Privacy Policy

1. Who We Are

This Privacy Policy explains how Smiling Hearts Cardiac Centre, the private practice of Dr. Abhinit Gupta (Associate Director – Cardiology, Regency Hospital, Kanpur; UP Medical Council Reg. No. 53633), located at Near Haveli Restaurant, Lajpat Nagar, Kanpur, Uttar Pradesh 208005 (“we”, “us”, “our”), collects and handles your information when you use this website or contact us through it.

We are committed to protecting your privacy and handling your personal and health information responsibly, lawfully, and transparently.

2. The Laws We Follow

We handle your information in accordance with applicable Indian law, including:

• The Digital Personal Data Protection Act, 2023 (DPDP Act) — which governs how personal data is collected, used, and stored.
• The Information Technology Act, 2000 and the SPDI Rules, 2011 — which set additional protections for “sensitive personal data” such as health and medical information.
• The confidentiality duties expected of registered medical practitioners under the National Medical Commission (NMC) framework.

3. Information We Collect

We only collect information that you choose to give us, plus a small amount of standard technical information needed to run the website.

• Information you provide through the appointment form: your first and last name, phone number, email address (optional), the type of appointment you want, and any notes or health concerns you choose to share.
• Information you share when you contact us by phone, WhatsApp, or email.
• Basic technical information collected automatically by our hosting provider (such as your browser type and general location) to keep the website secure and working correctly.

4. Health Information (Sensitive Personal Data)

Any health details you type into the appointment form or share with us are treated as sensitive personal data. We collect this only with your consent, use it only to respond to and manage your request, and protect it with appropriate safeguards. Please share only what is necessary — you do not need to provide detailed medical history through this website.

5. How We Use Your Information

We use the information you provide only to:

• Contact you to confirm, schedule, or follow up on your appointment request.
• Respond to your questions or messages.
• Maintain a record of your appointment request for care coordination.
• Keep the website secure and improve how it works.

6. What We Do Not Do

• We do not sell, rent, or trade your personal or health information to anyone.
• We do not use your information for advertising or marketing without your separate consent.
• We do not collect more information than we need for the purpose above.

7. Consent

We collect and use your information based on the consent you give when you tick the consent box on the appointment form and submit it. You can withdraw your consent at any time by contacting us (see Section 12). Withdrawing consent will not affect anything we did lawfully before you withdrew it.

8. Who Helps Us Run This Website

We use trusted technology providers to operate the website. They process data only on our behalf and under our instructions:

• Supabase — secure database and file storage where appointment requests and website content are kept.
• Vercel — website hosting.
• Google Maps — the embedded map showing our clinic location.
• WhatsApp / telephone providers — used only if you choose to contact us that way.
• TinyAngle Studio AI Laboratory — our website developer, for technical maintenance.

9. How We Store and Protect Your Information

• Your information is stored on secure, access-controlled cloud servers.
• Access to appointment records is limited to the doctor and authorised clinic staff through a password-protected admin panel.
• We keep your information only for as long as needed to serve your request and to meet any legal or medical record-keeping obligations, after which it is deleted.
• While no method of transmission over the internet is completely secure, we take reasonable technical and organisational measures to protect your data.

10. Your Rights

Under the DPDP Act, you have the right to:

• Ask what personal information we hold about you.
• Ask us to correct or update information that is wrong or incomplete.
• Ask us to delete your information, where there is no legal reason to keep it.
• Withdraw your consent at any time.
• Raise a concern or complaint about how your data is handled.

11. Children’s Information

If you are requesting an appointment on behalf of a child, please provide only the information necessary for the consultation. We handle a child’s data with additional care and only with the consent of a parent or guardian.

12. Grievance Officer & Contact

If you have any questions about this Privacy Policy, want to exercise your rights, or wish to raise a concern about your data, please contact us:

• Clinic: Smiling Hearts Cardiac Centre, Near Haveli Restaurant, Lajpat Nagar, Kanpur, Uttar Pradesh 208005
• Phone: +91 84004 00333 | Toll-Free: 1800 208 7078
• Email: info@smilingheartscardiaccentre.com

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a new effective date. Please review it occasionally to stay informed.