Privacy Policy

Dr Dilraj Healthcare ("we", "us", "our") operates this website and the services offered on it, including Ayurvedic and wellness product sales and physiotherapy/Ayurvedic consultation bookings. This Privacy Policy explains what personal information we collect, why we collect it, how it is used, stored and shared and the choices and rights you have regarding it.

This Policy is drafted with reference to the Digital Personal Data Protection Act, 2023 ("DPDP Act") and rules made or to be made thereunder, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules") and the Consumer Protection (E-Commerce) Rules, 2020, to the extent applicable to us. By using this website or submitting information to us, you consent to the practices described here.

We collect information directly from you in the following ways:

• Contact form — your name, email address, phone number and the message you send us.
• Appointment booking — your name, email address, phone number, preferred consultation type, date and time and an optional description of your health concern. Your health concern is a category of sensitive personal data under the SPDI Rules — see Sensitive Personal Data below for how we handle it specifically.
• In-progress bookings — to help you pick up a booking you didn't finish, we save your name, email, phone, consultation type, date and time as you type (not your health concern, which is only ever stored once you actually submit the form), linked to a random identifier stored in your browser rather than to your name directly.
• Orders and payments — if you purchase a product, we collect your name, email, phone number and shipping address and process payment through our payment gateway partner (see How We Share Your Information). We do not receive or store your full card, UPI or bank account details ourselves — these are handled directly by our payment gateway. If you choose Cash on Delivery, no payment details are collected online at all; we use your phone number to confirm the order and coordinate its delivery.
• Newsletter — your email address, if you choose to subscribe.
• Automatically, via cookies and similar technology — see Cookies and Similar Technology.

Where you choose to describe a health concern when booking a consultation, that information is treated as sensitive personal data. We collect it only with your explicit consent (given by submitting the form), use it solely to help Dr Dilraj Healthcare prepare for your consultation and do not use it for any other purpose, including marketing. We do not sell, rent or trade health information to any third party. You are never required to enter a health concern to book an appointment — the field is optional.

We use the information we collect to:

• Schedule, confirm, reschedule or cancel appointments;
• Process, ship and fulfil product orders and payments;
• Respond to enquiries submitted through the contact form;
• Send appointment and order status updates by email and/or WhatsApp;
• Send newsletter updates about Ayurvedic tips, offers and wellness content, only if you have subscribed;
• Maintain, secure and improve the website and detect or prevent fraud and abuse; and
• Comply with applicable legal and regulatory obligations.

We use a small number of cookies and browser-storage items:

• Admin session cookie — a strictly necessary, secure cookie used only to keep our staff signed in to the administration dashboard. It is not set for or used to track ordinary visitors.
• Shopping cart — your cart contents are stored in your browser's local storage so items remain in your cart between visits. This data stays on your device and is not transmitted to us until you check out.
• In-progress booking identifier — a random id stored in your browser so we can match a booking you resume to the draft you started (see Information We Collect).
• Analytics — we use Google Analytics to understand how visitors use this website (pages viewed, general location, device type). Google Analytics uses cookies and collects data in accordance with Google's own Privacy Policy. You can opt out of Google Analytics tracking using your browser settings, ad-blocking tools or the Google Analytics Opt-out Browser Add-on.

You can control or delete cookies through your browser settings at any time; disabling them may affect parts of the website, such as staying signed in or keeping items in your cart.

We do not sell your personal information. We share it only with the following categories of service providers, solely to operate the website and fulfil your requests:

• Payment processing — Razorpay, to securely process product payments. Razorpay processes your payment details directly under its own privacy policy; we never see or store your full card or bank details.
• Appointment and order notifications — our email delivery provider and the WhatsApp Business (Meta/WhatsApp Cloud API) platform, used only to send you booking- and order-status updates you would reasonably expect.
• Embedded third-party content — Google Maps (to show our clinic location) and YouTube (to show our videos). These embeds may independently collect data according to Google's and YouTube's own privacy policies when you interact with them.
• Hosting and infrastructure — our website hosting and database providers, who store information on our behalf under appropriate confidentiality obligations.
• Legal reasons — if required to comply with a legal obligation, court order or to protect our rights, safety or property or that of our patients or the public.

We take reasonable technical and organisational measures — such as encrypted connections, access-controlled administration accounts and secure, industry-standard payment processing — to protect your information against unauthorised access, alteration, disclosure or destruction. However, no method of transmission or storage over the internet is completely secure and we cannot guarantee absolute security.

We retain personal information for as long as reasonably necessary to fulfil the purposes described in this Policy — for example, to maintain your appointment and order history, respond to enquiries and meet our legal, accounting and regulatory record-keeping obligations. In-progress booking drafts that are never completed are retained only for a limited period before being removed. You may request earlier deletion of your information as described in Your Rights, subject to any records we are legally required to keep.

Subject to applicable law, including the DPDP Act, you have the right to:

• Request confirmation of and access to the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request erasure of your personal information, subject to our legitimate business and legal record-keeping needs;
• Withdraw consent to future processing (for example, unsubscribing from the newsletter or opting out of marketing messages) at any time; and
• Lodge a grievance with our Grievance Officer or, where applicable, with the relevant Indian data protection authority.

To exercise any of these rights, contact us using the details in Contact Us.

This website is not directed at children and we do not knowingly collect personal information from anyone under 18 without the consent of a parent or guardian. If you believe a minor has provided us with personal information without appropriate consent, please contact us so we can remove it.

In accordance with the Information Technology Act, 2000 and rules made thereunder, the following person is designated as our Grievance Officer for privacy-related complaints:

Dr Dilraj Healthcare
Email: drdilrajhealthcare@gmail.com
Phone: +91 95925 94788
Address: Dr Dilraj Healthcare, Near HP Petrol Pump, Bassi Complex, Jalalabad, Est Moga - 142024

We will acknowledge and address grievances as promptly as possible and in any event within the timelines prescribed by applicable law.

For any questions about this Privacy Policy or how your information is handled, please contact us at drdilrajhealthcare@gmail.com or +91 95925 94788.

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational or regulatory reasons. We will post the revised policy on this page with an updated "Last updated" date. Your continued use of the website after changes are posted constitutes acceptance of the revised policy.