Gould St, Ste N, Sheridan, Wyoming 82801, United States. For privacy questions, email info@doctosan.com.