Policy

Privacy & DPDP Notice

Effective 4 August 2026

This notice describes how Dr. Bipin R. Upadhyay (DCI Reg. No. A-13123) (the “Data Fiduciary”) processes personal and health-related data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP”), the Telemedicine Practice Guidelines, 2020, and the Indian Medical Council (Professional Conduct) Regulations.

1. Data we collect

  • Identity & contact: name, age, gender, phone, email, city, PIN code.
  • Clinical: chief complaint, symptom history, medical history, medications, allergies, uploaded reports/images, and any voice or video captured during a consultation (only if you consent).
  • Payment metadata (not card numbers) and consultation audit logs.

2. Purpose

Data is processed solely to: provide consultation services, issue digitally-signed prescriptions, maintain medical records as required by law, contact you about your care, and meet regulatory and tax obligations. We never sell your data.

3. Lawful basis & consent

We process your data with your free, specific, informed, unconditional and unambiguous consent obtained at booking, or where processing is necessary for medical treatment or legal obligations.

4. Retention

Telemedicine consultation records are retained for a minimum of 3 years; clinical records, prescriptions and imaging are retained for at least 7 years from the last consultation, after which data is irreversibly anonymised or deleted on request unless legal retention applies.

5. Security

All data is encrypted in transit and at rest. Access to identifiable data is restricted to the doctor and authorised clinical staff and is audited. Prescriptions are signed with Ed25519 keys and are independently verifiable.

6. Your rights

  • Access, correct, or update your data.
  • Withdraw consent (this may limit our ability to continue care).
  • Erase your data subject to statutory retention.
  • Nominate another person to exercise your rights in the event of incapacity.
  • Lodge a complaint with the Grievance Officer or the Data Protection Board of India.

7. Grievance Officer

Dr. Veena Maurya Upadhyay
Phone: +91-9970324712
Email: smilecare_veena@rediffmail.com
Acknowledgement within 48 hours; resolution within 7 working days.

8. Cross-border transfers

At launch the service is offered only to residents of India. Servers and processors are located in compliance with applicable data-localisation requirements.

See also: Terms of Service, Fees & Refunds.