Privacy & DPDP Notice

This notice describes how Dr. Bipin R. Upadhyay (DCI Reg. No. A-13123) (the “Data Fiduciary”) processes personal and health-related data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP”), the Telemedicine Practice Guidelines, 2020, and the Indian Medical Council (Professional Conduct) Regulations.

1. Data we collect

• Identity & contact: name, age, gender, phone, email, city, PIN code.
• Clinical: chief complaint, symptom history, medical history, medications, allergies, uploaded reports/images, and any voice or video captured during a consultation (only if you consent).
• Payment metadata (not card numbers) and consultation audit logs.

2. Purpose

Data is processed to provide consultation services; conduct an international expert discussion when requested; coordinate with your named local clinician; issue documents where legally appropriate; maintain records; contact you; process payment metadata; and meet regulatory and tax obligations. We never sell your data.

3. Lawful basis & consent

We process your data with your free, specific, informed, unconditional and unambiguous consent obtained at booking, or where processing is necessary for medical treatment or legal obligations.

4. Retention

Telemedicine consultation records are retained for a minimum of 3 years; clinical records, prescriptions and imaging are retained for at least 7 years from the last consultation, after which data is irreversibly anonymised or deleted on request unless legal retention applies.

5. Security

All data is encrypted in transit and at rest. Access to identifiable data is restricted to the doctor and authorised clinical staff and is audited. Prescriptions are signed with Ed25519 keys and are independently verifiable.

6. Your rights

• Access, correct, or update your data.
• Withdraw consent (this may limit our ability to continue care).
• Erase your data subject to statutory retention.
• Nominate another person to exercise your rights in the event of incapacity.
• Lodge a complaint with the Grievance Officer or the Data Protection Board of India.

7. Grievance Officer

Dr. Veena Maurya Upadhyay
Phone: +91-9970324712
Email: smilecare_veena@rediffmail.com
Acknowledgement within 48 hours; resolution within 7 working days.

8. International expert discussions

If you request this limited service while outside India, we record your declared country and a server-observed country signal, where available, to route and review the request. We also collect your named local clinician’s professional and contact details. With your separate acknowledgement, submitted records and the written expert note may be shared with that clinician. Payment, video, messaging, email, hosting and storage providers may process the minimum information needed to provide their service.

9. Cross-border processing

International-request data is processed and stored in India and may pass through service providers operating in other countries. We apply Indian privacy law and reasonable safeguards, but do not claim that one notice can exclude mandatory rights under the law where you are located. You should not submit information if this processing is prohibited where you are.

See also: Terms of Service, Fees & Refunds.