
Notice and purpose
Before you share anything, SynQ tells you what is collected and why. Your dental concern, contact details, documents and booking history are used to help you understand your next step, to pass a request to a clinic you choose, and to keep your records together. Nothing is used for a new purpose without a fresh notice.
Consent you can see and withdraw
- Each consent is stored separately with its purpose, the policy version and the date and time it was given.
- Sharing with a clinic happens only when you send a request or share a document — never automatically.
- You can withdraw a consent from Privacy in the patient portal, and withdrawal is recorded the same way it was given.
- A withdrawn document link stops working immediately for the clinic it was shared with.
Your rights as a data principal
- Access: ask for a copy of what SynQ holds about you.
- Correction: ask for anything inaccurate or incomplete to be corrected.
- Erasure: ask for deletion of what is not held under a legal duty.
- Nomination: add a family member who may act for you.
- Grievance redressal: raise a complaint and follow its state and due date.
Each request is raised in Privacy → Data requests, carries a due date, and shows its state until it is completed. Nothing is silently refused.
Children and guardianship
Care for anyone under 18 is routed through a verified guardian. A child account cannot book, share documents or accept a treatment step on its own, and the guardian relationship is recorded with the booking.
Retention and deletion
Health records are kept for the period Indian law requires of the treating clinic. When you ask for deletion, SynQ removes everything it is allowed to remove and tells you plainly what must be kept and until when.
Security and breach duties
Access is limited by role and by clinic, privileged actions are written to an audit trail that cannot be edited, and documents are private, screened and opened through short-lived links. If a personal data breach occurs, SynQ notifies affected users and the Data Protection Board as the Act requires.
Grievance officer
A grievance can be raised from Privacy → Complaints in the patient portal, or from Help and support. Every complaint is given a case reference and a due date, and its progress is visible to you.
What we do not claim
This page describes controls built into SynQ. It is not legal advice, and it is not a determination by a regulator or a lawyer. Where a duty depends on a legal opinion or a government notification, SynQ waits for that input rather than claiming it.