Privacy Policy

Last updated: October 2026

Dr. Suman Kotwal Clinic ("we", "us", "our clinic") operates this website to let patients book, manage and pay for appointments with Dr. Suman Kotwal online. This policy explains what information we collect, why we collect it, and how it is protected.

1. Information we collect

• Identity & contact details — name, mobile number, email address, and date of birth, collected when you register a patient account or book an appointment.
• Health information — details you or the doctor record as part of a consultation (symptoms, diagnosis, prescriptions, follow-up notes). This is used solely to provide your care and is treated as sensitive personal data.
• Appointment & payment records — which doctor, date, time and fee, and payment status. Card, UPI and bank details themselves are handled directly by our payment partner, Cashfree — we never see or store your full card number, UPI PIN or net-banking password.
• Technical information — basic device/browser information collected automatically for security and to keep the booking system working correctly (e.g. preventing double-booking).

2. How we use this information

• To schedule, confirm, and manage your appointments and prevent double-booking.
• To let the doctor record and access your consultation history for continuity of care.
• To send prescriptions to the pharmacy module so your medicines can be prepared.
• To process consultation fee payments and refunds.
• To send appointment reminders, confirmations, and important account notifications.
• To maintain an audit trail of important actions (check-ins, prescriptions, payments, refunds) for accountability and patient safety.

3. Who we share information with

We do not sell your personal or health information to anyone. Information is shared only where necessary to provide your care or as required by law:

• Within the clinic — your treating doctor, the front-desk/counter staff handling your visit, and the pharmacy team fulfilling a prescription you were given, each only see the information needed for their role.
• Cashfree (our payment gateway) — to process your consultation fee payment. Cashfree's own privacy policy governs how they handle payment data.
• Legal or regulatory authorities — only where we are required to by applicable Indian law.

Patient data is never exposed across unrelated patient accounts — every account only ever sees its own records.

4. Data security

Access to medical and appointment records is restricted by role — for example, pharmacy staff can see a prescription but not a patient's full consultation notes. Passwords are never stored in plain text. Payment card and UPI details are handled entirely by Cashfree's own PCI-DSS compliant systems and never pass through or get stored on our servers.

5. Data retention

We retain appointment and medical records for as long as reasonably necessary to provide ongoing care and to meet standard medical record-keeping practice, and as required under applicable Indian regulations for clinical establishments.

6. Your rights

You can request access to, or correction of, your personal information held with us at any time by contacting us using the details below. If you believe your data has been misused, you may also raise a grievance with us directly.

7. Cookies

This website uses only the minimal session cookies needed to keep you logged in securely while using the booking system. We do not use third-party advertising or tracking cookies.

8. Changes to this policy

We may update this policy from time to time to reflect changes in our practice or legal requirements. The "Last updated" date above will change whenever we do.