Privacy Policy

Last Updated: 5 October 2026

At Bone and Joint Clinic (“we”, “us”, “our”), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website or contact us through our website.

Website: https://www.boneandjointclinic.online/

This Privacy Policy is intended to support our compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules.

1. Information We Collect

We collect personal data that you voluntarily provide to us through our website, contact forms, appointment enquiries, or other communications.

Depending on how you interact with us, this may include:

• Full name

• Email address

• Phone number

• Subject or enquiry details

• Message or other information you choose to provide

• Appointment-related information, where applicable

• Medical or health-related information that you voluntarily provide in an enquiry

We request that you provide only the information that is necessary for your enquiry or the service you are requesting.

Automatically Collected Information

When you visit our website, certain technical information may be processed automatically, such as:

• IP address

• Browser type

• Device type

• Operating system

• Pages visited

• Date and time of your visit

• Basic technical and security information

This information may be used to maintain website security, prevent misuse, and improve website performance.

2. How We Use Your Personal Data

We may use your personal data for the following purposes:

• To respond to your enquiries

• To contact you regarding your enquiry

• To schedule or manage appointments, where applicable

• To provide information about our clinic and services

• To provide requested healthcare-related services

• To maintain necessary clinic and business records

• To protect our website from spam, fraud, and unauthorized activity

• To maintain and improve our website

• To comply with applicable legal and regulatory requirements

We do not sell your personal data to third parties.

3. Consent

Where we rely on your consent to process personal data, we will obtain consent through a clear affirmative action, such as selecting a consent checkbox on a website form.

Your consent will relate to a specific purpose and the personal data necessary for that purpose.

You may withdraw your consent at any time where processing is based on consent. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

To withdraw consent or make a privacy-related request, please contact us at:

Email: panda.shakti@gmail.com

4. Cookies and Similar Technologies

Our website may use cookies and similar technologies for website functionality, security, performance, and other features.

Certain third-party services or embedded features may also use cookies or similar technologies.

You can manage or disable cookies through your browser settings. Disabling certain cookies may affect some website features.

Where applicable, we will obtain consent for optional cookies or tracking technologies as required by law.

5. Third-Party Services

We may use third-party service providers to support our website and clinic operations. These services may include:

• Website hosting

• Email delivery

• Website security

• Spam and abuse prevention

• Appointment or communication services, where applicable

• Payment services, where applicable

• Website analytics or performance services, where applicable

• Third-party review or embedded services, where applicable

These service providers may process personal data as necessary to provide their services.

We take reasonable steps to ensure that third-party service providers maintain appropriate safeguards for personal data.

6. Sharing of Personal Data

We may share personal data where necessary with:

• Service providers supporting our website or clinic operations

• Website hosting and technical service providers

• Email and communication service providers

• Appointment or payment service providers, where applicable

• Professional advisers, where necessary

• Government authorities or law-enforcement agencies where required by law

• Other parties where disclosure is necessary to comply with legal obligations or protect our rights

We do not share personal data with unrelated third parties for their own marketing purposes.

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected.

This may include the time required to:

• Respond to enquiries

• Manage appointments

• Provide requested services

• Maintain necessary business or clinic records

• Resolve complaints or disputes

• Comply with legal, accounting, medical, or regulatory requirements

When personal data is no longer required, we will take reasonable steps to delete it or securely dispose of it, subject to applicable legal or regulatory retention requirements.

Information submitted through website forms may be stored in our email, form-management, or other systems used to manage enquiries.

8. Security of Personal Data

We take reasonable technical and organisational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

These measures may include access controls, secure connections, account security, software updates, backups, and other appropriate security measures.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

9. Your Rights

Subject to applicable law, you may have the right to:

• Request access to your personal data

• Request correction of inaccurate or incomplete personal data

• Request deletion of your personal data where applicable

• Withdraw consent where processing is based on consent

• Request information about how your personal data is being processed

• Raise a grievance regarding the processing of your personal data

• Nominate another individual to exercise your rights where permitted under applicable law

To exercise your rights, please contact us using the details provided below.

We may request reasonable information to verify your identity before processing certain requests.

10. Grievance Redressal

If you have any concern regarding the processing of your personal data, you may contact us using the details below.

Bone and Joint Clinic

Address:
A/M-2, Bhimatangi Housing Board Colony,
Bhubaneswar – 751002, Odisha, India

Email: panda.shakti@gmail.com

Phone: +91 7682875405

We will review and respond to privacy-related requests and grievances within the period required under applicable law.

11. Children’s Privacy

Our website is not intentionally directed at children.

We do not knowingly collect personal data from children except where such collection is permitted under applicable law and appropriate consent requirements are followed.

If you believe that personal data relating to a child has been provided to us improperly, please contact us.

12. External Links

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices, content, or security of third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website, technology, or applicable legal requirements.

When we make changes, we will update the Last Updated date at the beginning of this Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy, want to exercise your privacy rights, withdraw consent, or raise a privacy grievance, please contact us:

Bone and Joint Clinic

Address:
A/M-2, Bhimatangi Housing Board Colony,
Bhubaneswar – 751002, Odisha, India

Email: panda.shakti@gmail.com

Phone: +91 7682875405