Privacy Policy
Information We Collect
Pagoda CMS collects information entered by your clinic to operate day-to-day clinical and administrative workflows. This includes:
- Patient demographic and contact details, appointment records, medical history, treatment and consultation notes, prescriptions, lab results, and billing information.
- Clinic staff account information, such as names, roles, contact details, and login activity, used to manage access to the platform.
- Technical information such as IP address and browser type, collected when you use our website or platform.
How We Use Information
We use collected information solely to operate, maintain, and improve Pagoda CMS, including scheduling appointments, maintaining patient records, processing billing, and supporting clinical and administrative workflows on your clinic’s behalf. Patient health information is used only to deliver the services your clinic has configured within the platform and is never used for advertising or sold for any unrelated commercial purpose.
Data Security
We apply industry-standard security measures, including encryption in transit and at rest, role-based access controls, and audit logging, to protect patient health information and clinic data stored within the platform. Access to patient records is restricted to authorized clinic staff based on the permissions your clinic assigns to each user role.
Confidentiality of Medical Records
Patient medical records processed through Pagoda CMS are treated as confidential health information. Clinics using the platform remain responsible for obtaining any patient consent required under applicable healthcare regulations, and we support clinics in maintaining the confidentiality, integrity, and availability of medical records consistent with recognized healthcare data protection standards.
Data Sharing
We do not sell patient health information or clinic data. Information is shared only with service providers necessary to operate the platform, business associates engaged under appropriate confidentiality obligations, or as required by law or a valid request connected to a patient’s ongoing care.
Cookies
Our website may use cookies to improve functionality and understand how visitors use our site. You can control cookie preferences through your browser settings.
Your Rights
Clinics, clinic staff, and patients may request access to, correction of, or deletion of personal or health information held within the platform, subject to applicable law, medical record retention requirements, and your clinic’s internal policies.
Data Retention
Patient and clinic data is retained for as long as your clinic’s account remains active and for any additional period required by applicable healthcare recordkeeping laws. Upon termination of service, data may be exported or securely deleted in accordance with your clinic’s instructions and applicable legal obligations.
Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated through the platform or via email.
Contact Us
Questions about this Privacy Policy can be sent to hello@pagodalabs.com, by mail to Chuda Bikram St, Kupondole, Lalitpur, or by phone at +977-9801195032.