Privacy Policy
Apki Fertility Expert — Swastik Homoeopathic Clinic
1. Who We Are
Swastik Homoeopathic Clinic, operating online as “Apki Fertility Expert” (“we”, “us”, “the Clinic”), is the Data Fiduciary responsible for the personal data you share with us through this website (drtejasvisharma.in) and in the course of your care under Dr. Tejasvi Sharma, M.D. (Homoeopath).
2. What Personal Data We Collect
We collect the following categories of personal data when you register, book an appointment, or use the patient portal:
- Identity information: name, email address, phone number
- Account credentials: a securely hashed password (we never store your password in plain text)
- Health-related information: your stated medical concern, symptoms, age, and any details you share during consultation or in booking notes
- Booking and consultation records: appointment dates, times, consultation mode (online or in-clinic), and consultation outcomes
Health information is “sensitive personal data” and is handled with additional care, as described in this policy.
3. Why We Collect It (Purpose of Processing)
We collect and use your personal data only for the following purposes:
- To create and manage your patient account
- To verify your identity and authenticate your login
- To schedule, confirm, and manage your consultations
- To allow Dr. Tejasvi Sharma to review your concern ahead of a consultation and provide appropriate care
- To contact you about your booking, including confirmation calls and, where applicable, WhatsApp messages for payment
We do not use your personal data for advertising, and we do not sell or rent your data to any third party.
4. Legal Basis: Your Consent
Under the DPDP Act, we process your personal data on the basis of your consent. By registering on this website, you consent to the collection and use of your personal data, including health-related information, for the purposes described in this policy. You may withdraw this consent at any time by contacting us using the details in Section 9; withdrawing consent may, however, limit our ability to provide consultation or booking services to you.
5. Who We Share Data With
We do not share your personal or health data with any third party for their own purposes. The only point at which a third-party platform is involved is when payment for a consultation is coordinated over WhatsApp; in that case, only the minimum information necessary to identify your booking and process payment is shared, and WhatsApp’s own privacy practices govern that communication channel. Our underlying technology infrastructure (cloud hosting and email delivery) is provided by Amazon Web Services (AWS), which acts as a Data Processor strictly on our instructions and does not use your data for its own purposes.
6. How Long We Keep Your Data (Retention)
We retain patient account information and consultation records for 3 years from the date of your most recent consultation or interaction with the Clinic, in line with standard medical record-keeping practice. After this period, your personal data will be securely deleted or anonymized, unless a longer retention period is required by law or you have an ongoing course of treatment with us.
7. How We Protect Your Data
We take reasonable security safeguards to protect your personal data, including:
- Passwords are stored using one-way cryptographic hashing (PBKDF2), never in plain text
- All data is transmitted over encrypted (HTTPS) connections
- Access to patient records is restricted to authorized clinic personnel
- Our infrastructure is hosted on AWS with industry-standard security controls
8. Your Rights as a Data Principal
Under the DPDP Act, you have the right to:
- Access a summary of the personal data we hold about you
- Request correction or updating of inaccurate or incomplete data
- Request erasure of your personal data, once it is no longer needed for the purposes it was collected for
- Withdraw your consent at any time
- Register a grievance regarding how your data is handled
To exercise any of these rights, please contact us using the details in Section 9. We will respond within a reasonable time.
9. Grievance Redressal & Contact
If you have any questions, concerns, or complaints about how your personal data is handled, please contact our designated privacy contact at privacy@drtejasvisharma.in. We aim to acknowledge and address all privacy-related requests promptly.
10. Data Breach Notification
In the unlikely event of a personal data breach that affects you, we will notify you and the Data Protection Board of India as required under the DPDP Act and Rules.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this document indicates when it was last revised. Continued use of our services after an update constitutes acceptance of the revised policy.