Privacy Policy

Last updated: 7 July 2026 · Prepared with reference to the Digital Personal Data Protection Act, 2023 (India)

1. Who we are

This website is operated by Care Clinic, Shree Durga Palace, Tagore Hill Road, Morabadi, Ranchi - 834008 ("Care Clinic", "we"). For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the data fiduciary for the personal data described in this policy.

2. What personal data we collect

• Booking details you give us: your name, mobile number, chosen doctor, appointment date and time, and any optional note you add (for example, symptoms).
• Consent record: the date and time you accepted this policy while booking.
• Technical data: your device's network address, used only to prevent misuse of the booking system (for example, blocking automated spam). It is not used to profile you.

We do not collect payment information — there is no online payment on this website.

3. Why we collect it (purpose)

• To book, confirm, manage, reschedule or cancel your appointment.
• To send you an appointment confirmation on WhatsApp, and to alert the clinic and the concerned doctor about your booking.
• To contact you if your appointment needs to change.
• To keep the booking system safe from spam and misuse.

We do not sell your data, and we do not use it for advertising.

4. Consent

We process your booking details on the basis of the consent you give by ticking the consent box when you book. You may withdraw consent at any time by contacting us (Section 8); withdrawing consent will mean we cancel any pending appointment made through the website, and it does not affect processing done before withdrawal.

5. Who your data is shared with

• The doctor you book: receives your name, appointment time and phone number.
• Meta Platforms (WhatsApp Business Platform): processes the delivery of your confirmation message, as our messaging service provider.
• Supabase Inc.: hosts our secure booking database, as our data processor.

These providers act on our instructions. We do not share your data with anyone else unless the law requires it.

6. Storage and security

Your data is stored in a secured database (hosted in the Mumbai, India region) protected by access controls: website visitors cannot read booking data, and only authenticated clinic staff can access it. Messages to you are delivered over WhatsApp's encrypted network.

7. How long we keep it (retention)

In line with the data-minimisation principle of the Digital Personal Data Protection Act, 2023, we keep booking records for 12 months from the appointment date, for clinic administration and continuity of care. After 12 months the records are automatically and permanently deleted from our systems by a scheduled process — we do not keep them indefinitely. You may also ask us to delete your records earlier at any time (Section 8), subject to any minimum record-keeping required of clinical establishments by law.

8. Your rights & grievance redressal

Under the DPDP Act you have the right to: access a summary of your personal data; ask for correction or updating; ask for erasure; withdraw consent; nominate a person to exercise these rights on your behalf; and to have your grievances addressed.

9. Children

Appointments for persons under 18 should be booked by a parent or lawful guardian, who gives consent on the child's behalf. We do not use children's data for tracking, behavioural monitoring or advertising.

10. Changes to this policy

If we change this policy, the updated version will be published on this page with a new "last updated" date.