Privacy Policy

1. Introduction

Welcome to El Smile Dental Clinic Management Platform. In compliance with the **Digital Personal Data Protection (DPDP) Act, 2023** and **Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI)**, this privacy policy describes how we collect, process, use, and protect your personal data when you use our services.

2. Personal Data We Collect

We collect and process the following information, which includes Sensitive Personal Data or Information (SPDI):

• **Identity Details:** Name, age, gender, occupation, and login credentials.
• **Contact Details:** Mobile number, phone, email address, house name, and geographic location.
• **Protected Health Information (PHI):** Medical history (e.g., diabetes, blood pressure, allergies, pregnancy, and other conditions), dental clinical notes, diagnosis, treatment plans, prescriptions, and X-ray records.
• **Guardian Details:** Emergency contact name and phone number (especially for minor patients).

3. Purpose of Processing Your Data

We process your data strictly on the basis of your explicit consent and for the following lawful purposes:

• Creating and managing your Patient Account and OP registration.
• Facilitating appointment booking, queue token allocation, and live tracking.
• Enabling dental practitioners to review medical history, write clinical notes, formulate treatment plans, and write prescriptions.
• Generating invoices and receipt payments (using secure transaction channels).
• Sending automated appointment notifications, welcome/onboarding alerts, and clinic communications.

4. Consent and Your Rights

Under the DPDP Act 2023, you possess the following rights regarding your personal data:

• **Right to Access:** You can view all your personal information, emergency contacts, medical records, and prescriptions through the Patient Dashboard at any time.
• **Right to Correction:** You can request updates or edit your profile directly from the portal.
• **Right to Erasure (Right to be Forgotten):** You may withdraw your consent and delete your account/personal data directly from your profile settings. Doing so permanently deletes your entire digital history from our systems.
• **Consent Withdrawal:** You can choose to revoke your consent at any time.

5. Security Safeguards

We implement industry-standard administrative, physical, and technical safeguards (including CSRF protection, secure cookies, SSL transmission, and rate-limiting) to secure your medical data from unauthorized access, disclosure, or alteration.

6. Grievance Officer and Complaint Redressal

If you have any questions, feedback, or complaints regarding how your personal health data is processed, please contact our designated Grievance Officer:

You also have the right to file a complaint with the **Data Protection Board of India (DPBI)** in accordance with the rules established under the DPDP Act.