Privacy Policy

Last Updated: 04 November 2026

At Dr. Aditya Shah's website (https://dradityagastro.com/), we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains what personal information we collect, how and why we use it, when it may be shared, how long it may be retained, and how you can exercise your privacy rights.

This policy applies to visitors who access our website, submit contact or appointment forms, or communicate with us through the contact details provided on this website.

Identity of the Data Fiduciary

The entity responsible for determining the purpose and means of processing personal data through this website is:

Legal Name: [Insert the actual legal name of the doctor, clinic, hospital or operating entity]
Website: https://dradityagastro.com/
Privacy Contact: dradishah@gmail.com
Phone: +91 6366109933

For this Privacy Policy, references to "we", "us" or "our" mean the above-mentioned entity.

1. Personal Information We Collect

Depending on how you interact with our website and services, we may collect the following categories of personal information:

1.1 Personal Identification Information

• Full name.
• Other identifying information voluntarily provided by you.

1.2 Contact Information

• Mobile number.
• Email address.
• Contact details provided through website forms or other communication channels.

1.3 Appointment and Enquiry Information

• Appointment requests and preferred appointment details.
• Questions, messages and service-related enquiries.
• Information required to respond to or manage your appointment request.

1.4 Health-Related Information

• Medical history, symptoms, reports or other health-related details that you voluntarily share with us through appointment forms or communication channels.

Please avoid submitting unnecessary medical information through general website contact forms. Where detailed medical information is required, we will communicate the appropriate method for providing it.

1.5 Technical and Website Usage Information

Where applicable and depending on the technologies enabled on our website, we may collect:

• Internet Protocol (IP) address.
• Browser type and version.
• Device and operating system information.
• Website pages visited and interaction information.
• Cookie identifiers and website performance information.

We aim to collect only personal information that is reasonably necessary for the purposes described in this policy.

2. Purpose of Collecting and Processing Personal Information

We may process your personal information for the following specific purposes:

• To receive, review and respond to appointment requests.
• To contact you regarding appointment availability, scheduling and confirmations.
• To respond to questions and enquiries submitted through the website.
• To provide healthcare-related information, assistance or services requested by you.
• To communicate information relevant to your appointment or enquiry.
• To maintain website functionality, security and performance.
• To understand website usage and improve our website and services, where applicable.
• To comply with applicable legal, regulatory and record-keeping requirements.

We will not knowingly use your personal information for purposes unrelated to those explained to you unless we obtain the required consent or have another valid basis permitted under applicable law.

3. Lawful Basis and Consent

We process personal information in accordance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act), and the rules made under it, to the extent they are applicable and in force.

Where consent is the basis for processing, we will seek consent through a clear affirmative action, such as selecting an appropriate consent checkbox before submitting a form.

Where required, we will explain:

• The categories of personal information being collected.
• The specific purposes for which the information will be processed.
• How you can withdraw consent.
• How you can exercise your privacy rights and raise a grievance.

Where processing is permitted under another lawful ground under applicable law, we may process personal information on that basis.

Submitting a form or using the website will not be treated as blanket consent for unrelated purposes.

4. How We Share Personal Information

We do not sell your personal information.

We may share personal information only where necessary for the purposes explained in this policy, where you have provided the required consent, or where sharing is otherwise permitted or required by applicable law.

Depending on the actual services used, information may be shared with:

4.1 Authorised Healthcare Personnel

Relevant doctors, clinic or hospital personnel, or healthcare professionals involved in responding to your enquiry or providing requested healthcare-related services.

4.2 Service Providers

Third-party providers who support website hosting, website maintenance, communication, appointment management, analytics or other technical operations.

4.3 Legal and Regulatory Authorities

Government authorities, regulators, courts or law enforcement agencies where disclosure is required or authorised under applicable law.

We take appropriate steps to ensure that service providers who process personal information on our behalf are subject to suitable contractual and confidentiality obligations.

Important: The actual names or categories of service providers used by this website should be disclosed accurately wherever required. This may include hosting, email, messaging and analytics providers.

5. Data Security

We take reasonable steps to protect personal information against unauthorised access, disclosure, alteration, misuse, destruction or loss.

Depending on the systems used, appropriate technical and organisational measures may include:

• Restricting access to personal information to authorised personnel.
• Using suitable access controls and authentication measures.
• Maintaining appropriate security measures for website forms and hosting environments.
• Taking reasonable steps to protect information transmitted through the website.
• Reviewing and addressing identified security vulnerabilities.
• Maintaining appropriate procedures for handling security incidents.

We periodically review relevant security practices and take corrective steps where necessary.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

6. Data Retention and Deletion

We retain personal information only for as long as it is reasonably necessary to fulfil the purpose for which it was collected, or for the period required under applicable legal, medical, regulatory or record-keeping obligations.

Retention may depend on the type of information and the reason for collecting it.

For example:

• Appointment and enquiry information may be retained for responding to and managing requests.
• Healthcare-related information may be retained in accordance with applicable medical and legal record-keeping requirements.
• Website technical and analytics information may be retained according to the applicable service configuration and retention settings.

When personal information is no longer required and there is no legal reason to retain it, we will take appropriate steps to delete or securely dispose of it.

You may request erasure of your personal information, subject to applicable legal obligations and any lawful reason for continued retention.

7. Your Privacy Rights

Subject to the applicable provisions and commencement of the DPDP Act and Rules, you may exercise the following rights in relation to your personal information:

7.1 Right to Access Information

You may request information about the personal data being processed and other details made available under applicable law.

7.2 Right to Correction and Completion

You may request correction of inaccurate or misleading personal information and completion of incomplete personal information.

7.3 Right to Erasure

You may request erasure of personal information where applicable, subject to legal and regulatory requirements that require us to retain certain records.

7.4 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time.

7.5 Right to Grievance Redressal

You may raise a concern or complaint regarding the processing of your personal information or the handling of your privacy-related requests.

7.6 Right to Nominate

You may nominate another individual to exercise your applicable privacy rights in the event of your death or incapacity, in accordance with applicable law.

To exercise these rights, please contact us using the details provided in the Contact and Grievance Redressal section below.

8. Withdrawal of Consent

Where we process your personal information based on consent, you may withdraw that consent at any time.

You can submit a withdrawal request using the following contact details:

Email: dradishah@gmail.com
Phone: +91 6366109933

Please provide sufficient details to help us identify your earlier request or the information concerned. We may request reasonable information to verify your identity before acting on the request.

After receiving a valid withdrawal request, we will take appropriate steps to stop the relevant consent-based processing and inform relevant processors where required, unless continued processing is permitted or required under applicable law.

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

Please note that withdrawing consent may affect our ability to provide certain services that depend on the relevant information.

9. Contact and Grievance Redressal

If you have any questions, concerns or complaints about how your personal information is collected, used, stored, shared or processed, you may contact our privacy contact using the details below.

Privacy and Grievance Contact

Name / Designation: [Insert the authorised privacy or grievance contact person's name/designation]
Email: dradishah@gmail.com
Phone: +91 6366109933

When submitting a request, please:

• Clearly mention that your request relates to personal data or privacy.
• Describe your concern or the right you wish to exercise.
• Provide the relevant contact details or reference information needed to identify your records.
• Avoid sending unnecessary medical reports or sensitive information in your initial complaint.

We will review and respond to valid requests in accordance with applicable laws and prescribed timelines.

If your grievance is not satisfactorily addressed, you may pursue the available remedies under applicable data protection laws, including approaching the Data Protection Board of India where the relevant provisions and procedures are in force.

10. Cookies and Third-Party Technologies

Our website may use cookies and similar technologies to support website functionality, security, performance and analytics.

Depending on the technologies actually enabled, these may collect information such as:

• Browser and device information.
• IP address.
• Website usage and browsing activity.
• Cookie identifiers.
• Website performance information.

Cookies may be used for essential website functions and, where enabled, analytics or other purposes.

Where required under applicable law, we will obtain the necessary consent before using non-essential cookies or tracking technologies that process personal information.

You may manage or disable cookies through your browser settings. Disabling certain cookies may affect some website functions.

Third-party services used on the website may process information under their own privacy policies and applicable terms.

Website-specific disclosure: [Insert the actual names of analytics, advertising, hosting or other tracking services used on this website, if any.]

11. Children's Personal Data

We recognise the importance of protecting children's personal information.

Where personal data relating to a child below 18 years of age is processed, we will comply with the applicable requirements concerning verifiable parental or lawful guardian consent, subject to the exemptions and conditions permitted under applicable law.

We will not knowingly process children's personal information in a manner prohibited by applicable law.

If you believe that a child has submitted personal information through our website without the required consent, please contact us using the details in this policy so that we can review the matter and take appropriate action.

12. Personal Data Breach Management

We take reasonable measures to prevent and respond to personal data breaches.

If a personal data breach occurs, we will take appropriate steps, as applicable, to:

• Investigate and assess the incident.
• Take steps to contain and minimise its impact.
• Prevent further unauthorised access or disclosure.
• Take corrective and remedial measures.
• Notify affected individuals and relevant authorities in accordance with applicable legal requirements and prescribed timelines.

13. Data Processing Outside India

Where our service providers or technology partners process personal information outside India, such processing will be subject to applicable Indian data protection laws and any restrictions or requirements imposed by the Central Government.

[Confirm whether any website or service provider actually processes personal data outside India before publishing this statement.]

14. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in our website, services, data processing practices, technology or applicable legal requirements.

Any revised version will be published on this page with an updated revision date.

We encourage you to review this page periodically to understand how your personal information is handled.

15. Contact Us

For questions about this Privacy Policy, your personal information or any privacy-related request, please contact us:

Dr. Aditya Shah

Email: dradishah@gmail.com
Phone: +91 6366109933
Website: https://dradityagastro.com/

Privacy Policy Last Updated: 04 November 2026