Privacy Policy | Medcare Bongaigaon

This website is run by Medcare Diabetes & Obesity Clinic ("Medcare", "we", "us"), Chapaguri Road, opposite Domino's, North Bongaigaon, Gurunanak Nagar, Bongaigaon, Assam 783380, owned by Dr. Tamoghna Das. Phone: +91 60031 21297. Email: medcarebongaigaon@gmail.com. For this policy, Dr. Tamoghna Das, as owner of Medcare, decides why and how your personal data is used. Under the Digital Personal Data Protection Act, 2023 (DPDP Act), this makes Medcare the "data fiduciary".

This policy explains how we handle personal data you share with us through this website, by phone, WhatsApp or email, and at the clinic. It applies to patients, family members and visitors to this website.

Through this website

• Booking form: patient name, mobile number, age, reason for visit, preferred date and time, town (optional), and for patients under 18, the guardian's name and consent
• Contact by email or WhatsApp: the details you choose to send
• Technical data: basic device and browser data needed to run and secure the website. With your consent only, anonymous usage data through Google Analytics (see section 9)

We ask you not to send detailed medical information through the website form.

At the clinic

• Identity and contact details
• Medical history, symptoms, examination findings, test results, prescriptions and reports
• Payment records (we do not store full card details)
• Photos or videos only with separate written consent

• To arrange, confirm and change appointments
• To provide medical care, tests and follow-up
• To keep medical records as required by law
• To contact you about your care and reports
• To answer your questions and complaints
• To keep the website working and secure
• To understand, in anonymous form, how the website is used (only with your consent)

We do not sell your personal data. We do not use it for advertising. We do not share it with drug companies.

We use your personal data:

• with your consent, which you give when you submit the booking form or share information with us; and
• for legitimate uses allowed under the DPDP Act, such as providing medical treatment, responding to a medical emergency, and meeting legal duties such as keeping medical records.

You can withdraw consent at any time (section 10). Withdrawal does not affect care already provided or records we must keep by law.

For patients under 18, we ask a parent or legal guardian to give consent, both on the website form and at the clinic. We do not knowingly collect children's data for any purpose other than their care, and we do not track or profile children.

Only as needed:

• Clinic staff involved in your care, who are bound to keep it confidential
• Other doctors, labs or hospitals you are referred to or choose, with your knowledge
• Service providers that help us run the clinic and website: messaging and email (WhatsApp, email), secure cloud storage, website hosting, a form email service, a spam check service, and, with consent, website analytics. Device makers' secure portals may process test data from monitoring devices.
• Authorities, when the law requires it (for example, notifiable diseases or a court order)

Some of these providers may store data outside India, under their own security and privacy terms and in line with Indian law.

• Medical records: at least 3 years from your last visit, or longer if needed for a legal case or complaint
• Website booking requests that do not lead to a visit: 12 months, then deleted
• Analytics data (only with consent): 2 months After these periods, we delete or securely destroy the data.

The website uses essential cookies that are needed for it to work, such as remembering your cookie choice. With your consent only, we use Google Analytics to understand which pages are useful. No health information or form details are sent to analytics. You can change your choice at any time through "Cookie settings" in the footer.

Under the DPDP Act you can:

• ask what personal data we hold about you and how it is used
• ask us to correct or update inaccurate data
• ask us to delete data we no longer need to keep by law
• withdraw your consent
• nominate another person to exercise your rights if you die or become unable to
• raise a complaint with us, and if not satisfied, with the Data Protection Board of India

To use any of these rights, contact our privacy contact (section 12). We may need to confirm your identity first. Copies of medical records are provided as required under medical regulations.

• Paper records are kept in locked storage at the clinic
• Digital records are kept in password-protected accounts with two-step verification
• Only people who need the data for your care can access it
• The website uses encrypted connections (HTTPS) and does not store form data in a database If a data breach affects you, we will inform you and the Data Protection Board as the law requires.

Privacy contact: Dr. Tamoghna Das Email: medcarebongaigaon@gmail.com · Phone: +91 60031 21297 Address: as in section 1

We aim to acknowledge your complaint or request within 24 hours and to resolve it within 4 days. If a request needs more time, for example copies of older paper records, we will tell you why and when to expect it.

We may update this policy. The date at the top shows the latest version. Important changes will be shown on the website.