Privacy Policy

DokLink is a platform that lets licensed physicians refer patients to one another and issue validated e-prescriptions. For the clinical records a doctor or pharmacy creates using DokLink, that doctor or pharmacy is the data controller; DokLink acts as their processor and, for cross-network coordination, as a controller of the minimal records described below.

Data minimization is enforced in the database itself. For a referral or prescription, DokLink stores the patient’s first name only together with the chief complaint or prescription details — there is no surname column anywhere in the schema. The application also nudges clinicians away from entering full names at the point of input.

• Physician account data: name, professional contact details, and PRC license information used to verify that you are a licensed practitioner.
• Clinical referral / prescription data: patient first name, chief complaint, referral note (max 500 characters), and the receiving specialist.
• Operational logs: sign-in events and profile changes are recorded in an append-only audit log for security and accountability.

We use strictly-necessary cookies to keep you signed in. These are exempt from the consent requirement because the service cannot function without them.

With your consent, we also use analytics cookies to understand and improve how DokLink is used. You can decline analytics from the cookie banner without affecting any core feature, and you can change your mind at any time by clearing the stored choice in your browser. We do not load analytics until you have consented.

We process personal data to operate the referral and e-prescription features you request, to verify physician licensure, to secure the platform, and — only with consent — to measure and improve the service. We do not sell personal data, and we do not share patient data for advertising.

DokLink hosts its data in the AWS Asia Pacific (Singapore, ap-southeast-1) region. Access is restricted and protected by role-based controls and row-level security so that each practitioner and pharmacy can reach only their own records.

Clinical records are retained in line with Department of Health record-keeping requirements (at least five years). Convenience data has short windows: in-app notifications and completed routing payloads are purged after 90 days, and free-tier bookings after two years. The full per-data-class schedule is published in our compliance documentation.

Where you exercise your right to erasure, DokLink anonymizes your account information (email, phone, name, photo) immediately while retaining the minimum clinical record the law requires the doctor to keep. Pre-delivery, you can also withdraw a routed prescription entirely from your prescriptions page.

As a data subject you have the right to be informed, to access, to object, to rectify, to erasure or blocking, to data portability, to damages, and to lodge a complaint with the National Privacy Commission. To exercise any of these rights, contact us using the details below.

Questions about this policy or your data — including exercising any of the rights above — can be directed to DokLink’s Data Protection Officer (designated per NPC Advisory 2017-01):