Effective: May 2027 · Version 1.0
This Privacy Notice explains how Dr. Anish Kumar Gupta ("we", "us", "our") collects and uses your personal data when you use this website or contact us, and the rights you have under India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. We act as the Data Fiduciary for the personal data described here. This notice is available in English; on request we will provide it in any one of the languages in the Eighth Schedule of the Constitution of India.
1. What we collect and why
We collect only the data needed for each specific purpose, and only with your consent (or where another law requires it):
- Appointment / enquiry forms — your name, phone, email, the condition you select and your message, to respond to your enquiry and arrange a consultation. Basis: your consent.
- Cookies & usage data / IP address — analytical and marketing cookies, to understand site usage and (where you allow it) measure advertising, only after you opt in. Basis: your consent.
- Security logs & IP address — to protect the site against attacks and detect breaches. Basis: legitimate operation / legal requirement.
2. Your consent and how to withdraw it
For non-essential cookies and for the enquiry forms we ask for your free, specific, informed and unambiguous consent by a clear action (ticking a box or selecting "Accept"). We never use pre-ticked boxes and we do not bundle unrelated purposes. You can withdraw consent at any time, as easily as you gave it — click "Cookie preferences" (bottom-left of any page) for cookies, or email us (Section 8) to stop processing and erase your enquiry data. Withdrawal does not affect processing already carried out lawfully.
3. Confidentiality of health information
Any medical information you share is treated as confidential and handled in line with applicable medical and data-protection standards. We do not sell your personal data.
4. Your rights as a Data Principal
You have the right to access, correction & erasure, withdraw consent, and to nominate someone to exercise your rights if you die or become incapacitated. To exercise any right, use our Your Privacy Rights & Grievances page or email [email protected]. We respond within 90 days.
5. How long we keep your data
Enquiry / appointment data: up to 24 months from your last contact, unless a medical-records or other law requires us to keep it longer, or you ask us to erase it sooner. Security logs: at least 1 year. When the purpose is served or you withdraw consent, we erase your data except where another law independently requires us to retain it.
6. Who we share data with
We share personal data only with service providers ("Data Processors") acting on our instructions under contracts requiring equivalent security and breach-handling. We remain responsible for your data. These currently include:
- Google LLC — analytics and advertising (only if you consent), and Gmail for receiving enquiry emails.
- Zoho Corporation — transactional email delivery.
- Our website & marketing partner — helps manage enquiries and campaigns under a data-processing agreement.
- Hospital staff involved in your treatment, and our hosting and security providers.
We do not sell your personal data. Data may be processed on servers outside India; we do not transfer it to any country restricted by the Government of India.
7. Children and persons with disabilities
This website and our consultations are intended for adults (18+). If an enquiry concerns a minor (for example, paediatric urology), it must be submitted by a parent or lawful guardian, whose consent we rely on. We do not knowingly carry out behavioural tracking of, or direct advertising at, children. An equivalent process applies for persons with disabilities represented by a lawful guardian.
8. Security, breaches & grievances
We use reasonable safeguards including HTTPS/TLS, access controls, monitoring, logging and backups, and require equivalent safeguards from our processors. If a personal-data breach occurs, we will notify the Data Protection Board of India and affected individuals without undue delay.
For any question or complaint about your personal data, contact our grievance contact first:
Dr. Anish Kumar Gupta (Grievance Contact)
Email: [email protected]
Phone: +91 81305 97361
We aim to resolve grievances within 90 days.
If you remain dissatisfied after using our internal mechanism, you may escalate to the Data Protection Board of India.
This notice is provided for transparency and is not legal advice. Final wording should be confirmed by a qualified data-protection lawyer.