Dr. Joshi's Holistic Multispeciality Clinic (“we”) runs this website and the clinics it describes. This policy explains what we collect when you use drjoshis.in, why, and what you can ask us to do about it. It is written to India's Digital Personal Data Protection Act, 2023.
What we collect
- When you send an enquiry or book an appointment: your name, phone number, email if you give one, the condition you selected, and anything you type into the message box.
- When you book: additionally your sex, date of birth if you give one, the clinic and time you chose, and — for payment — a transaction reference from our payment gateway.
- Automatically: the page you arrived on, and campaign parameters in the link you followed (for example utm_source, gclid) so we know which advertising is working.
We never see or store your card number, UPI PIN or bank credentials. Payments are handled entirely by our payment gateway; we receive only a reference and whether it succeeded.
Health information
A condition you select or describe is health data, and India's law treats it as sensitive. We use it only to route your enquiry to the right clinician and to prepare for your visit. It is not used for advertising, is not sold, and is not shared with anyone outside the clinic except where a law or a court requires it.
Why we are allowed to hold it
Because you gave it to us in order to be contacted or treated, and because medical records must be retained under Indian medical practice rules. You can withdraw consent for marketing contact at any time; we cannot delete a clinical record you have asked us to create while retention rules still apply to it.
Who else touches it
- Our clinic management system, which is operated by us on servers in India.
- Our payment gateway, for payments only.
- An SMS provider, to send you a one-time verification code.
- An automation service that forwards website enquiries to the clinic's desk.
Each receives only what it needs to do that job. None of them may use your data for their own purposes.
How long we keep it
Enquiries that never become patients are kept for up to 24 months and then deleted. Clinical records are kept for the period Indian medical rules require. Payment records are kept as long as tax law requires.
Your rights
You may ask us for a copy of what we hold about you, ask us to correct it, ask us to delete what we are not required to keep, or nominate someone to act for you if you cannot. Write to contact@drjoshis.in from the email or phone number we hold, so we can be sure it is you. We answer within 30 days.
Cookies
This site does not use advertising cookies. It stores your language choice and, if you arrived from a campaign link, the campaign parameters, so the enquiry you send later is attributed correctly.
Grievances
If you are not satisfied with how we handled your data, write to contact@drjoshis.in, marked for the Grievance Officer. We acknowledge within 2 working days. You may also complain to the Data Protection Board of India.
Changes
If this policy changes we update the date at the top of the page. Material changes to how we use health data will be told to you directly.