Privacy Policy

Last updated: 14 May 2026 · Effective: 14 May 2026

Dr. Sujeeth’s Healthcare Private Limited (“we”, “us”, “our”), operating the brand Dr. Sujeeth’s Clinic, runs the website drsujeeth.com and related patient services. This Privacy Policy explains how we collect, use, share and protect personal data of visitors and patients, in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) of India and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Personal Data We Collect

1.1 Data you give us directly

• Name, age, gender, phone number, email address — when you book an appointment, send a WhatsApp message, or contact the clinic.
• Medical history, presenting complaint, prior reports, surgical history — when you consult Dr. Sujeeth in person or online.
• Identity / address information — only when required for insurance pre-authorisation or hospital admission.
• Payment information — processed by Razorpay; we do not store card numbers, UPI handles or bank details on our servers.

1.2 Data collected automatically

• Device, browser, IP address, referrer, pages visited — via Google Analytics 4 and standard server logs.
• Cookies for site preferences and analytics (see Section 7).

2. How We Use Your Personal Data

• To schedule and confirm your appointment.
• To provide medical consultation, surgical care and follow-up.
• To send appointment reminders, post-operative instructions and prescriptions via WhatsApp, SMS or email.
• To process insurance claims and hospital paperwork on your behalf, with your consent.
• To improve our website, services and patient experience.
• To comply with our legal, regulatory and medical-record retention obligations.

3. Legal Basis & Consent

We process most personal data on the basis of your free, specific, informed and unambiguous consent — given when you book a consultation, fill a form or communicate with us. Some processing is necessary to perform the medical services you have requested, or to comply with law (for example, the Medical Council of India / NMC record-keeping requirements).

You can withdraw your consent at any time by writing to us (see Section 10). Withdrawal does not affect the lawfulness of processing already done.

4. Who We Share Your Data With

We share the minimum necessary data only with the following categories of partners, and only to provide the service you have requested:

• Apollo Hospitals, Jubilee Hills & Apollo Clinic, Manikonda — for in-person consultations, surgery scheduling and admissions.
• Zoho Corporation Pvt. Ltd. (Zoho Bookings, Zoho CRM, Zoho Books, Zoho Mail) — for appointment booking, patient relationship management, invoicing and email. Data is stored on Zoho’s India data centre (.in).
• Meta Platforms (WhatsApp Business) — for WhatsApp messages you send or receive from our clinic number 9963009090.
• Retell AI / Voice Link DID — for our voice assistant “Anaya” on +91 94849 57099, which helps you book appointments by phone. Calls may be transcribed for quality and routing.
• Razorpay Software Pvt. Ltd. — for payment processing.
• Google LLC (Google Analytics, Google Business Profile) — for website analytics and reviews.
• Insurance companies and TPAs — only with your consent, to pre-authorise and settle cashless claims.
• Courts, regulators or law-enforcement authorities — when required by valid legal process.

We do not sell your personal data. We do not share it with marketing third parties.

5. International Transfers

Some of our partners (Meta, Google, Retell AI) may process data on servers outside India. Where this happens, we rely on contractual safeguards and the partner’s own compliance certifications.

6. How Long We Keep Your Data

• Medical records: retained for the period mandated by the Indian Medical Council Regulations and applicable hospital policy — typically a minimum of 3 years from the last consultation, longer for surgical cases.
• Booking and communication logs: retained while your relationship with the clinic is active, plus a reasonable period thereafter.
• Financial records: retained as required under the Companies Act, Income Tax Act and applicable laws.
• Website analytics data: retained for 14 months in Google Analytics.

7. Cookies and Analytics

This website uses cookies to remember your preferences and to measure traffic (via Google Analytics 4). You can disable cookies in your browser settings; this may affect some features. We do not use cookies for cross-site advertising profiling.

8. Your Rights (under DPDPA 2023)

• Right to access: ask us for a summary of the personal data we hold about you.
• Right to correction and erasure: ask us to correct inaccurate data or to delete data that is no longer needed (subject to medical-record retention laws).
• Right to nominate: nominate another person to exercise your rights if you are unable to.
• Right to withdraw consent: withdraw any consent you have given (see Section 3).
• Right to grievance redressal: contact our Grievance Officer (Section 10). If your complaint is not resolved within 30 days, you may approach the Data Protection Board of India.

9. Security

We protect personal data using industry-standard technical and organisational measures: encrypted HTTPS for the website, role-based access for the EMR, multi-factor authentication on clinic accounts, and staff confidentiality undertakings. No system is perfectly secure; we ask you not to share sensitive medical details over unsecured channels and to use the booking link or WhatsApp where possible.

10. Contact & Grievance Officer

11. Children

The website is not directed at children below 18. Paediatric consultations are scheduled by a parent or legal guardian, who provides consent on behalf of the child as required under DPDPA.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced on this page with a revised “Last updated” date. We encourage you to review it periodically.