When you visit iidhospital.com or interact with IID Hospital, we may collect the following:

Information You Provide Directly

• Appointment requests: Name, phone number, preferred clinic, time, and medical concern (optional)
• Contact form submissions: Name, phone number, and message content
• WhatsApp or phone: Name, contact number, and details discussed during the conversation
• Email correspondence: Email address and message content

Information Collected Automatically

• Website analytics: Pages visited, time on page, device type, browser, and approximate location (city level) via Google Analytics
• Cookies: Small text files for session management and analytics (see Section 5)
• IP address: Logged automatically by our web server for security purposes

Medical Information

Any medical information shared through our website is collected solely to facilitate your consultation with Dr. Pratik Savaj. It is treated with the highest level of confidentiality and is governed by the HIV Act 2017 and Indian medical ethics guidelines.

We use the information we collect only for legitimate purposes directly related to providing healthcare services:

• Appointment scheduling: To confirm your slot and contact you with clinic details
• Medical care: To ensure Dr. Savaj has relevant context before your consultation
• Communication: To respond to queries, confirm appointments, and send reminders
• Website improvement: Aggregated, anonymised analytics to improve content and usability
• Legal compliance: To comply with the HIV Act 2017, IT Act 2000, and DPDP Act 2023

We do not use your information for:

• Marketing or promotional communications without explicit consent
• Sale or rental to third parties
• Automated profiling or decision-making
• Any purpose unrelated to your healthcare or our legitimate business operations

IID Hospital operates in full compliance with the HIV and AIDS (Prevention and Control) Act 2017, which provides some of the strongest medical confidentiality protections in Indian law.

What the HIV Act 2017 Guarantees You

• Your HIV status, test results, and treatment history cannot be disclosed to any person without your explicit written consent
• This protection extends to employers, family members, insurance companies, government bodies, and courts
• Healthcare providers who breach this confidentiality face criminal penalties under the Act
• You have the right to be tested and treated without disclosing your identity if you choose

Medical Records Confidentiality

All clinical records, consultation notes, test results, and prescriptions generated at IID Hospital are:

• Stored securely and accessible only to Dr. Pratik Savaj and directly involved clinical staff
• Never shared with any third party without your explicit written consent
• Protected under the Medical Council of India Code of Ethics Regulations 2002
• Subject to the Digital Personal Data Protection Act 2023 for digitally stored records

We do not sell, rent, or trade your personal information. We share information only in these limited circumstances:

Service Providers

• Formspree: Appointment form data is transmitted securely for email delivery only. Formspree does not use your data for any other purpose.
• Google Analytics: Anonymised, aggregated website usage data — no personally identifiable information is included
• Google Maps: Map interactions are subject to Google's Privacy Policy

Legal Requirements

We may disclose information where required by law, court order, or regulatory authority — only to the minimum extent required and never in violation of HIV Act 2017 protections.

Emergency Situations

In a genuine medical emergency involving risk to life, we may share information with emergency services, limited strictly to what is necessary.

Our website uses cookies and similar tracking technologies:

Managing Cookies

You can control and delete cookies through your browser settings. To opt out of Google Analytics, install the Google Analytics Opt-out Browser Add-on. We do not use cookies for advertising, retargeting, or any profiling purpose.

We retain personal information only for as long as necessary for the purpose it was collected:

• Appointment form data: Retained for 12 months, then securely deleted
• Clinical records: Minimum 7 years from last consultation as required by MCI guidelines
• Website analytics: 14 months, then automatically deleted by Google
• Email and WhatsApp correspondence: 12 months unless clinically relevant
• IP address logs: 90 days for security purposes, then automatically purged

You may request deletion of your personal data at any time by contacting us (Section 11). Clinical records cannot be deleted before the legally required retention period but can be corrected if inaccurate.

Under the Digital Personal Data Protection Act 2023 (DPDP Act) and applicable Indian law, you have the following rights:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information, subject to legal retention requirements
• Right to Withdraw Consent: Withdraw consent at any time — does not affect prior processing
• Right to Grievance Redressal: Lodge a complaint with us or the Data Protection Board of India
• Right to Nominate: Nominate another person to exercise your rights in case of death or incapacity

Our website integrates the following third-party services, each governed by its own privacy policy:

• Google Analytics 4: Website analytics — Google Privacy Policy
• Google Maps: Clinic location maps — Google Privacy Policy
• Formspree: Appointment form processing — Formspree Privacy Policy
• Google Fonts: Typography loaded from Google's servers — may log your IP address
• WhatsApp (Meta): If you contact us via WhatsApp, Meta's Privacy Policy applies to that communication

We are not responsible for the privacy practices of these third-party services. We recommend reviewing their policies separately.

Our website is not directed at children under the age of 18. We do not knowingly collect personal information from minors through our website.

If a parent or guardian believes a minor has submitted personal information through our website, please contact us immediately (Section 11) and we will promptly delete it.

Clinical consultations for minors must be accompanied by a parent or legal guardian. Medical records for minors are handled with the same confidentiality standards as adult records.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a notice on our homepage for significant changes
• Where required by law, notify you directly

Continued use of our website after changes are posted constitutes acceptance of the revised policy. We encourage you to review this page periodically.

For any questions, concerns, or data requests related to this Privacy Policy:

Grievance Officer

As required under the IT (Intermediary Guidelines) Rules 2021 and DPDP Act 2023, our designated Grievance Officer is Dr. Pratik Savaj, IID Hospital, 6th Floor, Solaris Pulse, Vesu Main Road, Near Vijay Laxmi Hall, Vesu, Surat 395007. Grievances will be acknowledged within 24 hours and resolved within 30 days of receipt.

Data Protection Board of India

If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India once it becomes operational under the DPDP Act 2023.