This Privacy & Security Policy (“Policy”) governs the collection, use, disclosure, and protection of personal and health-related information by Dr. Arijit Datta, practicing at Room Nos. 303, 223 & 230, Pano Road, behind Metro Cash and Carry, Purba Jadavpur, Mukundapur, Kolkata, West Bengal – 700099 (“we,” “us,” or “our”).

We are fully committed to maintaining the confidentiality and integrity of all personal and health information in accordance with the National Medical Commission (NMC) Code of Medical Ethics, 2023, the Digital Personal Data Protection Act, 2023, and other applicable Indian laws.

I. Scope

This Policy applies to all patients, visitors, and users accessing our clinic, website, mobile applications, or online consultation services. It covers both personal data and sensitive personal data, including Protected Health Information (PHI).

II. Information We Collect

We may collect the following types of information to provide healthcare and related services:

1. Information You Provide Directly

• Name, contact details, and demographic information

• Medical history, prescriptions, and diagnostic reports

• Payment or billing details (where applicable)

• Communication records (email, phone, or online messages)

• Consent forms and feedback provided voluntarily

2. Information Collected Automatically

When you use our website or telemedicine platform, we may collect:

• IP address, browser type, and device information

• Date, time, and duration of access

• Cookies and analytics data (used only to improve patient experience)

You may disable cookies in your browser settings, though this may affect certain website functionalities.

3. Information From Authorized Sources

With your consent, we may collect information from:

• Diagnostic centers, laboratories, and hospitals for continuity of care

• Other medical professionals involved in your treatment

III. Purpose and Use of Information

Your personal and medical information is used only for legitimate medical and administrative purposes, including:

• Diagnosis, consultation, and treatment planning

• Appointment scheduling and follow-up communication

• Preparation of medical records and reports

• Compliance with legal, ethical, and regulatory obligations under NMC and Indian law

• Internal quality improvement and research (anonymized data only)

• Patient satisfaction and feedback collection

We do not sell, share, or disclose your information for marketing, promotional, or non-medical purposes.

IV. Disclosure and Sharing of Information

Your information may be disclosed only under the following lawful circumstances:

• To medical support staff assisting in your treatment, bound by confidentiality agreements.

• To diagnostic partners or referral specialists with your consent.

• To legal or regulatory authorities, when required under law (e.g., court order, statutory obligation, or public health requirement).

• For billing or insurance purposes, in compliance with confidentiality protocols.

• For academic or research use, only in anonymized form and with prior ethical approval where required.

All disclosures adhere strictly to the NMC Code of Ethics, DPDPA 2023, and the IT Rules, 2011.

V. Security Measures

We maintain appropriate administrative, technical, and physical safeguards to protect personal and medical information from unauthorized access, disclosure, alteration, or destruction.
This includes:

• Restricted access to patient records

• Secure electronic systems and encrypted storage

• Regular audits and compliance checks

While we take all reasonable precautions, transmission over the Internet may carry inherent risks, and complete security cannot be guaranteed.

VI. Patient Rights

As per the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: Obtain a copy of your personal data held by us.

• Right to Correction: Request correction of inaccurate or outdated data.

• Right to Erasure: Request deletion of personal data, subject to medical record retention laws.

• Right to Withdraw Consent: Withdraw previously given consent for data processing.

You may exercise these rights by writing to drarijitdutta@gmail.com or contacting +91 33 6907 0000.

VII. Retention of Records

We retain medical and personal data only for as long as required by:

• The NMC Code of Ethics (2023) – typically three years from the last consultation, unless otherwise mandated; and

• Other applicable Indian laws or medico-legal obligations.

VIII. Third-Party Links

Our website may contain links to external sites not operated by us. We are not responsible for their privacy or data protection practices, and users are encouraged to read their respective policies.

IX. Telemedicine Consultations

All teleconsultations follow the Telemedicine Practice Guidelines (2020) issued by the Ministry of Health & Family Welfare, Government of India.
Patient consent (explicit or implied) is obtained before the consultation, and medical records are securely maintained in compliance with NMC norms.

X. Children’s Data

We do not knowingly collect information from minors (below 18 years) without the explicit consent of a parent or guardian.

XI. Dispute Resolution and Jurisdiction

Any disputes arising under or in connection with this Privacy Policy shall be subject exclusively to the jurisdiction of the courts at Kolkata, West Bengal, India, and governed by the laws of India.

XII. Updates to This Policy

We may update this Policy periodically to reflect changes in laws, medical ethics, or practice standards. The latest version will always be available at our clinic and on our website. Continued use of our services indicates acceptance of the updated Policy.

XIII. Contact Information

For any questions, concerns, or data protection requests, please contact:

Dr. Arijit Datta
Room Nos. 303, 223 & 230, Pano Road,
Behind Metro Cash and Carry,
Purba Jadavpur, Mukundapur, Kolkata,
West Bengal – 700099
📞 +91 33 6907 0000
📧 drarijitdutta@gmail.com