Privacy Policy
Last updated: 2026-03-31
Doc On Call Consultas ao Domicilio ("Doc On Call", "we", "us"), operated by Affordable Sphere, Lda., Tax ID 515321460, with registered address at Rua José Lamas, 3, 8800-467 Tavira, Faro, Portugal, operates the Project Caduceus platform, which connects patients with doctors for home and video consultations.
This privacy policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).
1. Data Controller
Doc On Call is the data controller responsible for your personal data.
For any questions regarding data processing, you can contact us at:
2. Information We Collect
We collect only the minimum data necessary to provide our consultation service:
- Name — to identify you to the assigned doctor
- Phone number — for doctor contact
- Symptoms (free text description) — health data necessary for medical assessment
- Location (address/hotel) — for home consultations only
- Email address — for receipt delivery
We do not require account creation, passwords, or additional data.
3. Legal Basis for Processing
The processing of your personal data is based on:
- Article 6(1)(b) GDPR — performance of a contract for providing the medical consultation service
- Article 9(2)(a) GDPR — explicit consent for processing health data
Consent is obtained through three checkboxes before form submission:
- Consent to health data processing
- Acceptance of this privacy policy
- Consent to share data with the assigned doctor
You may withdraw your consent at any time via maria@mydoconcall.com. Withdrawal does not affect processing previously carried out.
4. How We Use Your Data
Your data is used solely for:
- Matching you with an available doctor
- Sending consultation details to the assigned doctor
- Enabling contact between doctor and patient
- Processing payments
- Providing video consultations
- Sending receipts (when applicable)
5. Data Sharing
Your personal data is shared only with:
- Assigned doctor — receives name, phone, symptoms, and location. Doctors are bound by professional confidentiality
- Stripe — for payment processing. Card data is never stored by us
- Daily.co — video call infrastructure (for video consultations only)
- WhatsApp (Meta Platforms, Inc.) — used for system-doctor communication, with end-to-end encryption
We do not sell or share data with other third parties.
6. International Data Transfers
Some of our service providers, such as Stripe, Daily.co, and Meta (WhatsApp), may process data outside the European Economic Area.
In such cases, we ensure that adequate protection mechanisms are in place, such as Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of data protection.
7. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
- Encryption in transit (TLS 1.2+)
- Encryption at rest
- Restricted access controls
8. Data Retention
Your personal data is retained for a maximum period of 12 months.
After this period, data is irreversibly anonymised, retaining only non-identifiable statistical data.
9. Your Rights
Under the GDPR, you have the right to:
- Access your data
- Correct inaccurate data
- Request data deletion
- Restrict processing
- Receive your data (portability)
- Object to processing
To exercise these rights, contact: maria@mydoconcall.com
You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).
We will respond within a maximum of 30 days.
10. Video Consultations
Video consultations are conducted via Daily.co using WebRTC technology.
Communications are encrypted and are not recorded or stored, either by us or by the provider.
11. Data Protection Officer
A Data Protection Officer (DPO) has not been appointed, as it is not required under the GDPR.
12. Changes to This Policy
We may update this policy from time to time. Relevant changes will be reflected in the "Last updated" date.
13. Contact
For any questions related to this policy or your personal data: