Privacy Policy

We collect information in the following ways:

• Information you provide directly, such as your name, organization, email address, and phone number when you book a demo, submit a contact form, or create an account
• Account and billing information when you subscribe to the Service
• Usage data, such as pages visited and features used, collected automatically to help us maintain and improve the Service
• Support communications, including messages sent to our support channels

When a clinic or hospital uses Medoc HMS, it enters patient and clinical data (such as demographics, consultation notes, prescriptions, billing records, and lab results) into the platform. This data belongs to and is controlled by the clinic or hospital using the Service. Globify processes this data solely as instructed by that customer, to provide and support the Service, and does not use it for any independent marketing or advertising purpose.

If you are a patient of a clinic that uses Medoc HMS and have questions about how your personal health information is used, please contact that clinic directly. Globify does not have a direct relationship with, and cannot independently respond to requests from, individual patients of our customers.

We use the information described above to:

• Provide, operate, and maintain the Service
• Respond to demo requests, support tickets, and other inquiries
• Send administrative communications, such as billing notices and service updates
• Improve the Service and develop new features
• Detect, prevent, and address technical issues, fraud, or misuse
• Comply with legal obligations

Medoc HMS is HIPAA Compliant and GDPR-Ready, and supports ABDM (Ayushman Bharat Digital Mission) integration for customers in India. Globify Software Solutions is certified to ISO/IEC 27001:2022 for information security management.

In India, the processing of personal data is governed by the Digital Personal Data Protection Act, 2023 ("DPDP Act"). Medoc HMS supports the operational controls relevant to DPDP obligations, including role-based access control, audit logging, and configurable data-residency options, so that customers can meet their own obligations as data fiduciaries under the Act. Compliance with the DPDP Act, and with any equivalent law in other jurisdictions we serve, is a shared responsibility between Globify and the clinic or hospital using the Service; we support it, we do not assume it on a customer's behalf.

We do not sell personal data. We share information only in the following circumstances:

• With service providers who help us operate the Service (such as cloud hosting and payment processing providers), under confidentiality obligations
• When required by law, regulation, legal process, or a valid governmental request
• To protect the rights, property, or safety of Globify, our customers, or others
• In connection with a merger, acquisition, or sale of assets, with notice to affected customers where required

We use administrative, technical, and physical safeguards designed to protect personal data, including encryption in transit and at rest, role-based access controls, and audit trails. Globify Software Solutions is certified to ISO/IEC 27001:2022, an international standard for information security management, covering the scope of its software development operations.

No method of transmission or storage is completely secure. While we work to protect personal data, we cannot guarantee its absolute security.

We retain personal data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When a customer subscription ends, Customer Data is made available for export for a reasonable period, after which it is deleted or anonymized in accordance with our data retention practices, except where longer retention is required by law.

Depending on your location and applicable law, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details in Section 12. We will respond in accordance with applicable law.

If you are a patient whose data is held by a clinic using Medoc HMS, please direct your request to that clinic, as described in Section 2.

Our website may use cookies and similar technologies for essential site functionality and, where enabled, analytics to help us understand how the site is used. Analytics tracking, where used, does not run unless explicitly configured, and does not collect patient or clinical data. You can control cookies through your browser settings.

Our website and Service are intended for use by healthcare professionals and business users, not by children. We do not knowingly collect personal data directly from children through our website. Patient records entered into Medoc HMS by a clinic, including those of minor patients, are governed by Section 2 above and remain the responsibility of that clinic.

Globify is headquartered in India and serves customers across India, the UAE, Saudi Arabia, and Africa. Personal data may be processed in India or in the country where a customer's deployment is hosted. Where data is transferred across borders, we take steps designed to ensure it receives an adequate level of protection consistent with applicable law.

For questions about this Privacy Policy, to exercise your data rights, or to raise a grievance regarding the handling of personal data, contact us at support@medochms.com, or by post to Globify Software Solutions Pvt. Ltd., Technopark, Thiruvananthapuram, Kerala, 695581, India. We aim to acknowledge and address grievances within the timeframes required by applicable law.

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "last updated" date on this page, and where appropriate, communicated directly to customers.