Privacy Policy

1. Introduction

At Vraj Physio ("we," "our," or "us"), we are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [www.vrajphysio.com], book appointments, receive our services, or otherwise interact with us. This includes sensitive health information, which we treat with the highest standards of confidentiality.

2. Information We Collect

We collect information to provide you with the best possible physiotherapy care and manage our relationship with you.

A. Personal Information You Provide:

• Contact & Identity: Name, date of birth, address, email address, phone number, emergency contact details.
• Health Information: Medical history, current conditions, injury details, treatment notes, assessment results, progress reports, referral letters from doctors, and insurance information (where applicable).
• Administrative: Appointment bookings, payment details (processed securely via our payment partners), feedback, and communications with us.

B. Information Collected Automatically (Website):

• Technical Data: IP address, browser type, device information, and operating system.
• Usage Data: Pages visited on our website, time spent on pages, referring website, and how you navigated our site (via cookies and similar technologies).

3. How We Use Your Information

We use your information for legitimate business and healthcare purposes, including:

• To Provide Healthcare: To assess, diagnose, plan, and deliver your physiotherapy treatment.
• Administration: To schedule and manage appointments, process payments, and handle insurance claims.
• Communication: To send you appointment reminders, follow-up instructions, exercise plans, and respond to your inquiries. We will never use your health information for marketing without your explicit, separate consent.
• Improvement: To improve our website, services, and patient care (using anonymized data where possible).
• Legal & Compliance: To comply with our legal and regulatory obligations as healthcare providers.

4. Legal Basis for Processing (GDPR & Indian Context)

We process your personal information based on:

• Contractual Necessity: To fulfill our agreement to provide you with treatment.
• Legal Obligation: To maintain mandatory clinical records as required by law.
• Vital Interests: To protect your vital health interests.
• Consent: For specific, optional purposes like sending marketing newsletters (you can opt-out anytime).

5. How We Share Your Information

Your trust is paramount. We do not sell your personal or health data.

We may share your information only in these limited circumstances:

• With Your Consent: For example, with your referring doctor, another healthcare specialist, or your insurance provider.
• For Legal Reasons: If required by law, court order, or to protect the vital interests of you or another person.
• Service Providers: With trusted third parties who work on our behalf under strict confidentiality agreements (e.g., our secure patient management software provider, payment processors, IT support). They are prohibited from using your information for any other purpose.

6. Data Retention

We retain your personal and health records in accordance with legal and professional obligations (typically for a minimum period as prescribed by local health regulations, e.g., 5-8 years after your last visit, or longer for minors). After this period, records are securely destroyed.

7. Your Rights & Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete data.
• Request Deletion of your data under certain conditions (note: we are legally required to retain health records for a mandated period).
• Restrict or Object to certain processing.
• Data Portability (to receive your data in a structured format).
• Opt-out of Marketing communications at any time (use the "unsubscribe" link or contact us).

To exercise these rights, please contact us using the details below.

8. Cookies

Our website uses cookies to enhance functionality and analyze traffic. You can control cookies through your browser settings. Disabling cookies may affect your website experience.

9. Security

We implement appropriate technical and organizational measures (like encryption, access controls, and secure storage) to protect your sensitive information from unauthorized access, disclosure, alteration, or destruction.

10. Third-Party Links

Our website may contain links to other sites (e.g., health information resources). We are not responsible for the privacy practices of these external sites.

11. Children's Privacy

Our services are directed to individuals over the age of 18. We do not knowingly collect information from minors without parental/guardian consent.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact:

13. Updates to This Policy

We may update this policy periodically. The updated version will be posted on our website with a revised "Last Updated" date. We encourage you to review it occasionally.