Privacy Policy

1. Who We Are

Aesthetica Dental Clinic is a multispeciality dental practice located at Shop No. 103, 1st Floor, Swaraaj Heights, Kate Wasti Road, opp. Legacy Ivy, Kate Wasti, Punawale, Pune – 411033, Maharashtra, India.

This clinic is led by Dr. Prachi Gupta Garg (BDS, Certified Cosmetologist), registered with the Dental Council of India. You can contact us at +91 92266 80164 or via WhatsApp.

This Privacy Policy applies to information collected through our website (aestheticadental.github.io), telephone enquiries, WhatsApp messages, and in-clinic interactions.

2. Information We Collect

We may collect the following types of information:

• Contact information: Name, phone number, email address, and location (when you call, WhatsApp, or use our contact methods).
• Health information: Details about your dental concerns, symptoms, medical history, and treatment history — collected only when you become a patient of the clinic.
• Appointment information: Date, time, and nature of your appointment request.
• Website usage data: Pages visited, time spent, device type, browser type, and approximate location — collected automatically by Google Analytics (GA4) when you visit our website.
• Communication records: WhatsApp messages, phone call records (where applicable), or any written communication you send to us.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and book dental appointments
• To provide dental treatment and maintain your clinical records as required by law
• To send appointment reminders (via WhatsApp or phone call)
• To follow up on treatment outcomes where clinically appropriate
• To improve our website and services using anonymised analytics data
• To comply with legal and regulatory obligations, including record-keeping requirements under the Indian Medical Council Act and Dental Council of India regulations

We will never sell, rent, or share your personal information with third parties for marketing purposes.

4. Legal Basis for Processing (DPDP Act, 2023)

Under India's Digital Personal Data Protection (DPDP) Act, 2023, we process your personal data on the following lawful bases:

• Consent: When you contact us via WhatsApp, phone or our website, you consent to us processing your enquiry.
• Legitimate interest: We maintain clinical records and appointment data as part of providing dental care.
• Legal obligation: We retain patient records as required by applicable medical and dental regulations in India.

5. Health & Medical Information

Your dental and medical health information is treated with the highest level of confidentiality. It is:

• Used solely for the purpose of providing you with dental care
• Stored securely in clinical records at the clinic
• Never shared with third parties except where legally required (e.g. referral to another healthcare provider with your consent, or a legal requirement)
• Retained for the minimum period required by the Dental Council of India's record-keeping guidelines

6. Google Analytics & Website Cookies

Our website uses Google Analytics 4 (GA4) to understand how visitors use our site. GA4 collects anonymised data including pages visited, time on page, device type and approximate geographic location. This data helps us improve the website experience for patients.

GA4 uses cookies stored on your device. You can opt out of Google Analytics tracking by:

• Installing the Google Analytics Opt-out Browser Add-on
• Using your browser's privacy/incognito mode
• Adjusting your browser's cookie settings to block third-party cookies

We do not use cookies for advertising, remarketing, or tracking users across other websites.

7. WhatsApp Communications

When you contact us via WhatsApp, your messages are processed by WhatsApp (Meta Platforms, Inc.) subject to their own Privacy Policy. We use WhatsApp solely to respond to patient enquiries and send appointment information. We do not use WhatsApp for unsolicited marketing messages.

8. Data Retention

We retain your information for the following periods:

• Patient clinical records: Minimum 7 years from the date of last treatment, or until the patient is 25 years old (whichever is later), as per standard medical practice guidelines in India.
• Appointment and contact records: Up to 2 years from your last contact, after which they are securely deleted.
• Website analytics data: Retained by Google Analytics for up to 14 months by default (anonymised).

9. Your Rights

Under the DPDP Act, 2023 and applicable Indian law, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate personal information
• Erasure: Request deletion of your personal data, subject to legal retention obligations
• Withdraw consent: Withdraw consent for any processing based on consent, at any time
• Grievance redressal: Lodge a complaint with us regarding the handling of your data

To exercise any of these rights, please contact us using the details in Section 11 below.

10. Data Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse. Our website is hosted on GitHub Pages (HTTPS encrypted). Clinical records are stored securely at the clinic premises with restricted access.

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authorities as required by law.

11. Children's Privacy

We provide dental care to patients of all ages, including children. When treating a minor (under 18), we collect and process the child's dental health information with the consent of their parent or legal guardian. Parents may request access to or deletion of their child's records at any time.

12. Third-Party Links

Our website may contain links to external platforms including Google Maps, Instagram, YouTube, WhatsApp, and LinkedIn. These platforms have their own privacy policies and we are not responsible for their data practices. We encourage you to review their policies before interacting with them.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will be revised accordingly. Continued use of our website or services after any changes constitutes acceptance of the updated policy.

14. Contact Us / Grievance Officer