Privacy Policy

1 Who we are and the scope of this policy

Book Your Token, also referred to as BYT, is an outpatient appointment management platform owned and operated by Danavrithi Enterprises (OPC) Private Limited. In this policy, “BYT”, “we”, “us” and “our” refer to Danavrithi Enterprises (OPC) Private Limited.

This policy applies when patients, parents or guardians, doctors, clinic or hospital staff, and other visitors use BYT’s website, appointment booking, payment, token management, live tracking, feedback, contact and communication features.

BYT provides the technology used to manage appointments and token queues. Doctors, clinics and hospitals remain responsible for the medical care they provide and for clinical records they create or maintain independently of BYT.

2 Information we collect

The information collected depends on the feature you use. Not every item listed below is collected from every person.

• Booking and token information may include the patient’s name, phone number, age, gender, region, patient type, preferred language, selected doctor or facility, appointment date, consultation session, selected reporting window, reserved token number and queue status.
• Payment information may include the amount, currency, selected payment gateway, gateway order or payment reference, payment status and information required to reconcile a transaction.
• Clinic operations may produce arrival and consultation timestamps, queue changes, short staff notes, follow-up dates, short follow-up notes and notification-delivery information.
• Feedback submissions may include your name, phone number, rating, questionnaire selections, written feedback and your optional choice about public display.
• Contact inquiries include the name, phone number and message submitted through the Contact Us form.
• Doctor and staff information may include account identifiers, role and facility associations, doctor profile information and records needed to operate the platform.
• Technical and security information may include session identifiers, language preference, request and diagnostic metadata, provider webhook information, security events and records required to investigate failures or misuse.

3 How we use information

We process personal data for lawful purposes connected with providing and protecting the BYT service, including:

• Creating, confirming and managing same-day and advance appointment bookings.
• Assigning reserved token numbers, activating eligible advance bookings, managing clinic queues and providing live token tracking.
• Creating payment orders, confirming payment outcomes, preventing duplicate processing and reconciling incomplete or disputed transactions.
• Sending booking confirmations, tracking links, clinic updates, follow-up notifications and other service-related communications.
• Responding to contact inquiries, feedback, complaints, correction requests and support issues.
• Understanding service performance and improving BYT through feedback and aggregated usage information.
• Detecting failures, misuse, duplicate activity and security incidents, and complying with legal, accounting and regulatory obligations.

BYT does not sell personal data or use patient booking information for targeted advertising.

4 When information is shared

We share information only where it is reasonably necessary to operate the service, complete a request, protect the platform or comply with law.

Doctors, clinics and hospitals

Booking, patient contact, appointment, token and relevant queue information is made available to the doctor, clinic or hospital selected for the appointment and to authorised staff managing that queue.

Payment providers

Razorpay or Cashfree processes the booking-fee payment selected by you. BYT receives transaction references and payment status information, but does not collect or store your UPI PIN, complete card number, CVV or online-banking password. Payment providers process payment information under their own privacy and security terms.

WhatsApp and Meta

Where WhatsApp notifications are used, Meta and its service infrastructure receive the destination phone number, message or template content, language and the booking, doctor, token, appointment, tracking or follow-up values required to deliver that message. Provider-side delivery and message records are governed by the provider’s terms.

A scheduled follow-up may generate a notification when the follow-up is created and another notification on the scheduled follow-up date. Clinic operational broadcasts may also be sent to affected patients.

Technology and communication providers

We use service providers for functions such as cloud hosting, databases, diagnostics, translation, email and message delivery. These providers may process only the information needed to perform the relevant service, subject to their terms and applicable law.

Legal and protective disclosures

We may preserve or disclose information where reasonably necessary to comply with law, respond to a valid authority request, establish or defend legal claims, investigate fraud or a security incident, or protect patients, clinics, BYT or others.

5 Feedback and public reviews

• A valid star rating contributes anonymously to BYT’s public overall rating.
• Your submitted name and BYT-related written feedback may be considered for manual public publication only when you give the optional public-display permission.
• Your phone number and questionnaire selections are kept private and are not included in a public written review.
• Public feedback is manually reviewed. Feedback containing medical information, patient-sensitive information or commentary about a doctor, clinic or hospital may be excluded from publication.
• You may withdraw public-display permission through the Contact Us page. We aim to remove the identified public name and written review within 15 days after verifying the request.

Withdrawal of public-display permission does not require removal of an anonymous rating already included in aggregated statistics, where that rating can no longer reasonably identify you.

6 Cookies and data security

Cookies and session information

BYT uses session information required to operate website features and a language cookie to remember whether English or Tamil was selected. A normal application session is configured for approximately one day, and the language preference cookie is configured for up to 30 days.

Security safeguards

We use reasonable technical and organisational safeguards intended to protect personal data against unauthorised access, alteration, disclosure, loss and misuse. Access is limited according to operational roles, and records may be reviewed to detect failures or security incidents.

No website, network or storage system can be guaranteed to be completely secure. If you believe your information or a BYT link has been misused, please contact us promptly.

7 How long information is retained

BYT applies periodic retention reviews. Expiry does not necessarily occur automatically on the exact final day. Information may be deleted, de-identified or retained for a longer period where payment reconciliation, an unresolved operational incident, a complaint, a dispute, a security investigation, backup processing, accounting requirements or another legal obligation requires it.

8 Bookings for children

BYT may be used to book paediatric appointments. Where the patient is a child, the booking must be made or authorised by the child’s parent or lawful guardian, using contact information controlled by that parent or guardian. Child information must be limited to what is reasonably necessary for the booking and clinic operation.

If you believe information about a child was submitted without appropriate authority, please contact us so the matter can be reviewed.

9 Your choices and rights

Subject to applicable law and verification of your request, you may ask BYT to:

• Provide information about the personal data BYT processes about you.
• Correct, complete or update inaccurate personal data.
• Erase personal data that is no longer required, unless continued retention is necessary for the service, payment reconciliation, a legal obligation or another permitted purpose.
• Withdraw consent for an optional use, including public display of your name and written feedback.
• Raise a privacy complaint or grievance and receive information about available escalation options.

We may request information reasonably necessary to confirm your identity and locate the relevant record. A request cannot be fulfilled where doing so would disclose another person’s information or conflict with a legal obligation.

10 Service-provider locations

BYT uses technology and communication providers that may process information in India or in other permitted locations. Where a provider processes information outside India, the processing remains subject to applicable legal restrictions and the provider’s contractual and security arrangements.

11 Changes to this policy

We may update this policy when BYT’s features, service providers, data practices or legal obligations change. The revised policy will be published on this page with an updated date. Material changes may also be communicated through another appropriate channel.