Privacy Policy

SUVA Superspeciality Clinic ("we", "us", "our") is committed to protecting the privacy of visitors to our website located at https://www.suvasuperspeciality.com ("Website") and of our patients. This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and the choices and rights available to you, in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian data protection laws.

By using this Website or submitting your information through it, you consent to the practices described in this Privacy Policy.

1. Information We Collect

We may collect the following categories of information:

a) Information you provide directly

• Name, phone number, email address, and city/location
• Appointment and enquiry form details, including reason for visit or symptoms described
• Information submitted through contact forms, callback requests, or feedback forms
• Information provided during online registration or teleconsultation booking, if applicable

b) Health-related information

• Symptoms, medical history, or other health details you choose to share while booking an appointment or consultation
• Any documents or reports you upload, where such a feature is provided

c) Automatically collected information

• IP address, browser type, device information
• Pages visited, time spent, and referral source (via cookies and analytics tools)

We do not knowingly collect information from children under 18 without parental/guardian consent, except where a parent or guardian is submitting the information on the child's behalf (e.g., booking a pediatric appointment).

2. How We Use Your Information

We use the information collected to:

• Schedule and manage appointments and consultations
• Communicate with you regarding your enquiry, appointment, or treatment logistics
• Send appointment reminders, confirmations, and administrative updates
• Improve our Website, services, and patient experience
• Comply with applicable legal, regulatory, and medical record-keeping obligations
• Respond to your queries or feedback

We do not use health information you submit for marketing or advertising purposes, and we do not sell your personal data to third parties.

3. Legal Basis and Consent

We process your personal data on the basis of your explicit consent, provided at the point of data collection (e.g., via a consent checkbox on our appointment or enquiry forms), and, where applicable, for the performance of services you have requested or to comply with a legal obligation.

You may withdraw your consent at any time by contacting us using the details in Section 9, though this may affect our ability to provide certain services to you.

4. How We Share Your Information

We may share your information with:

• Doctors and clinical staff involved in your care
• Third-party service providers who support our operations (e.g., appointment booking software, hosting providers, SMS/WhatsApp notification services), under confidentiality obligations
• Regulatory or government authorities, where required by law
• Insurance providers or third-party administrators, only with your consent, where relevant to billing or claims

We do not share your health information with any third party for marketing purposes.

5. Data Storage and Security

We implement reasonable technical and organisational security measures — including access controls, encryption where applicable, and secure hosting — to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain personal and health-related data only for as long as necessary to fulfil the purposes described in this policy, or as required under applicable medical record-keeping laws and regulations, after which it is securely deleted or anonymised.

7. Cookies and Analytics

Our Website may use cookies and similar tracking technologies to improve functionality and understand visitor behaviour. You can control or disable cookies through your browser settings; however, this may affect certain features of the Website.

8. Your Rights

Under the DPDP Act, 2023, as a Data Principal you have the right to:

• Request confirmation of whether we process your personal data, and access such data
• Request correction or updating of inaccurate or incomplete data
• Request erasure of your personal data, subject to legal and medical record-keeping requirements
• Withdraw consent at any time
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
• Raise a grievance with us, and subsequently with the Data Protection Board of India if unresolved

To exercise any of these rights, please contact us using the details in Section 9.

9. Grievance Officer / Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically.