Privacy notice

Who is responsible?

Data controller: Bo Dòkter, operator of bodokter.com, Curaçao. For privacy questions or a request about your data, use the contact page or email info@bodokter.com. Do not send medical records or other sensitive personal data through these channels.

Applicable rules and purposes

We process personal data in accordance with the Landsverordening bescherming persoonsgegevens van Curaçao. We process data only for a clear purpose and on an appropriate basis, for example to handle your request or submission, because you knowingly provide information, for the website's safe and proper operation, to improve our information and services, or to meet a legal obligation.

We do not use personal data for solely automated decisions that have legal effects or similarly significantly affect you.

Searches and website use

You do not need an account. Searches are used in the browser to display matching articles or providers. To improve content, a cleaned search term may be stored separately from the visitor code as a daily count, together with whether the search returned results. Terms containing an email address, web address or long number sequence are not stored as search terms. On some pages, a search term may also appear in the web address and therefore in browser history or technical logs. Do not enter a name, patient number, SVB number or personal medical details in a search box.

Contact form and email

Through the contact form, we store your name, email address, optional phone number, selected subject, message, applicable privacy version and time. We use these details to read your enquiry, reply if needed, prevent misuse and record its handling. Replies sent from the secure admin area are stored with the contact message, together with their subject, sending time and the administrator address used. When you email us directly, we also process the information in your email and usual technical email data.

After submission, we send a confirmation with a copy of your entered details to the supplied email address. The full submission is also sent through our email provider to info@bodokter.com and remains available in the secure admin area.

The form and email address are not intended for medical questions, appointments, emergencies or records. Do not include diagnoses, test results, identity documents or other people's details.

Care directory submissions and corrections

Through the provider form, we process the supplied organisation and location details, online channels, explanation, contact person's details and time, together with the applicable privacy version. We use these to verify a submission or correction, update the care directory and make contact if needed.

The contact person automatically receives a confirmation with the entered details. The full submission is also sent to info@bodokter.com and stored in the secure admin area.

Providers' business details may also come from public or official sources, such as an organisation's own website, public map services or registers. We do not publish patient data through the care directory. Do not submit medical details or patient information through this form.

Care experience form designed for anonymity

The care experience form does not ask for a name or phone number, and an email address is not required. We store whether the experience is positive, neutral or negative, the selected provider, care category, topic, a random reference number, applicable privacy version and time. If a provider is missing from the directory, we store the name you enter. The experience text, date, department or branch and any suggestion are encrypted before storage.

If you want a one-off copy, you may voluntarily enter a confirmation email address. It is used only to send the confirmation and is not included in the form database, backup, admin email or public statistics. During sending, the email provider temporarily processes the recipient address and confirmation content. Without this optional field, the submission contains no supplied contact details.

To limit duplicate or large numbers of submissions, your browser creates a random reporting code. In the care experience database, we store only a cryptographic hash of this code and a hash of the normalised report. These hashes are not intended to identify you, and we do not store IP addresses in this database. From the same browser, we accept up to 3 care experiences within 24 hours, with a maximum of 1 per provider. The exact same report is also rejected for 30 days.

Publicly, we show general totals, counts and percentages for positive, neutral and negative experiences, topics, monthly counts and the number of different providers. An individual provider's name and results appear only once at least 3 experiences have passed the technical check. The positive and negative Top 5 use a higher threshold of at least 10 technically checked experiences. Lower counts remain part of general totals only. Experience texts and additional answers are never made public. Technical checking does not mean the content has been assessed as true or independently verified.

Absolute anonymity cannot be guaranteed if you enter identifiable information yourself or if technical infrastructure keeps security logs. Do not write your name, date of birth, address, SVB or identity number, phone number, email address, bank details, record number or other people's details in the text field. If you nevertheless share health information, we treat it as especially sensitive and limit processing to the purpose of the report.

A report is not automatically forwarded to the provider. A negative experience is not a formal complaints procedure. See also the disclaimer.

Anonymous website feedback

For reports through the website feedback page, we store the selected category, relevant page, optional selected article, your report and time. We do not ask for a name, and an email address is not required. We do not store IP addresses in our feedback database. Do not share personal details or personal medical information in the text field yourself either.

If you voluntarily provide a confirmation email address, we use it only to send a one-off copy of your feedback. The address is not stored with the feedback, in a backup or in the admin email. During sending, the email provider temporarily processes the recipient address and confirmation content.

Yes and no answers on articles

When you indicate whether an article helped, we store only the article name, your choice and time. We do not ask for your name, email address or medical details. Your browser stores on your device that you have already answered, so the same buttons are not offered again.

Visitor statistics and storage on your device

For the restricted country overview, the hosting service supplies an estimated country code based on the internet connection. We count new visits by day and country. These country totals contain no IP address, visitor code, session code or link to viewed pages or read articles. We do not request GPS location. The country is not a confirmed place of residence; VPNs and mobile networks may affect the result. If the country is unavailable, the visit counts as ‘Unknown’. This measurement starts when introduced; earlier visits are not assigned a country retrospectively.

Our impact and the restricted Website insights count visits, viewed pages, read articles, returning browsers, device type, general referring website, website language, selected care directory categories and filtered districts, form starts and submissions, and relevant clicks such as phone, directions, SVB or provider links. Website language is not necessarily a person's first language, and a filtered district is not necessarily their residential district. Short impact questions store only the anonymous yes/no answer about finding information, a next step or a provider. For technical quality checks, we measure rounded load times and occurrences of general browser or form errors, without storing error content or entered data. An article counts as read after at least 20 visible seconds and as largely read from 75% scrolling; visible reading time is processed only as a rounded number of seconds. We do not store form content or full IP addresses in this statistics database.

For this purpose, your browser creates a random visitor code and session code and stores them locally on your device. A new session starts after 30 minutes of inactivity. The codes help estimate unique and returning browsers, visits and multiple articles read within a visit. They do not establish the identity of the person behind a browser; use on another device or browser, or after clearing browser storage, may be counted again.

Bo Dòkter also uses local browser storage for the separate random reporting code for the care experience form and your yes/no choice on an article. Temporary session storage prevents duplicate reading, form-start and impact measurements. You can remove this information through your browser's privacy or site-data settings. We do not use advertising cookies, show advertisements or create a marketing profile of your website use.

Technical data and service providers

Hosting, security and infrastructure providers may process technical data needed to deliver and secure the website, such as IP address, browser type, device characteristics, time, requested page and error or security information. They process these data for their technical role and under the agreements and terms applicable to their services.

After a contact, care directory, care experience or website feedback form submission, an admin email with the full submission is sent through our email provider to info@bodokter.com . The submission also remains in the restricted admin area. When a visitor requests confirmation or a form requires an email address, the email provider also processes the recipient address and sent copy. Thumbs-up or thumbs-down article ratings are not emailed.

Only people and providers who need the data for their role may access it. No internet service can guarantee complete security or uninterrupted availability.

Sharing data

We do not sell or rent personal data. We may share data with technical providers enabling the website, database, security or email, and with advisers or competent authorities when reasonably necessary to protect rights or required by law. We share no more data than necessary for the relevant purpose.

Anonymised totals and trends may be used for research, policy information and possible reporting to public bodies. We do not share contact details, experience texts, individual visitor codes or other information intended to recognise a visitor. This does not automatically mean there is a formal partnership with a government body.

Processing outside Curaçao

Digital infrastructure and providers may process or store data outside Curaçao. Where this occurs, we consider appropriate contractual, organisational and technical safeguards to the extent required by applicable law and within our control.

Retention periods

We retain personal data no longer than needed for the purpose for which it was collected, unless a legal duty, security investigation, ongoing dispute or legal claim justifies a longer period. The following maximum periods apply as a starting point:

• contact enquiries and replies to them, care directory submissions and corrections, website feedback and article responses: up to five years after receipt of the original submission;
• encrypted care experiences and associated technical verification data: up to five years after receipt;
• pseudonymous impact events and visitor codes: up to five years; afterwards, only aggregate counts without visitor codes remain;
• temporary admin sign-in codes: up to one day after expiry; admin sessions: up to thirty days;
• anonymised totals and trends: longer, to preserve historical counts and policy information without the original personal data;
• technical security and server logs: according to the limited retention period of the relevant infrastructure provider.

The website checks retention periods daily once there is traffic. After expiry, original records are deleted and only necessary anonymised totals are archived. Encrypted backups and admin copies in the mailbox, where under our direct control, have the same maximum five-year retention period and are not used for other purposes.

Security

We take appropriate technical and organisational measures suited to the nature and sensitivity of the data. Examples include encrypted storage of experience texts and backups, input checks, rate limits, duplicate-report checks, limited data fields, security headers and a restricted admin area. Only permanently configured administrator addresses can request a temporary sign-in code; it is sent solely to the selected authorised address. Despite these measures, no method of internet storage or transmission can be made completely secure.

Children and young people

Bo Dòkter is a general information website and does not knowingly request children's personal data. If you are a minor, speak to a parent, guardian or healthcare professional before sharing personal data through a form. Always use an appropriate care channel for medical concerns.

Your privacy rights

Depending on your situation, you may request access to, correction, deletion or blocking of your personal data, and object to certain processing. You may withdraw consent for future processing. We may request information to find and protect your identity and the relevant record; in some cases, the law may limit a request or impose retention duties.

Send your request to info@bodokter.com or use the contact page. Because anonymous submissions are deliberately not linked to your identity, we may be unable to identify your submission without enough reference information. If you are dissatisfied with how your request is handled, you may seek information or submit a complaint to the College Bescherming Persoonsgegevens Curaçao.

External websites

Links to services including Google Maps, social media, care organisations and SVB open another website. That provider's privacy policy then applies. Bo Dòkter does not send an SVB number or other form details you enter through the SVB page. Check an external service's privacy information before entering personal data there.

Changes and questions

We may amend this privacy notice when the website, our data processing or the law changes. The date above identifies the applicable version. For a general privacy question, use the contact page or email info@bodokter.com. Do not use these channels for personal medical questions or emergencies.