Privacy Policy
Last updated: [DATE TO BE SET AT LAUNCH]
Who we are
This site is operated by Dr. Varun Soni (PT), providing online physiotherapy consultations across India. For any question about your data, contact us on WhatsApp at +91 96800 49176 or at [GRIEVANCE CONTACT EMAIL].
What we collect
When you submit the booking form on this site, we collect:
- Your name, age and gender
- Your email address, if you choose to give it — used only to send a calendar invite
- Your preferred consultation date and time
- The concern you select and the description of your symptoms that you write
- Which section of the page you booked from
We do not ask for your phone number on the form. Submitting the form opens WhatsApp so you can send your request yourself — at that point your WhatsApp number becomes visible to us the same way it would in any WhatsApp conversation, and is not something we separately store on this site.
We do not use advertising cookies or third-party tracking scripts. Your theme preference (light or dark) is stored in your browser's local storage and never leaves your device.
Sensitive personal data
Your age, gender and description of symptoms are health data, treated as sensitive personal data under India's Digital Personal Data Protection Act, 2023. We only collect it because you actively choose to submit the booking form, and we ask for your explicit consent by way of the checkbox before you can submit.
Why we use it, and on what basis
We use your information solely to arrange, deliver and follow up on your consultation — including creating a calendar invitation and contacting you on WhatsApp to confirm. Our lawful basis is the consent you give when submitting the form. We do not sell your data, and we do not use it for marketing unless you separately ask us to.
Where it goes
Submitting the form does two things: it records your request in a private Google Sheet controlled by the practice, and it opens WhatsApp with your request pre-filled so that you can send it. Your message is therefore also processed by WhatsApp (Meta) under their own privacy terms. Calendar invitations are sent using Google Calendar. We do not share your data with anyone else.
How long we keep it
We retain consultation records for [RETENTION PERIOD — e.g. 3 years], after which they are deleted. If you ask us to delete your data sooner, we will do so unless we are required to retain it to meet a legal or clinical-record obligation.
Your rights
Under the DPDP Act 2023 you may:
- Ask what personal data we hold about you
- Ask us to correct anything inaccurate or incomplete
- Ask us to erase your data
- Withdraw your consent at any time — this does not affect processing already carried out
- Nominate someone to exercise these rights on your behalf
- Raise a grievance with us, and escalate to the Data Protection Board of India
To exercise any of these, message us on WhatsApp or write to [GRIEVANCE CONTACT EMAIL].
Reviews
Reviews are only published from people we invite by a private link after a consultation, and only after the practice approves them. We publish the name and city you supply — please do not include anything in a review you would not want shown publicly. You can ask us to remove your review at any time.
Security
Booking data is held in a Google account protected by the practice's own credentials, and the administration panel is restricted to the practice's Google account. No booking data is ever readable from this public website.
Children
If the patient is under 18, a parent or legal guardian must submit the booking and give consent on the child's behalf.
Changes
If we change this policy we will update the date at the top of this page.