Privacy Policy — mis.doctor.nola
Features Medical record App Security Pricing Русская версия
Request a demo

Privacy Policy

Effective date: January 1, 2026  ·  doctor.nola MIS


1. General Provisions

This Privacy Policy governs the procedure for processing the personal data of users of the doctor.nola medical information system (hereinafter referred to as the "System"), operated within the territory of the Republic of Kazakhstan.

By using the System, you confirm your consent to the terms of this Policy. Data processing is carried out in accordance with the Law of the Republic of Kazakhstan "On Personal Data and Its Protection" No. 94-V dated May 21, 2013.


2. What Data We Collect

In the course of its operation, the System processes the following categories of data:

  • Patient identification data: full name, date of birth, IIN (Individual Identification Number)
  • Contact information: phone number, email address
  • Medical information: diagnoses, prescriptions, examination results
  • Authorization data: login, password hash, sign-in log
  • Technical data: IP address, device type, browser

3. How We Use Data

The collected data is used solely for the following purposes:

  • Maintaining electronic medical records and treatment history
  • Scheduling appointments with physicians and managing schedules
  • Issuing invoices and generating financial reporting
  • Ensuring secure staff access to the System
  • Improving the functionality of the System and fixing errors

We do not transfer personal data to third parties for commercial purposes and do not use it for targeted advertising.


4. Storage and Protection

Data is stored on secure servers located within the territory of the Republic of Kazakhstan. The following protective measures are applied:

  • Encryption of data in transit (TLS 1.3) and at rest (AES-256)
  • Role-based access control (RBAC)
  • Daily backups retained for 90 days
  • Logging of all operations involving personal data

The retention period for medical data is no less than 25 years in accordance with the requirements of the legislation of the Republic of Kazakhstan.


5. Contacts

For questions regarding the processing of personal data, as well as to exercise the rights of the data subject (access, rectification, deletion), please contact us:

We review inquiries within 10 business days of receipt.

WhatsApp