Privacy Policy

1. Introduction

Dr. Y Physio ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal and medical information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, visit our website, or interact with us.

2. Information We Collect

2.1 Personal Information

• Name, address, phone number, and email address
• Date of birth and gender
• Emergency contact information
• Insurance information (if applicable)

2.2 Medical Information

• Medical history and current health conditions
• Symptoms, pain levels, and functional limitations
• Treatment plans and progress notes
• Exercise programs and home care instructions
• Photos or videos (with explicit consent) for treatment documentation

2.3 Technical Information

• IP address, browser type, and device information
• Website usage data and analytics
• Session recordings for online consultations (with consent)
• Communication logs (WhatsApp, email, phone calls)

3. How We Use Your Information

3.1 Treatment and Care

• Providing physiotherapy services and consultations
• Developing personalized treatment plans
• Monitoring your progress and adjusting treatments
• Coordinating care with other healthcare providers (with your consent)

3.2 Administrative Purposes

• Scheduling appointments and managing your account
• Processing payments and insurance claims
• Sending appointment reminders and follow-up communications
• Maintaining medical records as required by law

3.3 Legal and Safety

• Complying with legal and regulatory requirements
• Protecting against fraud and unauthorized access
• Ensuring patient safety and quality of care

4. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

4.1 With Your Consent

• Referrals to other healthcare providers
• Sharing information with family members (as authorized by you)
• Testimonials or case studies (with explicit written consent)

4.2 Service Providers

• Payment processors (for secure transaction processing)
• Cloud storage providers (for secure data backup)
• Video conferencing platforms (for online consultations)
• Email and communication service providers

4.3 Legal Requirements

• When required by law or court order
• To protect our rights, property, or safety
• In emergency situations to protect patient safety

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption: All data transmissions are encrypted using SSL/TLS protocols
• Access Controls: Limited access to authorized personnel only
• Secure Storage: Data stored on secure, password-protected servers
• Regular Audits: Periodic security assessments and updates
• Staff Training: Regular privacy and security training for all staff

6. International Patients

For patients located outside India:

• Your data may be processed and stored in India
• We comply with applicable international data protection laws
• Additional consent may be required for cross-border data transfers
• You have the right to request data localization where legally required

7. Your Rights

You have the following rights regarding your personal information:

• Access: Request copies of your personal and medical information
• Correction: Request corrections to inaccurate information
• Deletion: Request deletion of your data (subject to legal requirements)
• Portability: Request transfer of your data to another provider
• Restriction: Request limitation of how we use your data
• Objection: Object to certain uses of your information

8. Data Retention

We retain your information for the following periods:

• Medical Records: 7 years after last treatment (as per Indian medical regulations)
• Payment Information: 7 years for tax and accounting purposes
• Marketing Communications: Until you unsubscribe or opt out
• Website Analytics: 26 months (Google Analytics default)

9. Cookies and Website Analytics

Our website uses cookies and similar technologies to:

• Improve website functionality and user experience
• Analyze website traffic and usage patterns
• Remember your preferences and settings
• Provide personalized content and advertisements

You can control cookie settings through your browser preferences.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not directed to children under 18. For pediatric patients, we require parental or guardian consent before collecting any personal information. Parents have the right to review, modify, or delete their child's information.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes through:

• Email notification to registered users
• Prominent notice on our website
• Direct communication during your next appointment

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

14. Governing Law

This Privacy Policy is governed by the laws of India, including:

• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Telemedicine Practice Guidelines, 2020
• Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations

Disclaimer: This privacy policy is designed to comply with Indian and international privacy laws. For specific legal advice regarding your privacy rights, please consult with a qualified legal professional.