Section 01 · Data Architecture
Mandatory Stricture
Core Data Minimization Philosophy
OPD On Desk adheres to the foundational doctrine of data austerity. Outpatient waiting areas are environments of physical discomfort and urgency. We fundamentally reject invasive onboarding practices that demand insurance national identity tokens, comprehensive past medical histories, residential addresses, or biometric validations simply to issue a numbered queue slip.
check_circle
Explicitly Collected
- Patient Full Name (for desk callout)
- Age & Gender (for clinical triaging)
- Mobile Contact (for SMS queue alerts)
- Visit Timestamp & Assigned Token ID
cancel
Strictly Prohibited & Never Stored
- Biometric finger/iris prints
- Financial bank account / card PINs
- National ID documentation copies
- Advertising device ad-IDs & track-cookies
Section 02 · Taxonomy
Audit Reference DPDP-2.1
Scope of Collected Information
To ensure clear auditability under statutory standards, processing operations are segregated into three distinct structural silos:
A. Outpatient Walk-in Metadata
Transient intake data provided by the patient or their escort directly to the receptionist at the physical OPD desk. Includes sequence counter, basic demographic factors strictly necessary for doctor differential judgment, and optional WhatsApp/SMS dispatch payload for remote queue progress tracking.
B. Clinic Staff & Physician Operational Accounts
Authentication records, cryptographic salt hashes, staff device session logs, active cabin designations, and audit stamps showing when tokens were called, shifted, cancelled, or finalized.
C. Clinic Operational Parameters
Consultation room assignments, OPD session shift schedules (Morning/Evening), standard consultation tariff guidelines (for front desk cash/UPI tallying), and printer terminal presets.
Section 03 · Operational Purpose
Queue Choreography
Purpose of Processing & Token Generation
The collection of records within OPD On Desk is constrained by technical necessity for the following non-commercial administrative tasks:
3.1
Chronological Token Allocation: Sequencing patient entries into structured alphabetic or numerical series (e.g., A-01, A-02) to mitigate clinic congestion and eliminate physical queuing confrontation.
3.2
SMS & Instant Dispatch Notice: Transmitting automated status updates to alert the patient when their consultation number is within 3 positions of arrival.
3.3
Front-Desk Session Balancing: Permitting reception administrators to reconcile end-of-shift patient counts and verified consultation fees collected on behalf of the registered doctor.
Section 04 · Absolute Prohibition
Zero-Tolerance
Inviolable Zero-Commercialization Guarantee
Neither OPD On Desk nor Alhat Holdings will ever monetize patient phone numbers or clinical visit records.
We do NOT engage in:
- Sale or lease of patient registries to pharmaceutical marketing representatives.
- Transmission of demographics to diagnostic imaging chains or pathology aggregators.
- Affiliation with targeted digital ad-trackers, social networks, or automated consumer loan brokers.
- Behavioral profiling or credit scoring based on clinical consultation frequency.
Section 05 · Custody Model
Sovereignty
Clinic Data Custodianship & EMR Sovereignty
Under all applicable administrative doctrines, the registered clinic and treating medical practitioner remain the sole legal custodians and controllers of patient visit records. Alhat Holdings functions strictly as a managed technical conduit (Data Processor).
folder_shared
Complete Export Rights
Clinics may execute full CSV/JSON schema dumps of their registered visit log at any time without punitive retention delays.
delete_sweep
Unconditional Purge Mandate
Upon written instruction from a clinic director, all patient logs and prescription cache associated with the instance will be purged from our production databases within 14 business days.
Section 06 · Document Imaging
Encrypted Rest
Prescription Photos & Ephemeral Storage Protocols
In workflows where reception desks utilize photographic capture of paper prescription slips (Rx) or doctor case-sheets, the following technical safeguards apply:
lock
At-Rest Blob Encryption
All uploaded document images are converted to encrypted binary objects using unique clinic key vectors, rendering unauthenticated directory traversal impossible.
timer
Configurable Retention
Clinics can specify automated ephemeral wipe periods (e.g., auto-delete attachments after 7, 30, or 90 days following consultation closeout).
Section 07 · Technical Rigor
Infrastructure
Security Architecture & Encryption Standards
OPD On Desk deploys a defense-in-depth framework adhering to enterprise cybersecurity benchmarks:
vpn_lock
TLS 1.3 Transmission Security: All API communication between mobile browsers, reception desktops, and core databases is conducted over encrypted TLS 1.3 channels with strict HTTP Strict Transport Security (HSTS).
storage
Indian Sovereign Cloud Hosting: Primary data stores and operational backups are housed exclusively within MeitY-empaneled, Tier-IV certified sovereign data facilities within the Republic of India.
badge
Role-Based Access Enforcement: Strict partitioning ensures front-desk receptionist roles cannot inspect diagnostic doctor private notes, and doctors cannot accidentally view financial subscription parameters.
Section 08 · Subject Rights
Data Principal Freedoms
Patient Rights, Erasure & Audit Inquiries
As a data principal, every patient whose queue profile is recorded retains distinct legal protections under the Indian Digital Personal Data Protection Act (DPDP):
-
check
Right to Correction: You may request the reception desk or clinical administrator to immediately update incorrect phone records or typographical errors in your registered name.
-
check
Right of Erasure: You may instruct the treating clinic to delete contact details once your consultation episode is completed, subject only to mandatory medical statutory record-keeping periods mandated by clinical establishment laws.
-
check
Right to Grievance Redressal: In the unlikely event a clinic fails to satisfy an erasure request, the data principal may escalate the inquiry directly to the Alhat Holdings Corporate Grievance Officer.
Section 09 · Corporate Ownership
Alhat Holdings Entity
Alhat Holdings Governance & Corporate Inquiries
OPD On Desk is a proprietary healthcare queue management product engineered, maintained, and operated exclusively by Alhat Holdings. Corporate legal correspondences, institutional licensing requests, compliance verifications, and law enforcement communications should be served directly through our central governance desk:
Corporate Inquiries
Alhat Holdings Legal Directorate
Attn: Privacy & Data Protection Compliance
[email protected]