PRIVACY POLICY
Effective Date: 17-07-2026
Last Updated: 18-07-2026
PRIVACY POLICY
Healing Health Physiotherapy
("We", "Us", "Our", or "Company")
INTRODUCTION
Healing Health Physiotherapy ("Company") respects
your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store,
and protect your information when you interact with us through:
✓ Website (www.healinghealthphysio.in)
✓ WhatsApp (+91 8815021718)
✓ Phone calls (+91 8519010967, +91 8120276045)
✓ Clinic visits (in-person)
✓ Email communications
✓ Third-party platforms
We comply with:
India's Information Technology Act, 2000
Telecom Regulatory Authority of India (TRAI) guidelines
WhatsApp Business API Terms of Service
General Data Protection Regulation (GDPR) - for EU users
Digital Personal Data Protection Act, 2023 (DPDPA)
INFORMATION WE COLLECT
A. INFORMATION YOU PROVIDE DIRECTLY:
Personal Identification:
• Full Name
• Phone Number (WhatsApp, SMS, Call)
• Email Address
• Date of Birth (if provided)
• Gender (if provided)
• Address/Location
• Photo ID details (during clinic visit)
Medical Information:
• Health conditions and symptoms
• Medical history
• Previous treatments and doctors
• Medication details
• Allergies
• Current health status
• Assessment and diagnosis notes
• Treatment progress reports
Appointment Information:
• Appointment date and time
• Preferred communication method
• Cancellation/rescheduling details
• Attendance history
• Session notes and progress
Feedback & Communication:
• Messages via WhatsApp
• Testimonials and reviews
• Feedback about services
• Complaints and queries
Payment Information:
• Transaction details
• Payment method (if applicable)
• Billing address
• Insurance details (if applicable)
B. INFORMATION COLLECTED AUTOMATICALLY:
Device Information:
• Phone model and operating system
• WhatsApp version
• IP address
• Browser type
• Device identifiers
Usage Information:
• Which messages you view
• Message delivery status
• Call duration and frequency
• Website pages visited
• Time spent on website/app
• Click patterns
• Links clicked
Location Information:
• Approximate location (if WhatsApp permission granted)
• City/Area information from address
• GPS data (with explicit consent only)
Communication Metadata:
• Timestamps of messages
• Phone call records
• Message frequency
• Response times
HOW WE USE YOUR INFORMATION
A. PRIMARY PURPOSES:
Clinical Care & Treatment:
✓ Diagnosing your condition
✓ Providing physiotherapy treatment
✓ Creating and updating treatment plans
✓ Monitoring your progress
✓ Adjusting treatment as needed
✓ Maintaining medical records
Appointment Management:
✓ Scheduling appointments
✓ Sending appointment reminders
✓ Confirming attendance
✓ Managing no-shows
✓ Rescheduling sessions
Communication:
✓ Sending WhatsApp messages (reminders, updates, follow-ups)
✓ SMS notifications (with consent)
✓ Answering queries and support
✓ Sending health tips and exercises
✓ Progress updates
Quality & Service Improvement:
✓ Improving our treatment methods
✓ Training our physiotherapists
✓ Evaluating service quality
✓ Customer satisfaction surveys
✓ Collecting testimonials
Legal & Compliance:
✓ Complying with legal obligations
✓ Responding to court orders
✓ Preventing fraud or abuse
✓ Protecting our rights
✓ Maintaining compliance with regulations
B. SECONDARY PURPOSES (WITH CONSENT):
Marketing & Promotion:
✓ Sending promotional offers (only if you opted-in)
✓ Sharing success stories (anonymized, with permission)
✓ Birthday/anniversary greetings
✓ Educational health content
✓ Newsletter subscriptions
Analytics & Research:
✓ Understanding treatment effectiveness
✓ Analyzing trends
✓ Service improvement research
✓ Case studies (anonymized)
LEGAL BASIS FOR PROCESSING
We process your personal data based on:
✓ Contractual Obligation
(To fulfill our service agreement with you)
✓ Legitimate Interest
(To provide better healthcare services)
✓ Legal Obligation
(As required by Indian healthcare laws)
✓ Your Explicit Consent
(For optional services like marketing)
✓ Vital Interests
(To protect your health in emergencies)
DATA SHARING & DISCLOSURE
A. WE DO NOT SHARE DATA WITH:
✗ Advertisers or marketing companies
✗ Social media platforms
✗ Third-party sellers
✗ Unrelated businesses
B. WE MAY SHARE DATA WITH:
Internal Team:
✓ Dr. Sagar Sahu (Clinic Director)
✓ Other physiotherapists (for treatment purposes)
✓ Reception staff (for appointment management)
✓ Administrative staff (for records management)
Essential Service Providers:
✓ WhatsApp Business API (for messaging)
✓ SMS service providers (for SMS reminders - if opted in)
✓ Cloud storage providers (for secure data backup)
✓ Accounting/Billing systems
✓ CRM software providers
Legal Requirements:
✓ Government agencies (if legally required)
✓ Healthcare authorities (if required by law)
✓ Law enforcement (with proper legal order)
✓ Courts and legal proceedings
Related Healthcare Providers:
✓ With your explicit consent
✓ For continuity of care
✓ When referred to specialists
C. DATA PROCESSORS:
WhatsApp (Meta):
• Provider: Meta Platforms Ireland Limited
• Purpose: Secure message delivery
• Data transferred: Phone number, message content, timestamps
• Data Protection: WhatsApp End-to-End Encryption
• Terms: WhatsApp Business Terms
Cloud Storage Provider:
• Purpose: Backup and security
• Data Protection: Encrypted storage
• Location: Within India (compliance with data localization)
DATA STORAGE & RETENTION
Duration of Storage:
Medical & Treatment Records:
✓ While you are an active patient: kept for the full duration of treatment
✓ After your last visit: retained for 10 years, as required under
Indian Medical Council guidelines
✓ Retained longer if required by law, or indefinitely if you
give separate consent for archiving
Note: "Active Patient Records" and "Medical Records" refer to the
same underlying data at different stages — there is a single 10-year
retention period counted from your last visit, not two separate periods.
Appointment Records:
✓ 3 years after appointment date
✓ Then securely deleted
WhatsApp Conversation Logs:
✓ Minimum 1 year
✓ Or as required by law
✓ Then archived and deleted
Marketing Opt-in Data:
✓ Until you unsubscribe
✓ Then immediately deleted
Inquiry Records:
✓ 1 year from last contact
✓ Then securely deleted
Storage Location:
Primary Storage:
• Physical Clinic (Garha, Jabalpur)
• Secure filing systems
• Access-controlled cabinets
Digital Storage:
• Encrypted cloud servers (India-based)
• Secure backup systems
• HTTPS encrypted connections
Security Measures:
• End-to-end encryption (WhatsApp)
• Password protection
• Access logs and audits
• Regular security updates
• Firewall protection
• Anti-malware systems
YOUR RIGHTS & CHOICES
A. RIGHT TO ACCESS:
You have the right to:
✓ Request a copy of all personal data we hold
✓ Know what data we have about you
✓ Obtain your medical records
How to Request:
📧 Email: support@healinghealthphysio.in
📞 Call: +91 8519010967
📍 Visit: Clinic in person
⏱️ Response Time: Within 30 days
B. RIGHT TO RECTIFICATION:
You can:
✓ Correct inaccurate information
✓ Update outdated data
✓ Modify contact details
C. RIGHT TO ERASURE ("Right to be Forgotten"):
You can request deletion of:
✓ Non-essential personal data
✓ Marketing information
✓ Data no longer needed for purpose
Note: Medical records kept for legal retention period.
D. RIGHT TO RESTRICT PROCESSING:
You can:
✓ Ask us to limit how we use your data
✓ Pause processing temporarily
✓ Opt-out of specific uses
E. RIGHT TO DATA PORTABILITY:
You can:
✓ Request your data in portable format
✓ Transfer data to another provider
✓ Obtain digital copy of records
F. RIGHT TO OBJECT:
You can object to:
✓ Marketing communications
✓ Promotional WhatsApp messages
✓ SMS reminders
✓ Feedback surveys
G. RIGHT TO WITHDRAW CONSENT:
✓ Anytime withdraw marketing consent
✓ Stop receiving promotional messages
✓ Unsubscribe from newsletters
How to Withdraw:
📱 Reply "STOP" on WhatsApp
📧 Email: support@healinghealthphysio.in
📞 Call: +91 8519010967
H. RIGHT TO FILE COMPLAINT:
If unhappy with our privacy practices:
✓ Data Protection Authority (India)
✓ State Health Authority
✓ Consumer Protection Authority
WHATSAPP-SPECIFIC PRACTICES
A. HOW WE USE WHATSAPP:
Permitted Uses:
✓ Appointment reminders and confirmations
✓ Treatment updates and progress reports
✓ Answering health-related queries
✓ Sending exercises and guidance videos
✓ Follow-up messages after sessions
✓ Emergency notifications (if urgent)
Not Permitted Uses:
✗ Unsolicited promotional messages
✗ Marketing without opt-in consent
✗ Spamming or excessive messaging
✗ Sharing to other channels
✗ Third-party advertisements
B. MESSAGE FREQUENCY:
Expected Frequency:
• 1-2 messages per week (if active patient)
• Appointment reminders only (if not active)
• Emergency contacts (as needed)
• NO promotional spam
C. DATA ENCRYPTION:
WhatsApp Messages:
✓ End-to-end encrypted by default
✓ Only you and clinic can read
✓ Meta cannot read message content
✓ Secure delivery verification
Phone Number:
✓ Stored securely
✓ Not used for any other purpose
✓ Not shared with third parties
D. OPT-IN & OPT-OUT:
First Contact:
✓ No unsolicited initial messages
✓ Messages only after you contact us
✓ Or after explicit appointment booking
Opting Out:
• Reply "STOP" in any message
• We will immediately stop messaging
• Removal within 48 hours
• Medical appointment reminders still sent (if active patient)
E. COMPLIANCE WITH TRAI REGULATIONS:
TRAI Guidelines (Telecom Regulatory Authority of India):
✓ Do Not Call registry compliance
✓ Do Not Disturb (DND) respect
✓ Consent verification
✓ Message sender identification
✓ Opt-out mechanism provided
✓ Response to complaints within 24 hours
CHILDREN'S PRIVACY
We Do Not:
✗ Intentionally collect data from children under 13
✗ Market services directly to children
✗ Request personal info from minors
Pediatric Patient Data:
✓ Parent/Guardian consent required
✓ Legal guardian's phone number used
✓ Messages sent to guardian
✓ Parent controls communication
If we discover we've collected data from child under 13:
→ We immediately delete it
→ We notify the parent/guardian
→ We request proper consent
SECURITY MEASURES
Technical Security:
✓ SSL/HTTPS encryption for website
✓ End-to-end encryption for WhatsApp
✓ Secure password hashing
✓ Regular security updates
✓ Firewall protection
✓ Anti-malware software
✓ DDoS protection
✓ Intrusion detection systems
Physical Security:
✓ Clinic access control
✓ Secure filing cabinets
✓ Restricted area access
✓ CCTV monitoring
✓ Document destruction protocols
Administrative Security:
✓ Staff privacy training
✓ Confidentiality agreements
✓ Access logs and audits
✓ Regular security assessments
✓ Incident response procedures
✓ Backup and disaster recovery
Limitations:
While we use industry-standard security measures,
NO METHOD IS 100% SECURE.
We cannot guarantee absolute security of:
• Internet transmissions
• Email communications
• Public WiFi connections
• Third-party platforms
THIRD-PARTY LINKS & WEBSITES
Our website may contain links to:
• Social media platforms
• External websites
• Third-party services
Disclaimer:
✗ We are NOT responsible for third-party privacy policies
✗ We do NOT control external websites
✗ You access third-party sites AT YOUR OWN RISK
✓ Review their privacy policies independently
✓ Understand their data collection practices
We recommend:
→ Always check Privacy Policy of linked sites
→ Be cautious sharing info with third parties
→ Contact us if you have concerns
INTERNATIONAL DATA TRANSFERS
Primary Storage: India
✓ Data stored within India
✓ Complies with data localization laws
✓ Follows DPDPA regulations
International Transfers:
WhatsApp (US-based):
✓ Legitimate business transfer
✓ WhatsApp Privacy Policy protects data
✓ End-to-end encryption maintained
✓ Complies with data protection laws
EU Users (GDPR):
✓ Standard Contractual Clauses
✓ Data protection agreements in place
✓ Regular compliance audits
✓ Right to lodge complaint with supervisory authority
CHANGES TO PRIVACY POLICY
We may update this Privacy Policy to:
• Reflect new legal requirements
• Improve our practices
• Adapt to new technologies
• Clarify existing policies
Notification Process:
✓ Major changes: Emailed to you
✓ Policy updated on website
✓ "Last Updated" date will change
✓ 30-day notice for material changes
Continued Use = Acceptance
• If you don't agree with updates
• You can stop using our services
• Request data deletion
CONTACT US
For Privacy-Related Questions:
📧 EMAIL:
support@healinghealthphysio.in
📞 PHONE:
+91 8519010967
+91 8120276045
📍 MAILING ADDRESS:
Healing Health Physiotherapy
677, Royal School के पास
Durga Colony, Sanjeevani Nagar
Garha, Jabalpur, Madhya Pradesh 482003
India
💬 WHATSAPP:
+91 8815021718
(Text: "PRIVACY INQUIRY")
📋 DATA PROTECTION OFFICER:
Name: Sagar sahu
Email: support@healinghealthphysio.in
Response Time:
✓ Email: Within 7 business days
✓ Phone: Within 24 hours
✓ In-person: Immediate
LEGAL COMPLIANCE
This Privacy Policy complies with:
✓ Information Technology Act, 2000 (India)
✓ Information Technology (Reasonable Security Practices
and Procedures and Sensitive Personal Data or Information)
Rules, 2011
✓ Telecom Regulatory Authority of India (TRAI) Guidelines
✓ Telecom Commercial Communications Customer Preference
Regulations, 2018
✓ Digital Personal Data Protection Act, 2023 (DPDPA)
✓ General Data Protection Regulation (GDPR) 2016/679
(for EU residents)
✓ Medical Council of India (Ethical Guidelines)
✓ Indian Medical Council (Regulation) 2002
ACKNOWLEDGMENT & CONSENT
By using our services, you:
✓ Acknowledge reading this Privacy Policy
✓ Understand our data practices
✓ Consent to data collection as described
✓ Agree to storage and processing
✓ Accept these terms of privacy protection
This consent applies to:
• WhatsApp communication
• Clinic visits
• Phone appointments
• Email exchanges
• Website interactions
• Third-party contacts
Withdrawal of Consent:
→ You can withdraw anytime
→ Send written request
→ We will stop processing for new purposes
→ Medical records retained as per law
Version: 1.0
Effective Date: 17-07-2026
Last Updated: 18-07-2026
Healing Health Physiotherapy
All Rights Reserved
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
