Your privacy is part of your care.
What we collect, and the control you keep over your health information.
What this covers
The LankaMed site and, once it opens, the account behind it — written to the Personal Data Protection Act No. 9 of 2022 and the Ministry of Health Telemedicine Guidelines 2024. Where this policy says less than the law requires, the law governs.
What we collect
Name, contact details, date of birth, and the health information you or a doctor add: symptoms, history, prescriptions, notes. Payment records sit with our payment processor, not with us.
Today the site collects nothing — no account, no form, no analytics.
Who can see your record
A doctor sees your history only when you grant access with a one-time code, never a standing permission. Access is logged and visible to you. We do not sell your data or share it with insurers, employers or advertisers.
How long we keep it
Clinical records for as long as Sri Lankan record-keeping requires. Account details until you close your account, unless we're required to keep them longer.
Your rights
Ask for a copy, a correction, a deletion, or withdraw consent — [email protected], answered within the statutory period. Unsatisfied? Complain to the Data Protection Authority of Sri Lanka.
Security
Encrypted in transit and at rest, with access scoped to role. If a breach affects you, we tell you and the regulator within the period the Act requires.