Privacy Policy

At CDoctorsTeams we process personal data for legitimate purposes, transparently and in accordance with applicable law in each country where we operate (including, as applicable, the GDPR in the European Union, Law 1581/2012 in Colombia, LGPD in Brazil, HIPAA in the United States, and local data protection laws). This Privacy Policy describes how we collect, use, retain, and protect your information. It also incorporates the Telemedicine Policies applicable to remote services.

Controller: the entity operating the CDoctorsTeams Platform (as stated in the Terms and Conditions). To exercise rights or privacy inquiries: support@cdoctorsteams.com.

• Identification and contact data (name, email, phone, country).
• Account and profile data for professionals or users (including supporting documentation where applicable).
• Health and clinical data when you use Platform services (e.g. shared history, results, consultation notes).
• Technical and usage data (IP address, device, cookies, access logs).
• Communication data (messages, video calls or files exchanged through the Platform, depending on features).

We process your data to: provide and improve the Platform; manage registration, appointments, and teleconsultations; verify identities and credentials where necessary; comply with legal obligations; ensure security; communicate with you; and, where consent is required, send relevant service information.

Legal bases may include performance of a contract, compliance with legal obligations, legitimate interests (security, service improvement), and explicit consent for health data or optional communications, depending on jurisdiction.

We retain data for as long as necessary for the purposes described and in line with legal retention periods. We apply appropriate technical and organizational measures (including encryption where relevant) to protect information against unauthorized access, loss, or alteration.

If data is transferred outside your country, we ensure appropriate safeguards (standard contractual clauses, adequacy decisions, or other mechanisms permitted by law).

Depending on applicable law, you may request access, rectification, erasure, restriction of processing, portability, and objection, and withdraw consent where processing is based on consent. You may lodge a complaint with your local data protection authority.

To exercise these rights, contact support@cdoctorsteams.com with your request and a reasonable means of verifying your identity.

When optional AI modules are enabled and you have given consent (e.g. recording for a clinical draft), we may send audio or text data to specialized vendors under contract:

• AssemblyAI — medical speech-to-text (medical-v1 domain) for the AI Scribe module.
• Anthropic — SOAP draft generation and health-topic chat assistance.

These vendors process data only when applicable subprocessor agreements (BAA/DPA) are in place for your region and the feature is enabled by platform administrators. API keys are never exposed in client apps; processing runs on CDoctorsTeams servers.

The Platform may use cookies and similar technologies for operation, security, and aggregated usage analysis. You can manage preferences via your browser settings or cookie notices when available.

The following terms apply to consultations via video call, chat, or other digital means on the Platform.

Telemedicine on CDoctorsTeams means the delivery of healthcare services at a distance using communication technologies (video calls, chat, file exchange) through the Platform. These policies govern the use of telemedicine by Users (patients) and Healthcare Professionals, with the aim of ensuring quality, safety, and regulatory compliance.

Permitted services

• Medical guidance and follow-up consultations.
• Interpretation of test results (if authorized by the Professional).
• Electronic prescribing (subject to local laws).
• Advice on healthy habits and prevention.

Limitations

• Telemedicine does not replace in-person medical care in emergencies, urgent situations, or when a physical examination is required.
• It is not intended to diagnose or treat serious conditions without complementary in-person evaluation.

Warning: In an emergency, Users must contact local medical services (e.g. 911 in the U.S., 133 in Chile, 192 in Brazil) and must not rely solely on the Platform.

Before each teleconsultation, the Professional must obtain the User’s informed consent, explaining:

• The purpose and nature of the consultation.
• The benefits and risks of telemedicine (e.g. technical or diagnostic limitations).
• Available alternatives (in-person care).

Consent will be recorded electronically on the Platform via an acceptance checkbox or digital signature, and the User may withdraw consent at any time.

• Credentials: Professionals must be duly licensed in the jurisdiction where they provide services and upload their credentials on the Platform for verification.
• Languages: Services will be offered in Spanish, English, and Portuguese (subject to Professional availability).
• Conduct: Professionals must comply with the ethical codes of their profession and applicable local laws.
• Technical setup: It is the Professional’s responsibility to have a stable connection and suitable devices for the teleconsultation.

• Information: Users must provide truthful, relevant information (medical history, symptoms) to enable appropriate care.
• Environment: Teleconsultations must take place in a private, secure setting to protect confidentiality.
• Technology: Users must have a compatible device and stable internet connection.

• Scheduling: Appointments are booked through the Platform, selecting the mode (video call or chat).
• Duration: Standard duration will be set by the Professional (e.g. 30 minutes), unless otherwise agreed.
• Recording: Teleconsultations may be recorded (with prior User consent) and clinical data will be stored in secure Electronic Medical Records (EMR).
• Prescriptions: Electronic prescriptions will be issued only where permitted by local law and will be sent to the User through the Platform.

The cancellation rules set out in the Terms and Conditions apply:

• 12+ hours before: 90% refund to the User, 10% to the Professional.
• 11–6 hours before: 75% refund to the User, 25% to the Professional.
• 5–2 hours before: 50% refund to the User, 50% to the Professional.
• Less than 2 hours: No refund; 100% to the Professional.

Cancellations must be made exclusively through the Platform.

• Confidentiality: All information exchanged during teleconsultations is protected in accordance with CDoctorsTeams’ Privacy Policy and applicable laws (e.g. HIPAA, LGPD).
• Storage: EMRs are stored on secure servers with end-to-end encryption.
• Access: Only the assigned Professional and the User have access to consultation data, except as required by law.

CDoctorsTeams

• Acts solely as a technology intermediary and does not provide direct medical services.
• Does not guarantee uninterrupted availability of the Platform or the quality of teleconsultations.

Professionals

• Are responsible for the quality, suitability, and legality of services provided.
• Must inform the User if a teleconsultation is not appropriate for their case.

Users

• Assume responsibility for following the Professional’s recommendations and seeking in-person care when indicated.

• Platform: Compatible with mobile devices and computers (iOS, Android, Windows, macOS).
• Connection: A minimum internet speed of 5 Mbps is recommended for video calls.
• Support: The Support Center (support@cdoctorsteams.com, WhatsApp +18134547337) will assist with technical issues.

Professionals and Users must comply with telemedicine laws and regulations applicable in their country or region, including, but not limited to, professional licensing, data protection, and service restrictions. CDoctorsTeams will adjust its operations to comply with specific regulations (e.g. HIPAA in the U.S., GDPR in Spain, LGPD in Brazil), notifying Users of any additional requirements.

Below is a summary of relevant regulations in jurisdictions where the Platform may operate (United States, Chile, Brazil, Peru, Ecuador, Mexico, Bolivia, Spain, and Canada), with a focus on how CDoctorsTeams may adapt its Policies.

Key regulations

• HIPAA (Health Insurance Portability and Accountability Act): Regulates the privacy and security of medical data (PHI — Protected Health Information).
• Florida Telehealth Law (F.S. 456.47): Permits telemedicine by professionals licensed in Florida or registered for patients in the state.
• 21 CFR Part 11: Regulates electronic records and digital signatures on health platforms.

Requirements

• Professionals must be licensed in Florida or in the patient’s state (where applicable).
• Written or electronic informed consent before the teleconsultation.
• Use of secure platforms with encryption (e.g. AES-256) to protect data.
• Controlled substances (Schedule II) may not be prescribed without a prior in-person visit, except as otherwise permitted.

Implications for CDoctorsTeams

• Verify state licenses of Professionals.
• Implement encryption systems and HIPAA audits.
• Include a digital consent form on the Platform.

Key regulations

• Law 20.584: Regulates patients’ rights and duties, including remote care.
• Exempt Resolution No. 744 (MINSAL): Establishes standards for telemedicine.
• Law 19.947 (Personal Data Protection): Protects sensitive information.

Requirements

• Professionals must be registered in the National Registry of Individual Health Providers (Superintendencia de Salud).
• Explicit, documented informed consent.
• Medical data must be stored on secure servers and meet interoperability standards (e.g. HL7).

Implications for CDoctorsTeams

• Validate Professionals’ registration in Chile.
• Ensure secure data storage and allow patients access to their medical history.
• Warn that telemedicine does not replace emergency care.

Key regulations

• CFM Resolution No. 2,227/2018 (as amended by Resolution 2,314/2022): Regulates telemedicine in Brazil.
• LGPD (Lei Geral de Proteção de Dados — Law 13,709/2018): Equivalent to GDPR for personal data.

Requirements

• The first consultation must be in person, except in remote areas or emergencies (flexibility increased post-COVID).
• Professionals must be registered with the Regional Council of Medicine (CRM).
• The platform must ensure confidentiality and allow consultation recording (with consent).
• Informed consent is mandatory before each teleconsultation.

Implications for CDoctorsTeams

• Require CRM registration and warn about the need for an initial in-person consultation in some cases.
• Implement a recording option with explicit consent.
• Comply with LGPD (encryption, data breach notification).

Key regulations

• Law No. 30421 (Telesalud Framework Law): Regulates telesalud in the country.
• Supreme Decree No. 015-2019-SA: Establishes technical and operational requirements.
• Law No. 29733 (Personal Data Protection): Similar to GDPR.

Requirements

• Professionals must be registered with the Colegio Médico del Perú.
• Prior informed consent and clinical data recorded in interoperable systems.
• Technology infrastructure must ensure continuity and security (ISO 27001 recommended).

Implications for CDoctorsTeams

• Verify registration with the Colegio Médico.
• Ensure interoperability with Peruvian health systems.
• Protect data in accordance with Law 29733.

Key regulations

• Organic Health Law (Art. 33): Permits telemedicine under supervision of the Ministry of Public Health (MSP).
• Organic Law on Personal Data Protection (2021): Regulates sensitive data.

Requirements

• Professionals must be registered with the MSP.
• Informed consent and strict protection of medical data.
• Use exclusively for consultation, follow-up, or education — not emergencies.

Implications for CDoctorsTeams

• Validate MSP registration of Professionals.
• Implement data security measures aligned with the 2021 Law.
• Limit teleconsultations to non-urgent cases.

Key regulations

• NOM-024-SSA3-2010: Regulates electronic medical records.
• General Health Law (Art. 77 Bis): Permits telemedicine under National Health System standards.
• Federal Law on Protection of Personal Data (LFPDPPP): Protects sensitive data.

Requirements

• Professionals must hold a valid professional license registered with the Ministry of Health.
• Written or electronic informed consent.
• Electronic systems must comply with NOM-024 (integrity, confidentiality).

Implications for CDoctorsTeams

• Verify professional licenses.
• Ensure NOM-024 compliance in EMRs.
• Protect data under LFPDPPP.

Key regulations

• Law No. 164 (General Health Law): Does not specifically regulate telemedicine but permits innovative health services.
• Law No. 1178 (Personal Data Protection, in progress): Full implementation pending.

Requirements

• Professionals must be registered with the Ministry of Health.
• Informed consent is mandatory.
• Lack of specific regulation requires alignment with international standards (e.g. WHO).

Implications for CDoctorsTeams

• Validate registration with the Ministry of Health.
• Adopt international standards (ISO 27001, HL7) until local regulation is in place.

Key regulations

• General Data Protection Regulation (GDPR — EU 2016/679): Strict data protection.
• Law 41/2002 (Patient Autonomy): Regulates informed consent and patient rights.
• Royal Decree 81/2014: Technical standards for telemedicine.

Requirements

• Professionals must be registered with the corresponding College of Physicians.
• Detailed, explicit informed consent.
• The platform must comply with GDPR (encryption, right to erasure, mandatory DPO).

Implications for CDoctorsTeams

• Verify Professionals’ college registration.
• Appoint a Data Protection Officer (DPO).
• Guarantee GDPR rights (access, rectification, erasure).

Key regulations

• PIPEDA (Personal Information Protection and Electronic Documents Act): Protects personal data.
• Provincial regulations (e.g. Ontario’s PHIPA): Vary by province; regulate medical data.
• CMA Telemedicine Guidelines: Ethical guidelines of the Canadian Medical Association.

Requirements

• Professionals must be licensed in the patient’s province.
• Informed consent and robust security measures (encryption, audits).
• Restrictions on prescribing controlled substances.

Implications for CDoctorsTeams

• Validate provincial licenses.
• Comply with PIPEDA and PHIPA (as applicable by province).
• Limit prescriptions according to local regulations.

To comply with these regulations, CDoctorsTeams integrates the following operational commitments into the Platform:

1. Professional verification

• Require valid registration or license in the Professional’s jurisdiction and the patient’s (as applicable by country).
• Maintain a Platform process to upload and validate credentials.

2. Informed consent

• Mandatory digital form before each teleconsultation, adaptable to languages and legal requirements of each country (e.g. detailed for Spain, simplified for Bolivia).

3. Data protection

• AES-256 encryption and international standards (ISO 27001, HL7) where applicable.
• Privacy Policy adapted to GDPR, HIPAA, LGPD, and other frameworks according to the User’s country.
• Rights of access, rectification, and erasure of data.

4. Service limitations

• Clear warnings that telemedicine is not suitable for emergencies or complex diagnoses, adjusted to each regulation.

5. Electronic prescriptions

• Feature enabled only in countries where permitted (e.g. U.S. with restrictions, Spain with qualified electronic signature) and in compliance with local law.

6. Flexible jurisdiction

• The User’s local laws prevail over Florida law in case of conflict, except where mandatory law provides otherwise.

Disputes related to teleconsultations will be resolved in accordance with the “Dispute Resolution” section of the Terms and Conditions (arbitration in Miami, Florida, except where mandatory local law applies).

These policies may be updated; Users will be notified at least 15 days in advance. Continued use of telemedicine constitutes acceptance of the changes.