In short
- We only collect the information needed for your appointment, treatment and payment.
- We never sell your data. It is shared only with essential service providers (payments, WhatsApp, video calls).
- Your card / UPI details never reach us; Razorpay handles them directly.
- You can view, correct or delete your data. Just write to our Grievance Officer.
01Who we are
This Privacy Policy explains how Hari Om Clinic, SH-88, Bhuteshwar Chowk, Bibhutipur, Samastipur, Bihar - 848236 ("we", "us", "the clinic") collects, uses, shares and protects personal information when you visit this website, book an appointment, pay online, chat with us on WhatsApp or take a video consultation.
We follow the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under it, and the confidentiality duties that apply to registered medical practitioners in India.
02Information we collect
| Type | Examples | When |
|---|---|---|
| Identity and contact | Name, mobile number, age, gender, email | Booking, registration, contact form |
| Health information | Symptoms or notes you share, consultation notes, prescriptions, reports | Booking, visit, video consultation |
| Payment information | Amount, order and payment reference IDs, payment status | Online payment |
| Messages | WhatsApp messages you send to the clinic number | When you message us |
| Technical data | IP address, browser type, session cookie | Every website visit |
We do not receive or store your card number, CVV, UPI PIN or net-banking password. These are entered directly on Razorpay's secure checkout.
03How we use your information
- To book, confirm, reschedule and remind you about appointments.
- To diagnose, treat and follow up on your health condition.
- To collect payments, issue receipts and process refunds.
- To run video consultations and send you the joining link.
- To answer your enquiries on phone, WhatsApp or email.
- To meet legal, tax and medical record-keeping obligations.
- To keep the website secure and fix problems.
We do not use your health information for advertising, and we do not sell personal information to anyone.
04Consent and lawful use
By booking an appointment or submitting a form you consent to us processing your information for the purposes above. Health information is processed only to provide care to you or where the law requires it.
You may withdraw consent at any time by contacting the Grievance Officer. Withdrawal does not affect processing already done, and we may still keep records that the law requires us to keep.
06WhatsApp messages
If you give us your mobile number, we may send appointment-related messages on WhatsApp. When you message the clinic number, an automated assistant may reply first and hand over to our staff.
Please do not send sensitive reports on WhatsApp unless the doctor asks for them. To stop non-essential messages, tell our staff on WhatsApp or by phone.
07Storage and security
Data is stored on secured servers. Access to the admin panel is limited by role (admin, doctor, staff) and protected by passwords. The website uses HTTPS, and payment and receipt links are protected with signed codes.
No system is completely secure. If we learn of a breach that affects you, we will inform you and the authorities as the law requires.
08How long we keep it
- Medical records: at least 3 years from the last visit, as required for registered medical practitioners.
- Payment and tax records: as long as tax laws require (usually 8 years).
- Enquiries and messages that did not lead to a visit: deleted or anonymised when no longer needed.
09Your rights
You have the right to:
- Ask what personal information we hold about you and get a copy of your medical records.
- Ask us to correct or update inaccurate information.
- Ask us to erase information we no longer need to keep by law.
- Nominate a person to exercise these rights if you are unable to.
- Raise a grievance with us and, if unresolved, with the Data Protection Board of India.
Write to the Grievance Officer using the contact details at the end of this page. We respond within 15 days.
11Children and dependants
Appointments for patients under 18, or for anyone who cannot consent, must be booked by a parent or legal guardian, who consents on their behalf.
12Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows the latest version. Significant changes will be shown on the website.