Test mode Pre-launch test platform — no real consultations
SMSugabi Medicare
Sugabi Medicare

Privacy Policy

Last updated 23 August 2026

1. Who is responsible

Sugabi Medicare (Private) Limited (registration PV 00261546), Ragama, Sri Lanka, is the controller of the personal data collected through https://sugabimedicare.com and https://consult.sugabimedicare.com. We process personal data in accordance with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka (PDPA).

2. What we collect

When you book a consultation we collect: your full name, mobile number, email address, date of birth, your reason for the consultation, whether you have visited Sugabi Clinic before and, if so, your clinic record number.

Before your consultation you may choose to upload reports, scans or other documents. During and after the consultation the consultant records clinical notes, the outcome, and whether follow-up is needed.

We also record when your consultation link was sent, opened and joined, the time you gave consent to a remote consultation, when the call started and ended, and technical events needed to run the service. Payment is handled by our payment gateway; we receive a payment reference and status, never your card number.

Your reason for consulting, your uploaded documents and the clinical notes are health data, which the PDPA treats as special category data. We collect them only with your consent and only for the purpose of providing your consultation.

3. Why we use it

  • To provide the consultation you booked and any written opinion or letter that follows it.
  • To send you your confirmation, consultation link and any reschedule notices by email and SMS.
  • To take payment and keep the financial records the law requires.
  • To keep a clinical record of the consultation, as required of medical practitioners.
  • To run, secure and improve the service, including preventing misuse of consultation links.

4. Who can see it

Your reason for consulting, uploaded documents and clinical notes are visible only to the consulting doctor. Our administrative staff can see your name, contact details, appointment time and payment and link status in order to manage bookings, but not your clinical information.

We share data only with the service providers needed to run the service, each under contract: our payment gateway (payment details), our email and SMS providers (your contact details and consultation link), our video provider, Cloudflare RealtimeKit (your name and the call media, which pass through its servers in real time and are not recorded), and our hosting provider. We do not sell personal data and we do not use it for advertising.

We may disclose data where the law requires it or to protect life.

5. Video consultations

Consultations are not recorded by us. You confirm your consent to a remote video consultation before joining; the time of that consent is logged with your booking.

6. How long we keep it

Clinical records, including consultation notes and any documents you uploaded, are kept for the period required for medical records in Sri Lanka. Booking, payment and messaging records are kept for as long as needed for accounting and legal purposes. Technical logs are kept for a short period for security and then deleted.

7. Security

Data is transmitted over encrypted connections (HTTPS) and stored on encrypted systems with access limited to authorised staff. Consultation links are single-use, signed and expire with the appointment. Uploaded documents are stored privately and are never publicly accessible.

8. Your rights

Under the PDPA you may ask us for access to your personal data, for correction of inaccurate data, for erasure where we no longer need to keep it, and you may withdraw consent for future processing. To exercise these rights contact info@sugabimedicare.com. We will respond within the time the PDPA allows. If you are not satisfied you may complain to the Data Protection Authority of Sri Lanka.

9. Cookies

https://consult.sugabimedicare.com uses only a strictly necessary session cookie for staff sign-in. The patient booking and consultation pages set no tracking cookies. https://sugabimedicare.com sets no cookies.

10. Changes

We may update this policy. The current version, with its date, is always published at https://consult.sugabimedicare.com/privacy and https://sugabimedicare.com/privacy.html.