Satya Medical Centre ("we," "us," or "our") which is a unit of Indu Hospital and Research Centre is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our website and WhatsApp appointment booking service.

Hospital Name: Satya Medical Centre
Location: A-98/A, Block A, Sector 34, Noida, Uttar Pradesh 201307, India

1. Information We Collect

When you book an appointment through our WhatsApp service or use our website, we collect the following information:

• Personal Information: Your name and phone number
• Communication Preferences: Your preferred language for communication
• Appointment Details: Your preferred appointment date and time
• Payment Information: Payment details processed through Razorpay for appointment booking fees
• Website Analytics: Anonymous usage data collected through Vercel analytics (cookie-free) to understand website traffic patterns

2. How We Use Your Information

We use the information collected for the following purposes:

• Appointment Booking: To schedule and confirm your medical appointments
• Communication: To send appointment confirmations and communicate with you in your preferred language
• Payment Processing: To process appointment booking fees securely through Razorpay
• Service Improvement: To analyze usage patterns and improve our services
• Appointment Reminders: To send you reminders about upcoming appointments
• Marketing Communications: With your explicit opt-in consent, we may send you information about hospital services, health tips, and special offers. You can opt-out at any time by contacting us

3. Legal Basis for Processing (DPDPA Compliance)

We process your personal data under the following legal bases as per the Digital Personal Data Protection Act (DPDPA) 2023:

• Consent: For appointment booking and optional marketing communications
• Legitimate Interests: For appointment management and service improvement
• Legal Obligation: For maintaining medical records as required under Indian healthcare regulations

4. Data Storage and Security

We take the security of your personal information seriously. Your data is stored on secure servers located in India. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. All data transmission is encrypted using industry-standard security protocols.

5. Data Retention

We retain your appointment and personal information for a period of 5 years from the date of your last appointment. This retention period is maintained for:

• Compliance with legal and regulatory requirements under Indian healthcare laws
• Medical record-keeping obligations
• Potential legal claims and audit purposes

6. Third-Party Services and Data Sharing

We use the following third-party services to provide our appointment booking system:

WhatsApp Business API (Meta)

Our appointment booking system uses WhatsApp Business API provided by Meta Platforms, Inc. When you communicate with us via WhatsApp, your messages and data are also subject to WhatsApp's Privacy Policy and Meta's Privacy Policy.

Razorpay

Payment processing is handled by Razorpay. Your payment information is processed in accordance with Razorpay's Privacy Policy and PCI-DSS compliance standards. We do not store your UPI, credit/debit card, or any other payment credentials information on our servers.

7. Appointments for Minors

We accept appointment bookings for children and minors (individuals under 18 years of age). If you are booking an appointment for a minor:

• You must be the parent or legal guardian of the minor
• By booking an appointment, you provide consent for the collection and processing of the minor's information
• You are responsible for accompanying the minor to their appointment
• You have the right to access, review, and request corrections to the minor's information

8. Cookies and Tracking

Our website uses cookie-free analytics. This means:

• We collect anonymous usage statistics to understand website traffic
• No cookies are placed on your device
• Your browsing activity is not tracked across other websites
• The data collected is aggregated and cannot be used to identify you personally

9. Data Security Measures

We implement comprehensive security measures including:

• Encryption of data in transit and at rest
• Secure server infrastructure hosted in India
• Regular security audits and updates
• Access controls and authentication mechanisms
• Employee training on data protection and confidentiality

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will indicate any material changes by posting the updated policy on our website with a new "Last Updated" date

Your continued use of our services after such modifications constitutes your acknowledgment and acceptance of the updated Privacy Policy.

12. Children's Privacy

While we provide medical services to patients of all ages, our appointment booking service is intended to be used by adults (18 years or older). Parents or legal guardians must book appointments on behalf of minors and provide necessary consent for data processing.

13. International Data Transfers

Your data is stored on servers located in India. We do not transfer your personal data outside of India except as required by third-party services (WhatsApp/Meta, Razorpay) which have their own data protection measures in place.

14. Consent

By using our website and WhatsApp appointment booking service, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. For marketing communications, we will obtain your explicit opt-in consent separately.