106, Asmi Dreamz, Goregaon West, Mumbai 400104
Mon–Sat 10am – 8pm
Home › Privacy Policy
This page explains what information the clinic collects through this website, why we collect it, who we share it with, and what you can ask us to do with it. It covers the appointment form, phone and WhatsApp enquiries, and the information your browser sends automatically. Written in plain language, because a policy nobody can read protects nobody.
This website, drrajanmodi.com, is operated by the surgical practice of Dr. Rajan Modi, consulting at 106, Asmi Dreamz, Goregaon West, Mumbai, Maharashtra 400104.
Under the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data collected through this website. That means we decide why and how your information is used, and we are answerable for it. Where this policy says "we", "us" or "the clinic", it means that practice.
This policy applies to information collected through this website and the enquiry channels linked from it: the appointment form, phone calls and WhatsApp messages to +91 72081 43555, and email.
It does not replace the confidentiality that applies to your clinical records once you become a patient. Medical records created during consultation, investigation, admission or surgery are held under the confidentiality obligations that bind every registered medical practitioner in India, and under the record-keeping policies of the hospital where you are treated. This policy explains how information from the website feeds into that, not how those records are subsequently handled.
Whatever you choose to tell us, including any reports or images you send. We do not record phone calls.
Like most websites, this one records some technical information when you visit:
This is collected through Google Analytics 4 and through standard web server logs. It is used in aggregate to understand which pages people find useful. We do not use it to build a profile of you as an individual.
The appointment form is protected by Google reCAPTCHA, which looks at device and interaction signals to tell a person apart from an automated script. It is subject to Google's own privacy policy and terms.
When you describe your problem in the appointment form, send a report by email, or explain your symptoms on the phone, you are giving us health information. Under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, information about your physical or mental health condition and your medical records is sensitive personal data, and it is treated with more care than an ordinary contact detail.
What happens to it:
A practical suggestion. Please do not send full medical records, scans or detailed reports through the website form. A short description of the problem is enough to book a consultation. Bring your reports with you, or send them through the channel the clinic confirms with you on the call. It keeps your records where they belong.
We use the information described above for these purposes and no others:
We do not use your information to send marketing messages unless you have separately asked for them, and we do not run advertising or remarketing pixels on this website.
Your information is shared only where it is necessary for your care or for the site to function:
That list is exhaustive. We do not share your personal data with anyone else, and we do not sell it.
A cookie is a small file a website stores in your browser. This site uses two kinds:
There are no advertising cookies, no remarketing tags and no social media pixels on this website.
You can block or delete cookies through your browser settings, and you can opt out of Google Analytics entirely using Google's browser opt-out add-on. Blocking analytics cookies does not affect your ability to use the site or book an appointment.
Enquiry and appointment information is held on servers used by the clinic and by our hosting provider.
Google Analytics and reCAPTCHA are operated by Google, which processes data on servers that may be located outside India. This applies only to the technical and usage data described in section 4. Your health information is not sent to Google or to any other party outside the list in section 7.
We do not keep personal data for longer than the purpose requires. Where we are legally required to retain something, we retain it and nothing more.
The website is served over an encrypted HTTPS connection. Access to the enquiry system is limited to the staff who need it, protected by individual accounts and passwords, and reviewed when someone leaves. Physical records at the clinic are kept in a restricted area.
We will be straightforward with you about the limit of that: no website, no email and no computer system anywhere is completely secure. We take reasonable security practices seriously, and we also encourage you not to send more sensitive detail through a web form than the situation actually needs.
Under the Digital Personal Data Protection Act, 2023, you have the right to:
To exercise any of these, email the Grievance Officer at {{CLINIC_EMAIL}}. We will respond as quickly as we can, and in any case within the timelines prescribed under applicable law. We may need to verify your identity first, which protects you as much as it protects us.
One honest limit on erasure. If you have been treated here, we cannot delete your clinical record on request. Medical records must be retained for a defined period under medical record-keeping requirements, and that obligation overrides a deletion request. We can delete enquiry data, marketing preferences and anything not forming part of that record.
Where we rely on your consent, you can withdraw it at any time by emailing {{CLINIC_EMAIL}}. Withdrawing consent does not undo anything lawfully done before you withdrew it.
Please understand the practical effect: if you withdraw consent for us to hold your contact details, we will not be able to call you back about your enquiry, confirm an appointment, or follow up after a procedure.
This website is not directed at children, and we do not knowingly collect personal data from anyone under 18 through it.
Under the Digital Personal Data Protection Act, 2023, processing a child's personal data requires the verifiable consent of a parent or lawful guardian. If a consultation is needed for someone under 18, a parent or guardian should make the enquiry and accompany them to the appointment. We do not carry out tracking or behavioural advertising directed at children.
If you believe a child has submitted information through this website, contact us at {{CLINIC_EMAIL}} and we will delete it.
If a breach affecting your personal data occurs, we will inform you and the Data Protection Board of India in the manner and within the timelines prescribed under the Digital Personal Data Protection Rules, 2025. Our notice to you will describe what happened, what data was involved, what we are doing about it, and what you can do to protect yourself.
This website links to other sites, including Kapadia Multispeciality Hospital, the Advanced Wound & Vein Clinic, Physio Lounge, Google Maps and WhatsApp. Once you follow a link you are on someone else's website, governed by their privacy policy, not this one. We are not responsible for how they handle your data, and we would encourage you to read their policies.
We may update this policy as the law changes or as the clinic's practices change. The date at the top of the page always shows when it was last revised. If a change materially affects how your information is handled, we will make that clear rather than quietly editing the text.
If you have a question or a complaint about how your personal data has been handled, contact the Grievance Officer directly:
If you are not satisfied with how we deal with your complaint, you have the right to raise it with the Data Protection Board of India.
This policy is governed by the laws of India. Any dispute arising out of it is subject to the exclusive jurisdiction of the courts at Mumbai, Maharashtra.
