Your health information deserves careful handling.
This policy explains what Cancer Talk collects, why we collect it, and how we protect information used for accounts, appointments, reminders and patient-doctor communication.
1. Who we are
Cancer Talk is operated for Dr. Sidath Wijesekera's public education and appointment services. We collect only the information needed to operate the website, support patients and manage consultations.
2. Information you provide
When you register or book, we may collect your name, email, phone number, password, appointment notes, selected doctor, appointment type, clinic location, fee, payment method and cancellation reason. If you use patient-doctor chat, your messages and any files you choose to send are stored so the consultation can be prepared properly.
3. OTP, SMS and email notifications
Your phone number is used for OTP registration/login and for appointment SMS reminders through our SMS gateway. Your email address is used for booking receipts, pending/confirmed/cancelled appointment notices and 30-minute reminders through SMTP email delivery.
4. How we use information
- To create and secure your patient account.
- To show available doctors, locations and time slots.
- To book, confirm, cancel and remind you about appointments.
- To allow doctor-patient chat after confirmation.
- To keep appointment, payment and cancellation records.
- To improve reliability, security and user experience.
5. Sharing with service providers
We do not sell personal data. We share limited information only when needed with service providers such as hosting, email delivery and SMS gateway services. Consultation fees are paid by bank transfer or at the clinic, so no online payment gateway receives your data; bank transfer details you send us (such as a deposit reference) are used only to match and verify your payment. We may also disclose information if required by Sri Lankan law or to protect patients, staff or the platform.
6. Cookies and security
The platform uses essential cookies for login sessions and CSRF protection. Passwords are stored securely using hashing. We use reasonable technical and organisational safeguards, but no internet service can guarantee absolute security.
7. Retention and access requests
We keep information while your account is active and as long as needed for appointment history, medical record, payment, legal or operational purposes. You may request access, correction or deletion by emailing info@cancertalk.lk. Some records may need to be retained where law or medical practice requires it.
8. Children's information
Cancer Talk is not designed for unsupervised use by children. If a minor requires care, a parent or guardian should manage bookings and communication.