Privacy Policy

Last updated: July 2026 · Version 1.0 · Compliant with India's Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025.

Quick read: This appointment-booking page collects only the contact details you actively give us (name, phone, email, your medical concern). We use them to call you back and schedule your consultation. We don't sell your data. You can request access, correction, erasure or nominate someone to act on your behalf at any time.

1. Who we are

This Privacy Policy describes how Dr. Anando Sengupta ("we", "our", or "us") handles personal information collected through ads.dranandosengupta.com, the appointment-booking landing page used for paid-traffic campaigns. Under the DPDP Act 2023, we are a "Data Fiduciary". This page is operated by the same practice as our main website, dranandosengupta.com.

2. What information we collect and why (itemised)

The DPDP Act requires us to list each type of information we collect with the specific purpose for each. We do not collect more than this:

InformationWhy we collect it
First & last nameTo address you correctly during the callback
Phone numberTo call or WhatsApp you to confirm your appointment
Email addressTo send appointment confirmation
Selected concern (e.g. GERD, IBS, Endoscopy)So the doctor can prepare for your visit and triage urgency
Symptom description (optional)To prepare for your visit; treated as confidential medical information
IP address (technical)Spam prevention & security — not used for marketing
Cookies / similar identifiersSite function, anonymous analytics, ad measurement (each only with your consent — see Section 7)

We do not collect: government ID numbers, payment information, location/geolocation, biometric data, or any information about people other than the person filling the form.

3. Lawful basis — your consent

Under the DPDP Act, your consent is the lawful basis for everything in Section 2. Unlike GDPR, there is no "legitimate interest" shortcut in Indian law — we rely on your free, specific, informed, unconditional and unambiguous consent, given by the affirmative act of submitting our form. We do not use pre-ticked boxes and we do not bundle unrelated purposes together.

4. How we use your information

We do not sell, rent or trade your personal information.

5. Who has access to your information

RecipientRoleWhat they see
Dr. Anando SenguptaTreating physicianEverything in your submission
The clinic team (Ashok Vihar / Fortis Shalimar Bagh)Appointment schedulingName, phone, concern, requested slot
Honcho MetricsWebsite & email-delivery support (a Data Processor under our instructions)Same data as the clinic team; bound by an equivalent confidentiality obligation
ZeptoMail (Zoho)Transactional email delivery to the clinic inboxThe form contents, as the email body
Google (Tag Manager, Ads, Analytics)Ad-conversion measurement & anonymous analytics (only if you consented to the relevant category)Aggregated, anonymised browsing behaviour — not the contents of your form
DigitalOceanCloud hosting of the website serverThe server processes data in memory; data at rest is the contents of the email account, which lives at Google.

6. Where your data is stored (cross-border)

Form submissions are delivered to a clinic email account hosted by Google. The website runs on a DigitalOcean droplet hosted in Asia. ZeptoMail processes the email in India. Anonymous analytics may be processed by Google in regions outside India. None of these locations are countries to which the Government of India has specifically restricted transfers under DPDP §16.

7. Cookies and tracking

On first visit, our cookie banner asks you to allow or reject each category of non-essential cookies:

Non-essential tags (Google Analytics, Google Tag Manager, ad pixels) do not load until you have explicitly accepted them. You can change your choice anytime via the "Cookie Preferences" link in the footer.

8. Security safeguards

In line with Rule 6 of the DPDP Rules 2025:

9. How long we keep your information

10. Your rights under the DPDP Act

  1. Right to access a summary of what we hold about you.
  2. Right to correction and erasure of your data.
  3. Right to nominate another person to exercise these rights on your behalf in case of death or incapacity.
  4. Right to grievance redressal — complain to us first; if unresolved within 90 days, escalate to the Data Protection Board of India.

To exercise any right, visit Data Rights & Grievance → or email us directly.

11. Children and persons with disabilities

Our services are intended for adults. If a person under 18 needs care, the booking form must be filled out by a parent or guardian. We do not knowingly process the personal information of a child without verifiable consent from the parent or legal guardian. We do not run behavioural tracking or targeted advertising directed at children.

12. Grievance Officer and how to contact us

Grievance Officer: Dr. Anando Sengupta
Email: dranandosengupta@gmail.com
Phone / WhatsApp: +91 98714 20105
Postal address: 3, II, Bansal Tower, Ashok Vihar Phase II, New Delhi 110052
Response time: We acknowledge grievances within 7 days and resolve them within 30 days (maximum 90 days, per Rule 13).

13. Multi-language access

This Privacy Policy is published in English. Under DPDP §5(3), you can request the same notice in Hindi or any Eighth Schedule language by writing to dranandosengupta@gmail.com. We'll provide a translated copy within 30 days.

14. Changes to this policy

If we make a material change to how we handle your data, we will update this page, change the "Last updated" date at the top, and — for substantial changes — re-request your consent through the cookie banner.

15. Previously collected information

If we hold personal information that you provided to us before this Privacy Policy was published, you are receiving this notice now as required by DPDP §5(1)(a). You can withdraw your earlier consent or exercise any of the rights in Section 10 at any time.

16. Legal and disclaimer

The information you submit is treated as confidential medical information. This policy is not a substitute for a doctor-patient consultation. If you are experiencing a medical emergency, please call your local emergency number or go to the nearest emergency room immediately.

← Back to home