1. Introduction
Kroupet ("we," "us," "our") operates a telemedicine platform that connects patients with certified healthcare professionals in Cambodia (the "Service"). We are committed to protecting the privacy and confidentiality of all personal and medical information collected through our platform.
By accessing or using Kroupet, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.
2. Information We Collect
2.1 Patient Data
- Identity Data: Full name, date of birth, gender, nationality, email address, and phone number
- Medical Data: Health history, symptoms, diagnoses, medications, allergies, medical conditions, vital signs, consultation notes, prescriptions, and medical documents
- Family Member Data: Identity and medical information of beneficiaries added to your account
- Payment Data: Billing information processed securely through third-party providers
2.2 Doctor Data
- Identity Data: Full name, email, phone number, and photo
- Professional Data: Medical license number, specialization, years of experience, credentials, and affiliated establishment
- Practice Data: Availability schedules, consultation fees, payment details, digital signature, and stamp
2.3 Technical Data Collected Automatically
- IP address, browser type, and device information
- Pages visited, features used, and session duration
- Session tokens and authentication cookies
3. How We Use Your Information
- Providing and operating the telemedicine platform
- Facilitating consultations between patients and doctors
- Generating medical documents, prescriptions, and invoices
- Processing payments and managing billing records
- Sending appointment confirmations, reminders, and notifications
- Maintaining and improving the quality of the Service
- Ensuring platform security and preventing fraud
- Responding to support requests and user inquiries
- Complying with applicable laws and regulations
4. Special Note on Medical Data
Medical data is among the most sensitive categories of personal information. We treat it with the highest level of confidentiality:
- Medical information is only accessible to the patient and the doctor involved in the consultation
- Doctors are bound by professional medical confidentiality obligations
- Medical data is never sold or shared with third parties for marketing purposes
- Access to medical records is strictly controlled and logged
- Patients can request access to or deletion of their medical data at any time
5. How We Share Your Information
We do not sell your personal or medical data. We only share information in the following limited circumstances:
5.1 With Your Healthcare Provider
Your medical and identity information is shared with the doctor you consult, strictly to provide the healthcare service you requested.
5.2 With Service Providers
We share limited data with trusted third-party providers who help us operate the platform, including cloud hosting, payment processors, and video infrastructure. These providers are contractually bound to protect your data.
5.3 Legal Obligations
We may disclose information when required by Cambodian law, court order, or legitimate government request.
6. Data Security
- SSL/TLS encryption for all data transmitted over the network
- Encrypted storage of sensitive data at rest
- Strict access controls and role-based permissions
- Secure video consultation infrastructure
- Regular security reviews and monitoring
No system is completely immune to security risks. While we make every effort to protect your data, we cannot guarantee absolute security.
7. Your Rights
- Right to Access: Request a copy of the personal and medical data we hold about you
- Right to Correction: Request correction of inaccurate or incomplete information
- Right to Deletion: Request deletion of your data, subject to ongoing care requirements and legal obligations
- Right to Opt-Out: Unsubscribe from non-essential communications at any time
To exercise any of these rights, contact us at contact@kroupet.com
8. Cookies & Tracking Technologies
We use the following types of cookies:
- Essential Cookies: Required for authentication and platform functionality. Cannot be disabled.
- Analytics Cookies: Help us understand how users interact with the platform so we can improve it.
- Marketing Cookies: Used to personalize content and measure campaign effectiveness.
You can manage your cookie preferences at any time through the Cookie Settings banner displayed on the platform.
9. Children's Privacy
Kroupet is not intended for direct use by children under 13. Minors may be added as beneficiaries to an adult's account, under the responsibility of their parent or legal guardian.
10. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or for legal reasons. We will notify users of significant changes via email or in-platform notification.