Privacy Policy
Last updated: March 2025
1. Introduction
This Privacy Policy describes how we collect, use, store, and protect information in connection with ClinicOps (online appointment booking and clinic management) and related applications. We are committed to protecting your privacy and handling personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, where applicable.
2. Information We Collect
We may collect information you provide when you register or use our services, such as name, email, phone number, clinic and doctor details, appointment and booking data, and similar information necessary to provide the services. When you use our web application, we may collect information such as IP address and browser type as permitted by law. We do not sell your personal data to third parties.
3. Purpose and Use
We use the information we collect to provide, operate, and improve our services; to authenticate users and manage accounts; to send service-related communications; to comply with legal obligations; and to protect the security of our systems and users. Processing is done for specified, clear and lawful purposes in line with applicable Indian data protection requirements.
4. Consent and Lawful Basis
Where required under Indian law (including the DPDP Act), we process personal data based on your consent or other lawful grounds permitted under the Act. By using our services, you consent to the collection and use of your information as described in this policy. You may withdraw consent or exercise your rights as described below, subject to applicable legal and contractual constraints.
5. Your Rights (Data Principal Rights)
Under the Digital Personal Data Protection Act, 2023, you have the right to access your personal data, to correct or update inaccurate data, to erase data in accordance with the law, and to nominate another person in the event of death or incapacity. You also have the right to grievance redressal. To exercise these rights, please contact us using the details provided on the ClinicOps website. We will respond in accordance with the timelines prescribed under applicable law.
6. Data Retention and Security
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and as required by applicable Indian law. We implement reasonable security practices and procedures to protect personal data from unauthorised access, alteration, disclosure or destruction, in line with the requirements under the IT Act and rules and the DPDP Act. You are responsible for keeping your login credentials secure.
7. Healthcare and Patient Data
If you use our services to process patient or other health-related data, you are responsible for ensuring that your collection, use, storage and disclosure comply with applicable Indian laws, including medical ethics, consent requirements, and any sector-specific rules. We process such data only as necessary to provide the services you request and in accordance with this policy and our agreements.
8. Sharing and Third Parties
We may share data with service providers who assist in operating our services, subject to confidentiality and data-protection obligations. We may disclose data where required by law or by order of a competent authority in India. We do not sell your personal data.
9. Children
Our services are not directed at individuals below 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us so we can take steps to delete it in accordance with the law.
10. Grievance Officer
In accordance with Indian law, we may designate a Grievance Officer for the redressal of complaints relating to the processing of personal data. Contact details for the Grievance Officer (if designated) will be made available on the ClinicOps website.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Continued use of the services after changes constitutes acceptance of the updated policy, subject to your rights under applicable law.
12. Contact
For any questions, requests or complaints regarding this Privacy Policy or your personal data, please contact us through the contact details provided on the ClinicOps website.