Privacy Policy

Shree Vishwaayu ("we", "us", "our") is an Ayurvedic clinic and Panchakarma center located at 304, Mani Bhuvan, Above ICICI Bank, Opposite McDonald's, SV Road, Goregaon West, Mumbai 400104, Maharashtra, India.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our patient portal at www.shreevishwaayu.in.

We collect the following categories of personal data:

• Identity & Contact: Your name and mobile phone number, provided when you register or log in via OTP.
• Health Information: Medical history, Ayurvedic constitution (Prakriti/Dosha), allergies, chronic conditions, consultation notes, prescriptions, and treatment records created or reviewed by our practitioners.
• Appointment Data: Appointment dates, times, types, and status.
• Uploaded Documents: Medical reports, prescriptions, or other documents you or our clinic staff upload to your profile.
• Usage Data: Basic server logs (IP address, browser type, pages visited) retained for security and debugging purposes only.

We do not collect payment card information, Aadhaar numbers, or government ID details through this portal.

We use your personal data solely to provide and improve our healthcare services:

• To verify your identity via OTP and grant access to your patient records.
• To display your appointments, consultation history, and uploaded documents.
• To enable our practitioners to maintain accurate electronic medical records (EMR).
• To communicate appointment-related information.
• To ensure the security and integrity of the portal.

We do not use your data for marketing, advertising, or profiling purposes.

We do not sell, rent, or trade your personal or health information to any third party.

Your data may be accessed by:

• Clinic staff: Doctors, receptionists, and therapists at Shree Vishwaayu who are directly involved in your care, on a need-to-know basis.
• Technology providers: Our hosting and infrastructure providers who process data on our behalf under strict confidentiality obligations. These providers do not have independent access to your health records.

We may disclose information if required by applicable law or a lawful order from a government authority.

We retain your health records and personal data for as long as necessary to provide ongoing medical care and to comply with applicable legal obligations. Medical records are typically retained for a minimum of 7 years as required under Indian medical regulations. You may request deletion of your account data (see Section 7), subject to any legal retention requirements.

We take the security of your health data seriously and implement appropriate technical measures including:

• All data is transmitted over encrypted HTTPS connections.
• Authentication is performed via time-limited OTP codes — no passwords are stored.
• Session tokens expire automatically after 8 hours.
• Access to medical records is restricted to authenticated users and authorised clinic staff only.

While we take all reasonable steps to protect your data, no system can be guaranteed to be completely secure. Please contact us immediately if you suspect any unauthorised access to your account.

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights regarding your personal data:

• Right to Access: Request a summary of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to Grievance Redressal: Lodge a complaint with us regarding how your data is handled.

To exercise any of these rights, please contact us at +91 836991 9302 or visit the clinic directly.

Our portal is not intended for independent use by individuals under the age of 18. Minors may have records maintained on their behalf by a parent or guardian. If you believe a minor's data has been collected without appropriate consent, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date of the most recent revision will always be shown at the top of this page. Continued use of the portal after any changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Clinic: Shree Vishwaayu
• Address: 304, Mani Bhuvan, Above ICICI Bank, Opposite McDonald's, SV Road, Goregaon West, Mumbai 400104
• Phone: +91 836991 9302