Last updated: 5 November 2026
1. Who we are
This website supports the medical practice of Dr. Shahed Ahmad, Medicine Specialist and Consultant, Medicine, in Sylhet, Bangladesh. For privacy questions or requests, contact doc.s.s.ahmad@gmail.com. The practice contact address is Samato-30, Chali Bandar, Bishwa Road, Subhani Ghat, Sylhet, Bangladesh.
This Privacy Policy explains how personal data is collected, used, disclosed, retained, and protected when you browse this website, create an account, request an appointment, or send a message. It is intended to be read with the Personal Data Protection Act, 2026 and other applicable laws of Bangladesh.
2. Personal data we collect
- Account data: your name, email address, password hash, account status, and sign-in or password-reset information.
- Appointment data: patient name, email address, age, gender, whether the patient has visited before, selected chamber, requested date and time, reason for visit, optional note, appointment reference, and appointment status history.
- Contact data: your name, email address, subject, message, and the date and status of the message.
- Technical and security data: session identifiers, IP address, browser or device information, access time, requested pages, authentication activity, and administrator audit records.
- Information you choose to provide: any other information included in an appointment note, contact message, or communication with the practice.
Please do not submit detailed medical histories, test results, national identification numbers, financial details, or emergency information through the website forms. Appointment reasons and notes may reveal health information, so provide only what is necessary to arrange the visit.
3. How we collect data
We collect data directly from you when you submit a form, register or sign in, request an appointment, cancel an appointment, or contact the practice. We also collect limited technical data automatically through essential session and security functions. If a parent or legal guardian submits information for a child or a person unable to consent, the submitter confirms that they have authority to do so.
4. Why we use personal data
- To create and manage accounts and authenticate users.
- To receive, schedule, confirm, change, or cancel appointment requests.
- To respond to contact messages and service enquiries.
- To administer the website, prevent abuse, investigate security events, and maintain audit records.
- To comply with legal, regulatory, professional, and record-keeping duties.
- To establish, exercise, or defend legal claims and protect patients, users, the doctor, and the public.
Where applicable, processing is based on your consent, steps you ask us to take, the responsibilities of a health professional, website security needs, or a legal obligation. Sensitive personal data is handled only when necessary and with an applicable lawful basis. The website does not use personal data for automated medical decisions, behavioural advertising, or the sale of personal data.
5. Appointment requests and medical records
An online appointment request is an administrative record and is not a complete medical record. Information created during an in-person consultation may be maintained separately by Dr. Shahed Ahmad or the relevant hospital or chamber under its own clinical and legal procedures. Al Haramain Hospital, Sylhet and Sylhet Women's Medical College Hospital may act independently for information they collect directly from patients.
6. When we share data
Personal data may be shared only as reasonably necessary with:
- Dr. Shahed Ahmad and authorised practice administrators.
- The selected chamber or hospital for scheduling and providing the requested consultation.
- Hosting, database, email, security, backup, and technical service providers acting under appropriate confidentiality and data-protection obligations.
- Government authorities, regulators, courts, law-enforcement bodies, or professional advisers when disclosure is required or permitted by law.
- A successor responsible for the practice or website, subject to appropriate confidentiality and legal safeguards.
We do not sell or rent personal data. If a service provider processes data outside Bangladesh, we will use applicable consent, contractual, technical, and legal safeguards required for the transfer.
7. Cookies and third-party content
The website uses essential cookies or similar storage to keep sessions secure, remember sign-in choices, prevent request forgery, and support appointment booking. These functions are necessary for the website to operate. The website does not currently use advertising cookies.
Health-video pages may embed YouTube content using the privacy-enhanced youtube-nocookie.com domain. YouTube may still receive technical data or set storage when you load or interact with an embedded video. YouTube and other linked websites apply their own privacy policies, which we do not control.
8. Retention
We retain account, appointment, message, security, and audit data only for as long as reasonably necessary for the purposes described in this policy and for any additional period required by law, professional duties, dispute resolution, fraud prevention, or backup integrity. Retention needs are reviewed periodically. Data that is no longer required will be deleted, anonymised, or securely isolated, subject to technical and legal limits.
9. Security
We use reasonable technical and organisational safeguards designed to protect personal data, including access controls, password hashing, encrypted session storage, request-forgery protection, login throttling, audit logging, and restricted administrator access. No internet service is completely secure, so absolute security cannot be guaranteed. If a personal-data breach occurs, we will investigate and take the notification and remedial steps required by applicable law.
10. Your rights
Subject to applicable law and any lawful exceptions, you may ask to:
- Access and receive a copy or summary of personal data held about you.
- Correct, complete, or update inaccurate personal data.
- Withdraw consent or object to particular processing.
- Delete personal data that is no longer required or is processed unlawfully.
- Receive information about the purpose, recipients, source, retention, and any cross-border transfer of your data.
- Raise a concern with us or submit a complaint to the competent data-protection authority.
Send a written request to doc.s.s.ahmad@gmail.com. We may need to verify your identity and authority before acting on a request. Some data may be retained where the law, patient safety, professional duties, or legal claims require it.
11. Children
This website is not intended for a child to create an account or submit sensitive information without the involvement of a parent or legal guardian. A person submitting information for someone under 18 must be the parent or legal guardian, or must have appropriate authority and consent.
12. Changes to this policy
We may update this policy when the website, practice, service providers, or legal requirements change. The revised version will be posted here with a new last-updated date. Material changes may also be communicated through the website or by email where appropriate.
13. Contact
Privacy requests and questions: doc.s.s.ahmad@gmail.com
Practice address: Samato-30, Chali Bandar, Bishwa Road, Subhani Ghat, Sylhet, Bangladesh