Plain English · DPDP-ready
Privacy policy.
This is how Dr. Pandit’s Dental and Implant Center (“we”, “the practice”) handles personal information you give us through this website, by phone, by WhatsApp or by email. It is written to meet the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, which apply now, and the Digital Personal Data Protection Act, 2023 with its 2025 Rules, whose main obligations commence on 13 May 2027. We have drafted to the stricter of the two so nothing changes for you on that date.
Your clinical records, what the dentist finds and does, are a separate matter, governed by professional record-keeping obligations, and are explained to you at the clinic. This policy is about the website and how we communicate.
Who is responsible
Dr. Pandit’s Dental and Implant Center: C-5/2 Vashist Park, Janakpuri, New Delhi 110046, and SCO No. 15, Experion Hub, Sector 108, Gurugram 122006, Haryana. For anything in this policy, write to dr.aashishpandit@gmail.com or WhatsApp +91 97117 65416.
Grievance officer: Dr. Aashish Pandit, at the same email and address. We acknowledge within 48 hours and aim to resolve within 30 days, which is within the time the law allows.
What we collect, and why
| When | What | Why | Kept for |
|---|---|---|---|
| You use the appointment request form | Who the appointment is for; name; mobile number; email (optional); preferred time (optional); a short note (optional); the version of the notice you saw; the page you sent it from | To contact you about the request and agree a time | 12 months, then erased, unless you become a patient, in which case the details join your patient record |
| You call, WhatsApp or email us | Your number or address and what you tell us | To reply, and to arrange or manage care | As needed for the matter you raised; WhatsApp and email also keep their own copies on your device and theirs |
| You tick the optional updates box | Name, email and/or number | Occasional dental-health information | Until you ask us to stop |
| You visit the site | Until you accept “Analytics” in the cookie notice: page views counted without any cookie or identifier being set. If you accept: the usual analytics data: pages viewed, the buttons used, device type, approximate city, and a random identifier that lets the tools tell one visit from another. Never your name, number, or anything you type into the form | To see which pages are useful and where the site is hard to use | Google Analytics: up to 14 months. Microsoft Clarity: 30 days for session recordings, 13 months for aggregated data. The identifier lives in your browser until you clear it or withdraw consent |
We deliberately do not store your IP address, your device details or any advertising identifier when you send the form, and the form asks you not to write medical history in it. The dentist takes your history in person, privately.
Cookies and similar tools
This website sets no advertising cookies. It uses two optional analytics tools, and neither sets a cookie or an identifier until you accept “Analytics” in the notice that appears on your first visit:
- Google Analytics (loaded through Google Tag Manager): counts visits and page views and tells us which buttons and pages are used. Before you accept, it runs in Google’s consent mode: page views are counted without any cookie or identifier being stored. After you accept, it sets its usual first-party cookies (
_ga, kept up to two years) so that it can tell one visit from another. Google’s privacy policy. - Microsoft Clarity: records how pages are used (scrolling, taps, where people get stuck) so we can fix what is confusing. It does not load at all until you accept. Clarity masks text you type by default, and the appointment form is masked in full. Microsoft’s privacy statement.
Declining changes nothing about how the site works. Your choice itself is stored in your browser so we don’t ask you again, and “Cookie settings” in the footer lets you change your mind at any time; withdrawing consent stops the tools from the next page you open. Neither tool keeps your full IP address, and we never send them your name, number, or anything you type into the form.
The legal basis
We process the details you give us on the basis of your consent, which you give by a clear action, ticking a box or sending a message, after seeing what we will do with them. Consent for contact about an appointment and consent for occasional updates are asked for separately, and you can give one without the other.
Where a request is made for a child under 18, we rely on the consent of the parent or lawful guardian, which the form asks you to confirm.
Who else sees it
We do not sell personal information and we do not share it with advertisers. The following providers handle data on our behalf, under their own security commitments:
- Cloudflare: hosts this website, stores appointment requests, and routes our email. Cloudflare operates globally, so data may be processed on servers outside India.
- Our email notification provider: delivers the alert that tells the team a request has arrived. The alert contains the details you entered.
- WhatsApp (Meta): only when you choose to message us there, under WhatsApp’s own terms.
- Google Maps: the “Open in Google Maps” link takes you to Google’s site, which has its own privacy policy. We don’t embed Google on our pages.
We will disclose information if the law requires it, for example to a court or regulator.
Where it is kept
Appointment requests are stored in a database hosted by Cloudflare. Indian law permits transfer of personal data outside India except to countries the Government may restrict by notification; we will follow any such notification.
How it is protected
The website is served only over HTTPS. The request database is reachable only by our own code and by authenticated staff access. Access to requests is limited to the people who need it to contact you. We keep a log of when a request is acknowledged, actioned and closed, and of any erasure or correction you ask for. If a breach ever affects your data we will tell you without undue delay, and report it to the Data Protection Board as the law requires.
Your rights, and how to use them
You may, at any time and free of charge:
- ask what personal information we hold about you and get a copy;
- ask us to correct it;
- ask us to erase it (we will, unless we are required by law or clinical record-keeping to keep it, in which case we will tell you);
- withdraw consent, for contact, for updates, or both, as easily as you gave it;
- nominate someone to exercise these rights for you;
- raise a grievance with our grievance officer, and if unsatisfied, complain to the Data Protection Board of India.
To do any of these: email dr.aashishpandit@gmail.com, WhatsApp +91 97117 65416, or tell us at the clinic. Quote your request reference if you have one. Withdrawing consent does not affect anything we did before you withdrew it.
Children
This website is not directed at children, and we do not knowingly collect a child’s details except through a parent or guardian requesting an appointment for them. We do not track children’s behaviour or direct advertising at them.
Changes
If this policy changes in a way that affects you, the new version will appear here with a new effective date, and the notice on the request form will carry a new version number. The version you consented under is recorded with your request.