DocMap WhatsApp Service (Specialist Triage)
These policies apply specifically to the DocMap WhatsApp Service. For our broader privacy notice covering both the booking platform and the WhatsApp Service, see the DocMap Privacy Policy.
Section 1
These terms govern your use of DocMap Specialist Triage (the “DocMap WhatsApp Service”), operated by DocMap Ltd. They are separate from, and additional to, any terms governing the DocMap booking platform.
Last updated: March 2026
DocMap Specialist Triage (“DocMap”, “the Service”) is a healthcare specialist search and triage tool operated by DocMap Ltd (“DocMap”, “we”, “us”, “our”), a company registered in England and Wales.
The Service helps patients find and connect with trusted women's health specialists for diagnosis, symptom management, and surgical care. It is accessible via:
By using the Service — whether by sending a message to our WhatsApp number, using the web dashboard, or otherwise interacting with DocMap — you agree to be bound by these Terms of Service and the DocMap WhatsApp Service section of our Privacy Policy.
If you do not agree with these terms, please do not use the Service.
DocMap provides the following:
DocMap is NOT a medical service. Please read the following carefully:
The Service is a referral facilitation tool — we help connect you with specialists, but all clinical decisions remain between you and your chosen healthcare professional.
The Service is available to:
We reserve the right to refuse or discontinue service to any individual at our discretion.
When using the Service, you agree to:
When you message our WhatsApp number for the first time:
We use artificial intelligence to:
All AI outputs are reviewed by human operators before being communicated to you. We do not use fully automated decision-making that produces legal or similarly significant effects.
Specialist profiles displayed in the Service are compiled from publicly available sources including:
We make reasonable efforts to keep specialist information accurate and up-to-date, but we do not guarantee the accuracy, completeness, or currency of any specialist profile. Always verify details directly with the specialist or their practice.
We take data protection seriously, particularly given the sensitive nature of health data. Full details are set out in the DocMap WhatsApp Service section of our Privacy Policy.
Key points:
All content, software, designs, logos, and trademarks associated with DocMap are the property of DocMap Ltd or its licensors. You may not:
To the fullest extent permitted by law:
Nothing in these terms excludes or limits our liability for:
You agree to indemnify and hold harmless DocMap Ltd, its directors, employees, and agents from any claims, damages, losses, or expenses (including legal fees) arising from:
We may suspend or terminate your access to the Service at any time, with or without cause, and with or without notice.
You may stop using the Service at any time. If you wish to have your data deleted, see the Data Subject Rights section of our Privacy Policy.
Upon termination, provisions relating to intellectual property, limitation of liability, indemnification, and governing law shall survive.
We may update these Terms of Service from time to time. Material changes will be communicated via:
Continued use of the Service after changes constitutes acceptance of the updated terms.
These Terms are governed by the laws of England and Wales. Any disputes arising from or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.
If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.
For questions about these Terms of Service:
Section 2
DocMap Ltd (“we”, “us”) is committed to protecting the privacy and security of personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This statement summarises our GDPR compliance measures for the DocMap WhatsApp Service (Specialist Triage). It complements the DocMap WhatsApp Service section of our Privacy Policy.
WhatsApp triage: messages, AI classification, specialist matching, conversation history
Data type: Health data
Lawful basis: Consent (Art. 6(1)(a)); explicit consent (Art. 9(2)(a))
Internal operator notifications (e.g. new conversation alerts)
Data type: Contact / identifiers
Lawful basis: Legitimate interests (Art. 6(1)(f)) — not for unrelated marketing
Legal compliance and record-keeping
Data type: All categories
Lawful basis: Legal obligation (Art. 6(1)(c)) where applicable
Health data is not processed using Article 9(2)(h) for the core triage service (see the “Special category data” section of the WhatsApp Service privacy notice). Observability traces may contain message content: they are pseudonymised where technically possible and are subject to retention limits.
We facilitate the following rights for all data subjects:
Access (Art. 15)
How to exercise: Email admin@docmap.co.uk or message "Access my data" on WhatsApp
Response time: 30 days
Rectification (Art. 16)
How to exercise: Email admin@docmap.co.uk with correction details
Response time: 30 days
Erasure (Art. 17)
How to exercise: Email admin@docmap.co.uk or message "Delete my data" on WhatsApp
Response time: 30 days
Restrict processing (Art. 18)
How to exercise: Email admin@docmap.co.uk
Response time: 30 days
Data portability (Art. 20)
How to exercise: Email admin@docmap.co.uk requesting JSON export
Response time: 30 days
Object (Art. 21)
How to exercise: Email admin@docmap.co.uk
Response time: 30 days
Withdraw consent
How to exercise: Message "Withdraw consent" on WhatsApp or email admin@docmap.co.uk
Response time: Without undue delay
Erasure requests trigger deletion from live systems including:
Backups may retain data for a limited period after live deletion — see Section 8 of the WhatsApp Service privacy notice.
Amazon Web Services
Role: Infrastructure (DynamoDB, SES)
Location: EU (London)
Transfer safeguard: UK Adequacy; AWS DPA
Upstash
Role: Redis cache
Location: EU
Transfer safeguard: DPA; EU hosting
Meta Platforms
Role: WhatsApp Business API
Location: EU/US
Transfer safeguard: Meta DPA; EU–US Data Privacy Framework
OpenRouter
Role: LLM inference
Location: US
Transfer safeguard: DPA; Standard Contractual Clauses
Pinecone
Role: Vector search (specialist profiles only)
Location: US
Transfer safeguard: DPA; SCCs; configuration-dependent
Langfuse (or equivalent)
Role: LLM observability / traces
Location: Per provider
Transfer safeguard: DPA; may include US transfers
All processors are bound by Data Processing Agreements (DPAs) that require:
In the event of a personal data breach:
Given that we process health data (special category) at scale using AI systems, we have conducted a Data Protection Impact Assessment in accordance with Article 35 of UK GDPR. Key findings and mitigations are documented internally and reviewed quarterly.
We maintain Records of Processing Activities as required by Article 30 of UK GDPR. These records document:
These records are available to the ICO upon request.
For organisations of our size, appointing a formal DPO is not mandatory under UK GDPR. However, all data protection enquiries are handled by our designated privacy lead:
Email: admin@docmap.co.uk
If you believe we have not handled your data appropriately, you may:
This GDPR Compliance Statement is reviewed and updated at least annually, or whenever there are material changes to our data processing activities.