DPDP Act 2023 Aligned · Last updated May 27, 2026
BookLine Life ("BookLine", "we", "us") operates as a Data Fiduciary under the Digital Personal Data Protection Act (DPDP Act) 2023 of India for the booking, appointment, and payment data processed through the BookLine platform. For data that clinics independently collect outside of BookLine (such as medical records or in-person registration logs), the clinic acts as the Data Fiduciary and BookLine has no role.
We are committed to handling your data lawfully, transparently, and only for the purposes described in this policy.
We built BookLine for patients and clinics in tier-2 India who deserve a booking system that respects them — including their data. These commitments are explicit, and we mean them:
Personal data is shared only with the infrastructure providers needed to operate BookLine:
Each provider operates under its own privacy policy. We do not sell personal data to any third party.
By messaging the BookLine WhatsApp number, completing a booking through the platform, or by allowing a clinic to add you as a Walk-in, you provide consent for BookLine to process the data described in Section 2 for the purposes of facilitating your appointment, processing payments and refunds, and complying with applicable Indian law.
You may withdraw consent at any time by writing to our Grievance Officer (Section 11). Withdrawing consent will end your ability to book through BookLine but does not affect data we are legally required to retain (such as financial transaction logs — see Section 8).
Operational data is stored in Supabase's ap-south-1 (Mumbai) region. We use database-level Row Level Security (RLS) so that no clinic can read another clinic's patient data, and access tokens are stored encrypted at rest. All web and API traffic is encrypted in transit using TLS.
Note on WhatsApp encryption: messages between BookLine and Meta's WhatsApp Cloud API are transmitted over TLS. They are not end-to-end encrypted in the way personal WhatsApp messages are — Meta processes template content server-side as part of message delivery. Your use of BookLine on WhatsApp is also subject to Meta's privacy practices.
Under the DPDP Act, you have the right to:
We will respond to access, correction, and erasure requests within 14 business days, except where the law requires us to retain certain records (see Section 8).
BookLine is intended for use by adults aged 18 years and above. If an appointment is being booked for a child, the parent or legal guardian booking on the child's behalf is responsible for providing consent and must use their own WhatsApp number. We do not knowingly process personal data of children without verifiable parental consent. If we become aware that we have collected such data, we will delete it.
Booking and operational data is retained while the clinic account is active and for up to 12 months after the account is closed. Financial transaction logs (payments, refunds, settlements) are retained for 7 years to comply with statutory Indian audit requirements (Companies Act, Income Tax Act, Information Technology Act).
In the event of a personal data breach that is likely to cause harm to affected individuals, we will notify the Data Protection Board of India and the affected Data Principals as soon as reasonably possible, and in any case within the timeline required by the DPDP Act and accompanying rules.
BookLine's primary operational data is stored in India. However, certain third-party providers we rely on (such as Meta for WhatsApp delivery) may process data on servers located outside India. Where this is the case, those providers operate under their own data protection commitments. By using BookLine, you acknowledge that such cross-border processing may occur as part of normal service operation.
As required by the Information Technology Rules, 2021 and the DPDP Act, our Grievance Officer can be reached at:
Sayed Arbaz
Grievance Officer, BookLine Life
Email: booklinesupport@gmail.com
Address: Kharagpur, West Bengal, India
We aim to acknowledge complaints within 48 hours and resolve them within 15 days.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of BookLine after the change indicates your acceptance of the updated policy.
Privacy Concerns?
Email the Grievance Officer →