Privacy Policy

Website: https://drshagunrao.com/

1. Introduction

Dr. Shagun Rao (“we”, “our” or “us”) respects the privacy of website visitors and patients. This Privacy Policy explains how personal information may be collected, used, stored, disclosed, and protected when you visit our website, request an appointment, or communicate with the clinic.

We aim to handle personal information confidentially and in accordance with applicable Indian laws and professional medical confidentiality obligations.

2. Information We May Collect

Depending on how you interact with the website and clinic, we may collect the following categories of information:

A. Contact and identification information

  • Name
  • Telephone number
  • Email address
  • Contact preferences
  • Other details voluntarily supplied for appointment coordination

B. Appointment information

  • Preferred appointment date or time
  • Appointment status
  • Consultation and communication records relevant to the requested service

C. Medical information

Where necessary for providing healthcare, the clinic may collect relevant medical history, symptoms, reports, diagnoses, prescriptions, treatment records, and other health information.

Please do not enter detailed medical histories or upload medical reports through a general inquiry form unless the form is specifically designed and secured for that purpose.

D. Technical information

When you visit the website, technical information may be collected through server logs or configured analytics tools, such as IP address, browser type, device information, pages visited, and website usage data.

Cookies or similar technologies may be used depending on the website’s actual configuration and your applicable preferences.

3. How We Use Information

Information may be used, as appropriate, to:

  • Respond to inquiries.
  • Schedule, confirm, or manage appointments.
  • Provide healthcare and maintain relevant medical records.
  • Communicate necessary information about consultations or services.
  • Maintain website security and functionality.
  • Improve website performance and user experience.
  • Meet applicable legal, regulatory, accounting, or professional obligations.
  • Handle complaints, privacy requests, or legal claims.

We will not use personal information for unrelated purposes in a manner inconsistent with applicable law and the information provided to you.

4. Consent and Lawful Processing

Where consent is required by applicable law, we will seek consent in an appropriate manner and explain the relevant purpose of processing.

Consent to receive marketing communications, where offered, will be separate from consent necessary for healthcare or appointment administration. Refusing optional marketing consent will not by itself prevent access to medical care.

The clinic may also process information where permitted or required by applicable law, including for healthcare, medical records, legal compliance, or the establishment, exercise, or defense of legal claims, as applicable.

5. Disclosure of Information

We do not intend to sell patients’ personal information.

Information may be shared, where appropriate and lawful, with:

  • Authorized clinic staff who need the information for their duties.
  • Other treating healthcare professionals involved in care, where appropriate.
  • Website hosting, appointment, email, communication, payment, or technical service providers engaged to support clinic operations.
  • Public authorities, regulators, courts, or law enforcement agencies where disclosure is legally required or otherwise permitted by law.
  • Other recipients authorized by the patient or their lawful representative, where appropriate.

Service providers should receive only the information reasonably necessary for their assigned function and should be subject to appropriate confidentiality and security arrangements.

6. Medical Confidentiality

Medical information will be treated as confidential, subject to applicable legal requirements and recognized exceptions.

Information may be disclosed where the patient has validly authorized disclosure, where it is necessary for appropriate care and legally permitted, or where disclosure is required or authorized by law.

We will take particular care with clinical photographs, diagnostic reports, case histories, and other information that could identify a patient.

7. Cookies and Analytics

The website may use essential cookies and, if configured, analytics or other optional technologies.

Where applicable, users will be provided with appropriate information and choices for optional cookies or similar technologies. You can also manage cookies through your browser settings.

The actual cookies and third-party tracking tools used by the website should be listed here after a technical audit.

8. Data Storage, Security, and Retention

We take reasonable organizational and technical measures appropriate to the information handled to reduce the risk of unauthorized access, loss, alteration, disclosure, or misuse.

Such measures may include access restrictions, passwords, secure hosting, backups, confidentiality obligations, and appropriate vendor controls.

Personal and medical information will be retained for the period reasonably necessary for the stated purpose, applicable medical-record requirements, professional obligations, and other legal requirements. Information may be retained longer where legally necessary.

When information is no longer required and retention is not legally necessary, it should be securely deleted or anonymized, as appropriate.

No method of electronic transmission or storage can be guaranteed to be completely secure.

9. Your Privacy Requests

Subject to applicable law, you may contact the clinic to:

  • Request information about personal data held by the clinic.
  • Request correction of inaccurate information.
  • Request deletion where permitted and where retention is not legally required.
  • Withdraw consent for processing that relies on consent.
  • Raise a privacy complaint.
  • Exercise any other rights available under applicable law.

Withdrawing consent does not invalidate processing lawfully carried out before withdrawal. It may also affect services that cannot reasonably be provided without the relevant information.

The clinic may need to verify your identity or authority before responding. Medical records may need to be retained where required by law or professional obligations.

10. Children and Representatives

Where information concerns a child or a person unable to provide legally valid consent, the clinic will follow applicable requirements concerning parental, guardian, or legally authorized representative involvement.

The website should not knowingly collect children’s personal information through general forms without appropriate safeguards.

11. Third-Party Websites and Communication Platforms

If you use an external appointment service, map, payment gateway, email platform, or messaging application, that service may process information under its own policies and terms.

Please exercise care when sending sensitive medical information through channels that have not been approved by the clinic for that purpose.

12. Data Breaches and Complaints

If a personal data incident occurs, the clinic will assess it and take appropriate action in accordance with applicable legal and regulatory requirements, including any applicable notification obligations.

For privacy concerns, please contact the clinic using the details below. We will review and respond to complaints within a reasonable period and in accordance with applicable requirements.

13. Contact for Privacy Matters

Privacy Contact: Dr. Shagun Rao / Authorized Clinic Representative
Address: 301, 3rd Floor, Fortuna Building, Shivar Chowk, Above Radha Krishna Veg Restaurant, Opposite McDonald’s, Pimple Saudagar, Haveli, Pune – 411027.
Email: dr.p.madhu.rao@gmail.com
Phone: 9096901123

14. Changes to This Policy

This Privacy Policy may be updated to reflect changes in clinic practices, website functionality, or applicable law. The revised version and its updated date will be published on this website.

15. Applicable Law

This policy is intended to operate subject to applicable Indian law, including relevant data-protection requirements and medical confidentiality obligations, as they become applicable to the clinic’s activities.