Privacy Policy - MCR Admin

Last updated: 13 October 2026

Operator: MCR Admin Hub is operated by M/S MCR Super Speciality Polyclinic &

Pathology (Udyam Registration No. UDYAM-WB-10-0152836), Tram Depot, 11A,

Sourin Roy Road, beside Ellora Cinema Hall, Behala, Kolkata - 700034,

West Bengal, India.

1. Who this app is for

MCR Admin Hub is an internal administration application for authorised staff

of MCR Super Speciality Polyclinic & Pathology. It is not intended for

patients or for the general public. Accounts are created by the clinic; there

is no public sign-up, and access is granted by role.

This policy explains both what information the app holds about you as a staff

user, and how the app handles patient and doctor information that staff

access through it.

2. Information about you as a staff user

Account details: your name, email address, phone number, and the

administrative role assigned to you by the clinic.

Activity: actions you take in the app, such as approving a refund, issuing a

payout, responding to a support ticket, or opening a consultation recording.

These are recorded so that administrative actions can be attributed to a

responsible person.

Device information: a notification token used to deliver alerts to your

device.

3. Patient and clinical information accessible through the app

Authorised staff can access the following clinic records through this app:

Patient records: names, contact details, visit history, appointments, and

cancellations.

Consultation recordings: audio recordings of consultations between patients

and doctors, shown alongside the patient name, doctor, department, reason for

visit, and duration. Recordings are retained for 7 days and are then

automatically deleted.

Clinical scheduling: doctor availability, bookings, and consultation

outcomes.

Communications: chat messages between patients and doctors, and support

conversations.

Financial records: payments, refunds, and doctor payouts.

Feedback: patient ratings and reviews of doctors.

Patients are informed that their consultations are recorded. They see a

notice on screen during every consultation, and the recording and its

retention period are described in the patient privacy policy and terms.

4. How this information is used

Information accessed through this app is used only to run the clinic:

scheduling and managing consultations, resolving patient and doctor support

requests, processing payments, refunds and doctor payouts, reviewing

consultations for quality and safety, and maintaining the clinic's records.

We do not sell any of this information, and we do not use it for advertising

or marketing profiling.

5. Who can see it

Access is limited by role. A staff member sees only the areas their role

permits, and roles are assigned by the clinic administration. Patient clinical

information is available only to staff involved in providing or administering

care.

The app runs on Google Firebase, which stores the clinic's data on our behalf

under Google's terms. Payment records originate from Razorpay, our payment

processor. These providers process data for the clinic and are not permitted

to use it for their own purposes.

6. Security

Data is transmitted over encrypted connections (HTTPS/TLS) and stored with

access controls. Sign-in is restricted to accounts created by the clinic, and

administrative actions are attributable to the staff member who performed

them.

7. Retention

Consultation recordings: retained for 7 days, then automatically deleted.

Clinical and financial records: retained as required by applicable medical

record-keeping and financial regulations.

Staff accounts: retained while the account is active. When a staff member

leaves, the clinic deactivates their access.

8. Your obligations as a staff user

The information in this app is confidential patient data. You must access it

only when your work requires it, must not share it outside the clinic, must

not copy, photograph, download or forward consultation recordings or patient

records, and must keep your credentials and device secure. Misuse may lead to

withdrawal of access and to action under applicable law.

9. Patients' rights

Patients may request access to, correction of, or deletion of their personal

information. Such requests are handled by the clinic administration under the

patient privacy policy at www.mcrsspp.com/privacy-policy, not through this

app.

10. Changes and contact

We will update this page when our practices change. For any privacy question

or request, including from patients, contact:

M/S MCR Super Speciality Polyclinic & Pathology

Tram Depot, 11A, Sourin Roy Road, beside Ellora Cinema Hall,

Behala, Kolkata - 700034, West Bengal, India

Email: support@mcrsspp.com

Phone: +91-9830525004