When you share your name, phone number or details about your pain with us, you are trusting us with something personal. This Privacy Policy explains, in plain language, what information Dr Heal Pain Cure Hospital collects through this website and when you contact us, why we need it, who can see it, how long we keep it and the choices you have. It is written to follow India’s Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the rules made under them.
Privacy at Dr Heal, in short
- We collect only what we need to answer your enquiry, book your visit and care for you.
- We never sell your personal or health information.
- Your health details are seen only by the people involved in your care, and by service providers who help us run our systems under strict confidentiality.
- You can ask to see, correct or delete your information, or withdraw your consent, at any time.
- Questions or complaints? Email customer@drheal.org or call 07969288086.
1. Who we are
This website, drheal247.com, is run by Dr Heal Pain Cure Hospital (“Dr Heal”, “we”, “us” or “our”), a non-surgical pain treatment hospital in Bengaluru with two branches:
- HSR Layout: Ganapa Arcade, No. 392, 9th Main Road, 7th Sector, HSR Layout, Bengaluru 560102
- Banashankari: No. 208 & 209, 100 Feet Outer Ring Road, 4th Block, Banashankari 3rd Stage, Bengaluru 560085
Under the DPDP Act, Dr Heal is the Data Fiduciary for the personal data described in this policy. That means we decide why and how your data is used, and we are responsible for protecting it.
2. What this policy covers
This policy applies to personal data we collect when you:
- visit or browse drheal247.com, including our treatment pages and Health Blog
- fill in a contact or enquiry form, or sign up for updates
- book an appointment through our booking page at drheal.org/appointment
- call us, email us or message us on WhatsApp or social media
Your medical records created during consultation and treatment at our hospitals are also protected by medical confidentiality rules and the record-keeping duties that apply to hospitals in India. This policy sits alongside those duties; it does not reduce them.
3. Information we collect
| Type of information | Examples | How we get it |
|---|---|---|
| Contact details | Name, mobile number, email address, area or city | Forms, phone calls, WhatsApp, emails, appointment booking |
| Appointment details | Preferred branch, date and time, reason for visit | Booking page, phone calls |
| Health information you choose to share | Symptoms, how long you have had pain, existing reports or scans, medicines you take | Forms, calls, messages, consultation |
| Technical and usage data | IP address, device and browser type, pages visited, time spent, how you reached the site | Cookies and analytics tools when you browse the website |
| Communication records | Your messages to us and our replies | Email, WhatsApp, social media, forms |
We do not ask for your Aadhaar number, bank or card details through this website. If anyone claiming to be from Dr Heal asks for your bank OTP, PIN or card number, please do not share it and call us on 07969288086 to report it.
4. Your health information
Health information is among the most sensitive data anyone can share, and we treat it that way. Information about your symptoms, reports and treatment is used only to understand your problem, plan your care and follow up with you. It is accessed only by the doctors, nurses and staff involved in your care, and by service providers who help us run our systems under confidentiality obligations.
A request before you type
Website forms are meant for short enquiries. Please do not send full medical records, MRI files or detailed medical history through a website form. Bring your reports to your appointment instead, or ask our team for the safest way to share them before your visit.
5. How we use your information
- To reply to you. Answering your call, message or enquiry, and calling you back when you ask us to.
- To book and manage appointments. Confirming, rescheduling and reminding you about visits by call, SMS, WhatsApp or email.
- To provide care. Assessing your condition, planning treatment and following up on your progress.
- To keep in touch, if you agree. Sending health tips, new articles or service updates. You can opt out at any time.
- To improve the website. Understanding which pages help people most, using anonymous or aggregated analytics.
- To meet legal duties. Keeping records required by law, responding to lawful requests from authorities, and protecting our patients, staff and systems.
We will not use your personal data for a new purpose that is unrelated to the one you shared it for without telling you and, where the law requires, asking for your consent.
6. Consent and legal grounds
We process most personal data because you have given your consent, for example by submitting a form, booking an appointment or calling us. You can withdraw that consent at any time by writing to customer@drheal.org. Withdrawing consent does not affect anything we did lawfully before you withdrew it. If you withdraw consent for data we need to treat you, we will explain what that means for your care.
In some situations the DPDP Act allows us to process data without fresh consent, such as responding to a medical emergency involving a threat to your life or health, or complying with a law, court order or government direction.
7. Who we share it with
We do not sell, rent or trade your personal data. We share it only when needed, and only as much as needed, with:
- Our care team at the HSR Layout and Banashankari branches, including doctors, nurses, laboratory, radiology and pharmacy staff.
- Service providers who help us run the website and our communication, such as website hosting, email, appointment booking, analytics and messaging tools. They act on our instructions and must keep your data confidential and secure.
- Other healthcare providers, such as a specialist or diagnostic centre, when you need a referral and you agree to it.
- Insurers or third-party administrators, only when you ask us to help with a claim.
- Government bodies, courts or police, when the law requires it.
Some of our service providers may store data on servers outside India. Where this happens, we transfer data only as permitted under Indian law and expect the provider to protect it to the standard described here.
8. Cookies and analytics
Cookies are small text files saved in your browser. We use them to keep the website working properly and to understand, in general terms, how visitors use it.
- Essential cookies help pages load quickly and securely.
- Analytics cookies, such as Google Analytics, tell us which pages are visited and how people find us. This helps us write more useful health information. Google’s own privacy policy applies to the data it processes.
- Embedded content, such as YouTube patient videos or Google Maps, may set their own cookies when you view or play them.
You can block or delete cookies in your browser settings. The website will still work, though some features such as embedded videos may not.
9. How we protect your data
We use reasonable security safeguards to protect personal data from unauthorised access, loss, misuse or alteration. These include an encrypted (HTTPS) website connection, limited staff access on a need-to-know basis, password-protected systems and confidentiality commitments from staff and service providers.
No system is completely secure. If a personal data breach occurs that affects you, we will inform you and the Data Protection Board of India as required by law, and take prompt steps to limit the harm.
10. How long we keep it
- Website enquiries that do not lead to a visit are kept only as long as needed to respond and follow up, and then deleted or anonymised.
- Medical and treatment records are kept for the period required under medical and hospital record-keeping rules in India, which can be several years.
- Marketing preferences are kept until you unsubscribe, after which we keep only a note that you opted out.
11. Your rights
Under the DPDP Act, you have the right to:
- Access: get a summary of the personal data we hold about you and how we use it.
- Correction and updating: ask us to fix inaccurate or incomplete data.
- Erasure: ask us to delete data we no longer need, except where the law requires us to keep it, such as medical records.
- Withdraw consent: stop us using your data for purposes based on consent, including marketing.
- Grievance redressal: raise a complaint with us and get a response.
- Nominate: name someone to exercise these rights on your behalf if you die or become unable to do so.
To use any of these rights, email customer@drheal.org with the subject line “Privacy request”, or speak to the front desk at either branch. We may ask you to confirm your identity before acting on the request, so that your information is never given to the wrong person. If you are not satisfied with our response, you can approach the Data Protection Board of India.
12. Children and young people
We treat patients of all ages, but this website is meant for adults. If a patient is under 18, a parent or legal guardian should contact us, book the appointment and give consent on the child’s behalf. We do not knowingly collect personal data directly from children through this website, and we do not track children or show them targeted advertising.
13. Other websites
Our pages link to other websites and platforms, such as YouTube, Google Maps, Facebook, Instagram and LinkedIn. Those services have their own privacy policies, and we are not responsible for how they handle your data. Please read their policies before sharing information with them.
14. Changes to this policy
We may update this policy when the law changes or when we change how we work. The date at the top shows when it was last updated. If a change significantly affects how we use your data, we will make it clear on the website and, where needed, ask for your consent again.
15. Contact and Grievance Officer
Grievance Officer, Dr Heal Pain Cure Hospital
Email: customer@drheal.org (subject: “Privacy request” or “Grievance”)
Phone: 07969288086
Address: Ganapa Arcade, No. 392, 9th Main Road, 7th Sector, HSR Layout, Bengaluru 560102, Karnataka
We aim to acknowledge every privacy request or complaint within 72 hours and to resolve it within 30 days.
Frequently asked questions
Will Dr Heal share my health details with my employer or family?
No, not without your permission. Your health information is shared only with the people involved in your care, or when the law requires it. If you want a family member to speak to us about your treatment, just tell us.
Do you sell my phone number or email to other companies?
No. We never sell, rent or trade personal data. We use your contact details only to reply to you, manage your appointments and, if you agree, send you useful health updates.
How do I stop receiving messages from Dr Heal?
Reply STOP to our messages, use the unsubscribe link in our emails, or email customer@drheal.org. Appointment-related messages for an upcoming visit may still be sent so that you do not miss it.
Can I get a copy of my medical records?
Yes. Ask at the front desk of the branch you visited, or email customer@drheal.org. We will confirm your identity first and then share your records as allowed under the rules for medical records in India.
Can I ask you to delete my information?
Yes. We will delete enquiry and marketing data on request. Medical records must be kept for the period the law requires, but we will stop using your data for anything other than those legal duties.
Have a question about your privacy, or about your pain?
Our team is available 24 hours at HSR Layout and Banashankari. Ask us anything, from how we handle your reports to whether your back, neck or knee pain can be treated without surgery.
Call 07969288086Email us