The short version: we collect as little as possible, we run no advertising, we sell nothing about you, and health details you send are treated as confidential.

This policy explains how AskDoc Health (“we”, “us”) handles personal information collected through https://askdoc.life. It is written to satisfy the disclosure requirements of the EU/UK GDPR, the California Consumer Privacy Act as amended by the CPRA, Canada’s PIPEDA, and the platform policies of Google and other search and browser vendors.

1. What we collect, and why

Data	When	Why (legal basis)
Usage data: pages visited, time on each page, the page you arrived on, referrer, approximate location (city and country from your IP), device type	As you browse	To understand what helps readers and improve the site (legitimate interest). Kept as first-party data; no advertising networks are involved.
Name, email, country, age, and the health details you choose to share	When you submit the request form	To answer your request and deliver the service (contract; consent for health data).
Documents you send: lab reports, imaging reports, summaries	Only if you send them	To perform the review you asked for (consent).
Billing details	If you pay an invoice	Handled by the payment provider; we see confirmation, not card numbers (contract, legal obligation).
Your email, a one-line result summary, and your visit path on this site	Only if you ask a tool to email you your results	To send the results and the monthly briefing you opted into, and to understand what led up to it (consent). Unsubscribe any time.
Aggregate, cookie-free page counts	Always	To see which guides help people (legitimate interest). No individual profiles.

2. Cookies and local storage

This site sets no advertising or cross-site tracking cookies, and no third-party analytics scripts run here. We use browser local storage for two things: a first-party visitor identifier with your page history on this site, used only for the usage statistics described above, and any readings you save in the trackers, which stay on your device. Tool answers are not sent to us unless you choose to email yourself your results.

Full detail on browser storage is in the cookie policy.

3. Health information

Health details you send are special-category data under GDPR and sensitive personal information under the CPRA. They are used only to answer your request, stored encrypted, never used for marketing, never used to train third-party AI models, and never sold or shared for advertising.

4. Who we share data with

Only the service providers needed to run the site, each seeing only what it needs: hosting (Vercel), email delivery, and payment processing. Each is bound by its own data processing agreement. We do not sell personal information, and we do not “share” it for cross-context behavioral advertising as the CPRA defines that term. We disclose data if a law with valid jurisdiction requires it, and we will tell you unless the law forbids it.

5. How long we keep it

Consultation records and documents are kept for as long as professional record-keeping standards require, then deleted securely. Requests that do not become a session are deleted within 12 months. You may ask for earlier deletion at any time.

6. Your rights

Wherever you live, you can email [email protected] to:

Get a copy of what we hold about you (access, portability)
Correct it (rectification)
Delete it (erasure, “right to be forgotten”)
Restrict or object to processing
Withdraw consent at any time, without affecting past processing

We respond within 30 days. We never discriminate against you for exercising a privacy right. California residents: the rights above cover CCPA/CPRA access, deletion, correction and opt-out requests; we do not sell or share personal information, so there is nothing to opt out of. EU/UK residents: you may also complain to your data protection authority. Canadian residents: the same rights apply under PIPEDA, and you may contact the Office of the Privacy Commissioner of Canada.

7. International transfers

The site is hosted on global infrastructure and your data may be processed outside your country. Where GDPR applies, transfers rely on standard contractual clauses through our providers.

8. Security

HTTPS everywhere, encrypted storage for documents, access limited to Dr. Jannat Ilyas and the minimum necessary systems. If a breach ever affects your data, we will notify you directly and promptly.

9. Children

This site is for adults. We do not knowingly collect information from anyone under 16, and the service is not offered to children. If you believe a child has sent us data, email us and we will delete it.

10. Changes

The date at the top shows the last revision. Material changes are announced on the site, not made silently.

11. Contact

AskDoc Health · [email protected]

Privacy Policy