Privacy Notice

Notice version 2026-11-01-draft. This explains what the clinic collects on this website, why, who else sees it, how long it is kept, and how you can ask for access, correction, erasure, or withdrawal.

Who is responsible

Dr. Apurva's Shreshth Physio Clinic is the data fiduciary for personal data collected through this website. The clinic is at 14, R-5, First Floor, Panchratan CHS, Hari Om Nagar Road, Opp. Dr. APJ Abdul Kalam Garden, Neelam Nagar Phase 2, Damoji Patil Wadi, Mulund East, Mumbai 400081.

What we collect

On a visit request: your name, mobile number, the problem you choose, whether you want the clinic or a home visit, an optional date and session, and anything you type in the note. That note may include a home address, a surgery date, or a mention of reports.
On a data-rights request: your name, a phone number or email, the right you want to use, and the details you write.
A consent record: the time, the notice version, which boxes you ticked, and the name and contact you gave. The consent record does not copy the health note.
A session cookie so the form can reject a forged submission, and a first-party cookie named spc_consent if you save a privacy choice for Google Fonts. The same session cookie limits how often click notes are saved.
The page a form was sent from, and the campaign parameters on the link that brought you here (utm_source, utm_medium, utm_campaign, utm_content, utm_term). If the link had none, the form is marked website / form, and a click is marked website / click.
A private note of clicks and form sends: the event name, the page, the link, and those campaign parameters. Your name is not written on that note. This browser also remembers that the booking popup was shown, so it opens only the first time.
This website does not run a third-party analytics tool, an advertising pixel, or a cookie that follows you across other sites.

Why we use it

To contact you by phone or WhatsApp and confirm the visit you asked for, and to store the problem you described. The visit form starts with this box ticked. Clear it if you do not agree, and the request will not be sent.
To answer a request for access, correction, erasure, or withdrawal. That form starts with its box ticked. Clear it if you do not agree.
To remember, on this browser, whether you allowed Google Fonts. Fonts stay off until you opt in. The clinic map loads with the page.
To see which page and which button an enquiry came from, and which buttons people use. The click note is kept with the website files.

The clinic does not sell personal data. The website does not use your number for a mailing list.

How long it is kept

Working period, pending lawyer review: a visit request and its consent record are kept for 12 months after the request, then deleted from the website store, unless a treatment record must be kept for longer. A data-rights request is kept for 12 months after the clinic closes it. The privacy-choice cookie lasts about six months, or until you change it. Click notes are kept until the clinic deletes that file.

Who else receives it

The clinic, by email when the server can send mail, and in a private file on the website host. The host is whoever the clinic uses to publish this site. That host is not named in the code and should be written into this notice.
Google Fonts (fonts.googleapis.com and fonts.gstatic.com), only if you allow them. The embedded Google Map loads on the clinic pages, and your IP address can reach Google when it loads. Opening an Instagram, Facebook, or YouTube link, or WhatsApp, is your choice and is not loaded in the background.
WhatsApp or your phone network, when you call or message the clinic, or when the clinic calls you back after you asked it to.

Your rights

You may ask to access your personal data, correct it, erase it, and withdraw consent. Withdrawal does not undo a message already sent, but the clinic will stop using the data for the purpose you withdraw, unless it must keep a copy. Use the data-rights form or the grievance contact above.

You may also complain to the Data Protection Board of India. The Board's current intake channel should be confirmed before this sentence is treated as instructions.

Children

The forms are written for an adult. If you are booking for a child, say so in the note or on the phone. Whether verifiable consent from a parent is required is marked for lawyer review.

A personal data breach

If personal data from this site is breached, the clinic's working plan is to tell affected people and the Data Protection Board of India. The internal steps are not published on this page. The 72 hour Board report and the wording of user notices are marked for lawyer review against the notified Rules.