Privacy Policy

Introduction

1.1 This Privacy Policy (“Policy”) explains how drsatyanarayanagarre.in (“Platform”, “we”, “us”, “our”), operated by Dr. Satyanarayana Garre, collects, uses, stores, shares, and protects the personal data of patients and visitors (“you”, “Patient”) in connection with online consultations and appointment bookings with Dr. Satyanarayana Garre, Consultant Nephrologist (“Doctor”), and other use of the Platform.

1.2 This Policy should be read together with our Terms of Service and our Cancellation and Refund Policy. By registering on, or using, the Platform, you consent to the collection and processing of your personal data as described in this Policy.

1.3 This Policy applies to personal data collected through the Platform’s website and any associated mobile or web application, including during registration, OTP verification, appointment booking, document upload, and payment.

Definitions

2.1 “Personal Data” means any data about an individual who is identifiable by or in relation to such data, as defined under the Digital Personal Data Protection Act, 2023.

2.2 “Health Data” means information relating to your physical or mental health, medical history, symptoms, prescriptions, lab reports, scans, and other clinical records shared with the Doctor.

2.3 “Processing” means any operation performed on Personal Data, including its collection, storage, use, sharing, and erasure.

2.4 “Data Fiduciary” means the entity that determines the purpose and means of processing Personal Data — in this case, drsatyanarayanagarre.in, operated by Dr. Satyanarayana Garre.

2.5 “Data Principal” means the individual to whom the Personal Data relates — that is, you, the Patient or website visitor.

2.6 “Booking”, “Appointment”, “Consultation Fee”, and “Confirmation” have the meanings given to them in our Terms of Service.

Information We Collect

3.1 Information you provide directly:

(a) Registration details: your name, email address, and mobile number, provided when creating an account.

(b) OTP and verification data generated to confirm your email address or mobile number.

(c) Appointment details: your preferred date and time slot, reason for visit, and current symptoms.

(d) Health Data you choose to upload: prescriptions, lab reports, scans, or other documents, and any additional notes for the Doctor.

(e) Communications: any message you send us through the Platform, WhatsApp, email, or phone, including for rescheduling or grievance redressal.

3.2 Information collected automatically:

(a) Technical data such as IP address, browser type and version, device identifiers, and operating system.

(b) Usage data such as pages visited, time spent, and actions taken on the Platform.

(c) Cookies and similar tracking technologies, as described in Clause 9.

3.3 Information from third parties:

(a) Payment confirmation and transaction status from our payment gateway, Razorpay, once a payment is completed. We do not collect or store your full card, UPI, or bank account details — these are handled directly by the payment gateway under its own security standards.

(b) Confirmation of meeting or video-consultation access from our video consultation provider, Google Meet.

How We Use Your Information

4.1 We process your Personal Data and Health Data to:

(a) create and verify your account, including sending OTPs;

(b) schedule, confirm, reschedule, and otherwise manage your Appointment;

(c) enable the Doctor to review your symptoms, reason for visit, notes, and uploaded documents ahead of and during the consultation;

(d) process payment of the Consultation Fee through our payment gateway;

(e) send Confirmations, reminders, and the meeting link for your Appointment by SMS, email, WhatsApp, or in-app notification;

(f) respond to queries, complaints, and rescheduling requests;

(g) maintain medical and transaction records as required by applicable law and medical record-keeping norms;

(h) improve the Platform, prevent fraud and misuse, and comply with legal and regulatory obligations; and

(i) where you have given separate consent, send you health information, appointment reminders, or promotional communications.

4.2 We do not use Health Data for advertising or marketing purposes, and we do not sell Personal Data or Health Data to any third party.

Legal Basis for Processing

5.1 We process your Personal Data on the basis of your consent, given at the time of registration and Booking, and, where applicable, for the performance of the services you have requested.

5.2 Certain processing — such as maintaining records for legal, medical, or tax purposes — is carried out to comply with applicable law, independent of consent.

5.3 You may withdraw consent for non-essential processing (such as promotional communications) at any time. This will not affect the lawfulness of processing carried out before withdrawal, and will not affect our ability to retain records we are legally required to keep.

Sharing and Disclosure of Information

6.1 We share your Personal Data and Health Data only as reasonably necessary, with:

(a) the Doctor, for the purpose of providing the consultation;

(b) Razorpay, to process payment of the Consultation Fee;

(c) Google Meet, to enable the online consultation and generate the meeting link;

(d) SMS, email, and WhatsApp service providers, to deliver OTPs, Confirmations, and reminders;

(e) cloud hosting and data storage providers, to securely store Platform data;

(f) professional advisors, such as auditors or legal counsel, where necessary; and

(g) courts, regulators, or law enforcement authorities, where required by law or in response to a valid legal process.

6.2 We do not sell, rent, or trade your Personal Data or Health Data to third parties for their own marketing purposes.

6.3 Any third party who processes Personal Data on our behalf is required to apply appropriate security safeguards and to use the data only for the purpose for which it was shared.

Data Storage, Security, and Retention

7.1 We adopt reasonable security practices and procedures, including access controls and encryption where appropriate, to protect Personal Data and Health Data against unauthorised access, alteration, disclosure, or destruction.

7.2 Personal Data and Health Data are retained only for as long as necessary for the purposes set out in this Policy, or as required by applicable law, including medical record-keeping requirements applicable to the Doctor (a minimum of three (3) years from the date of consultation). Data is securely deleted or anonymised once it is no longer required.

7.3 In the event of a Personal Data breach that is likely to affect you, we will notify you and the Data Protection Board of India in accordance with applicable law.

Your Rights

8.1 Subject to applicable law, you have the right to:

(a) access the Personal Data we hold about you;

(b) request correction or updating of inaccurate or incomplete Personal Data;

(c) request erasure of Personal Data that is no longer necessary for the purpose it was collected, subject to our legal record-keeping obligations;

(d) withdraw consent for processing that is based on consent;

(e) nominate another individual to exercise your rights under this Policy in the event of your death or incapacity; and

(f) lodge a complaint with the Data Protection Board of India, without prejudice to your right to approach us first under Clause 11.

8.2 To exercise any of these rights, please contact us using the details in Clause 11. We will respond within a reasonable time and, in any event, no later than ninety (90) days, or such other period as may be prescribed by applicable law.

Cookies and Tracking Technologies

9.1 The Platform may use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Platform is used.

9.2 You can control or disable cookies through your browser settings. Doing so may affect some features of the Platform, such as staying signed in.

Children’s Data

10.1 The Platform is intended for use by adults. Where an Appointment is booked for a minor (a person under 18 years of age), the Booking must be made by, and the relevant consents given by, the minor’s parent or legal guardian, who is responsible for the accuracy of the information provided.

10.2 We do not knowingly collect Personal Data directly from a minor without the involvement of a parent or legal guardian. If we become aware that we have done so, we will take reasonable steps to delete such data, unless retention is necessary for the provision of healthcare services or as required by law.

Grievance Officer / Contact Us

11.1 For any questions, complaints, or requests relating to this Policy or your Personal Data, please contact Dr. Satyanarayana Garre, Consultant Nephrologist, at satyakishoregarre@gmail.com or +91 93910 86902.

11.2 Queries are ordinarily acknowledged within 24 hours and resolved within a reasonable time thereafter.

Changes to this Policy

12.1 We may revise this Policy from time to time to reflect changes in our practices or in applicable law, including the phased implementation of the Digital Personal Data Protection Act, 2023 and rules notified under it. The updated Policy takes effect once published on the Platform; continued use of the Platform after that date constitutes acceptance of the revised Policy.

Governing Law and Jurisdiction

13.1 This Policy is governed by the laws of India, including the Information Technology Act, 2000 and rules made under it, and the Digital Personal Data Protection Act, 2023, as applicable from time to time. Courts at Hyderabad, Telangana, have exclusive jurisdiction over any dispute arising from it.

Acceptance

14.1 By registering on, or using, the Platform, you confirm having read, understood, and agreed to this Privacy Policy in its entirety.