Privacy Policy

Last updated: 21 August 2026

Niramay Clinics ("we", "us") respects your privacy. Health information is among the most sensitive information a person can share, and we treat it that way. This policy explains what personal data we collect through our website, phone, WhatsApp and at the clinic, why we collect it, who we share it with, how long we keep it, and the rights you have.

We follow the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000 and its rules on sensitive personal data, and the confidentiality duties that apply to doctors under the Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002.

1. Who we are

Niramay Clinics, comprising the Niramay Diabetes and Heart Care Centre, the Blooming Buds Child and Adolescent Care Centre, Niramay Laboratory and Niramay Pharmacy, 572, Indu Bhaskar Apartments, Dr. N. B. Khare Marg, Dhantoli, Nagpur, Maharashtra 440012. For the purposes of data protection law, Niramay Clinics is the "Data Fiduciary".

Grievance Officer / contact for privacy matters: Dr. Ajay Kaduskar, Niramay Clinics, address as above Email: … · Phone: 0712 2422214

2. What we collect

Information you give us

• Identity and contact details: name, age or date of birth, gender, phone number, email, address, city
• Appointment details: preferred doctor, reason for visit, preferred time
• Health information: medical history, symptoms, examination findings, test results, prescriptions, images such as retinal photographs, and other clinical records created during your care
• For children: the child's details and the parent's or guardian's details
• Billing and payment details (we do not store full card numbers)
• Insurance details, if you ask us to help with a claim

Information collected automatically when you use our website

• Technical data such as device type, browser, pages visited and approximate location derived from IP address, collected through essential cookies and, only if you agree, analytics cookies (see section 10)

We do not ask for detailed medical information through website forms. Please do not upload reports or describe medical history in the online form. Bring them to your visit.

3. Why we use it

We do not sell your data, use it for advertising, or share it with pharmaceutical companies or marketers.

4. Children's data

For patients under 18, we collect and use personal data with the consent of a parent or lawful guardian, who must fill in any online form. We process a child's data only to the extent needed to provide health care and related services, as permitted for healthcare providers under the DPDP Rules. We do not track children's behaviour online or show them targeted advertising.

Adolescents in counselling: what is said in counselling sessions is kept confidential as explained to the young person and parents at the first visit. Information that concerns a child's safety is shared with parents and, where the law requires (for example under the Protection of Children from Sexual Offences Act, 2012), with the appropriate authorities.

5. Who we share it with

Only when needed, and only the minimum necessary:

• Our doctors and clinic staff involved in your care, who are bound by confidentiality
• Other doctors or hospitals you are referred to, with your consent
• Service providers who help us run the website, under contracts that require them to protect your data and use it only on our instructions: Vercel (hosting), Resend (form email delivery), Cloudflare Turnstile (spam protection), Google Analytics (only with your consent), Google Maps and YouTube (load only when you click), and WhatsApp/Meta and Gmail/Google (when you contact us by WhatsApp or email)
• Your insurer or employer only if you ask us to
• Government authorities or courts when required by law, for example disease notification or a court order

Some of our service providers may store data on servers outside India. Where this happens, we transfer data only as permitted under Indian law.

6. WhatsApp, SMS and email

We use WhatsApp, SMS and email for appointment reminders and, if you agree, to share reports. These services are run by third parties with their own privacy terms. Please avoid sending detailed medical information over WhatsApp or email unless we have agreed this with you.

7. How long we keep it

• Medical records: we keep medical records for at least 3 years from your last visit, as required by medical regulations.
• Website enquiries: if you contact us but do not visit, we delete your enquiry within 12 months.
• Analytics data is kept in aggregated form.

When data is no longer needed, it is securely deleted or anonymised.

8. How we protect it

Access to records is limited to staff who need it. We use password-protected systems, secure storage of paper records, encrypted connections (HTTPS) on our website, and contracts with service providers that require reasonable security safeguards. If a personal data breach occurs, we will inform affected people and the Data Protection Board of India as required by law.

9. Your rights

You can ask us to:

• Access a summary of your personal data and how it is used
• Correct, complete or update inaccurate information
• Erase personal data that is no longer needed, except medical records we must keep by law
• Withdraw consent for optional uses, such as reminders. This does not affect care already provided.
• Nominate a person to exercise these rights if you are unable to
• Raise a grievance with our Grievance Officer

You can also request a copy of your medical records, which we provide within 72 hours of a written request, as required by medical regulations.

To exercise any right, contact the Grievance Officer. We will acknowledge your request promptly and respond within the time required by law. If you are not satisfied, you may complain to the Data Protection Board of India.

10. Cookies

• Essential cookies make the website work (for example, remembering your cookie choice). They cannot be switched off.
• Analytics cookies help us understand which pages are useful. They are used only if you click "Accept" on the cookie banner, and you can change your choice at any time from the "Cookie settings" link in the footer.
• We do not use advertising or retargeting cookies.

11. Changes to this policy

We will update this page when our practices or the law change, and show the date of the latest version at the top.