Privacy policy
How Dirghayu Centre of Micro Dentistry ("we", "the clinic") collects, uses and protects your information, written to India's Digital Personal Data Protection Act, 2023 (the DPDP Act).
Last updated 31 October 2026
This policy should be reviewed by the clinic's legal advisor.
Who we are
Dirghayu Centre of Micro Dentistry, Kulpi Rd, Doltala, Baruipur, West Bengal 700144, is the Data Fiduciary for the personal data described here. You, the patient, are the Data Principal.
What we collect
- Identity and contact details: name, phone number, email, address, date of birth and gender.
- Appointments: the treatment you asked for, your doctor, dates and times, and messages about your booking.
- Health information: medical and dental history, examination findings, diagnoses, treatment notes, prescriptions, test requests and reports, X-rays, scans and photographs.
- Payments: amounts, dates and payment method (cash, UPI or card). We do not store card numbers.
- Your email choice: whether you asked for clinic news by email, and when.
- Reviews: the name, rating and text you submit on this website.
- Technical data: server logs such as IP address and browser type, kept to keep the service secure. This website does not use advertising or tracking cookies.
Why we use it
- To diagnose and treat you safely and keep an accurate record of your care.
- To book, confirm, remind you of and manage appointments by SMS, WhatsApp, email or phone.
- To request tests, share reports with your treating doctor, and bill and record payments.
- To meet our legal duties, for example keeping medical records and accounts.
- To publish your review on this website, only after the clinic has checked it.
- To email you clinic news and offers, only if you opted in. Every such email has an unsubscribe link.
We do not sell your data, and we do not use it for advertising.
Why we may use it
You give us your details so that we can treat you. The DPDP Act allows us to use information you provide voluntarily for the purpose you gave it, and Indian law requires us to keep medical records, so you are not asked to tick a box or sign a form for us to hold your treatment records. If you do not want us to use your information for something, tell us and we will stop unless the law requires otherwise. Before any invasive procedure, your doctor takes your written consent to that treatment at the clinic. Clinic news by email is sent only if you opt in, and you can opt out at any time.
Who can see your information
- Your treating doctors are the only staff who can see your medical history, notes and reports.
- Reception and management see your name, contact details and appointments.
- Accounts staff see what is needed to record payments.
- Diagnostics staff see your basic details and the instructions for tests your doctor has requested.
Each staff member has their own login, and access to medical and financial records is written to an audit log.
Service providers (Data Processors)
We use these providers to run our systems. They process data only on our instructions and under contract.
| Provider | What it does | Where |
|---|---|---|
| Hostinger | Hosts this website, the staff app and the database. | India |
| Cloudflare (R2 and Turnstile) | Stores files such as X-rays, reports and photographs; checks that online bookings come from a person, not a bot. | India and other countries |
| Resend | Delivers emails such as appointment confirmations, and clinic news to people who opted in. | Outside India |
| Groq (staff assistant) | Runs the AI assistant our staff use to look up schedules and records. It only receives what the staff member asking is already allowed to see. | Outside India |
| Groq (Toothsie) | Answers questions typed into the Toothsie chat on this website. Messages are not stored by the clinic. | Outside India |
| The clinic's own mobile phone | Sends SMS reminders over the mobile network; WhatsApp messages are sent by our staff from the clinic phone. | India |
Some providers process data outside India, which the DPDP Act permits except to countries the Government restricts. The staff AI assistant and the Toothsie chat both process data outside India. Please do not type personal health details into Toothsie; call us or book a visit instead.
How long we keep it
- Medical records are kept for as long as the law requires: at least 3 years from your last visit under Indian medical council regulations, and longer where another law, an insurance claim or a legal dispute requires it.
- Payment and accounting records are kept for as long as tax laws require.
- Everything else (for example an unanswered booking or a declined review) is deleted when it is no longer needed for the purpose it was collected for.
Your rights
- Access: ask for a summary of the personal data we hold about you and who we have shared it with.
- Correction: ask us to correct, complete or update inaccurate information.
- Erasure: ask us to delete your data. We will delete what we can; medical and accounting records we must keep by law are retained until that period ends.
- Opt out of emails: stop clinic news at any time with the unsubscribe link in any email, or by telling us.
- Nominate: name a person who can exercise these rights for you if you die or become unable to.
- Grievance: complain to our Grievance Officer, and if you are not satisfied, to the Data Protection Board of India.
To use any of these rights, email support@dirghayubaruipur.in or ask at reception. We may need to confirm your identity first.
How we protect your data
- All connections to our website and staff app are encrypted (HTTPS).
- Clinical notes and report summaries are encrypted in the database, and files are stored privately and shown only after a permission check.
- Role-based access: each role sees only what it needs, and medical history is limited to doctors.
- Two-factor authentication for staff accounts with access to sensitive records.
- An audit log of who viewed or changed medical and financial records, and encrypted daily backups.
If a personal data breach happens, we will inform you and the Data Protection Board of India as the law requires.
Grievance Officer and contact
Grievance Officer, Dirghayu Centre of Micro Dentistry
Email: support@dirghayubaruipur.in
Phone: 07980304440
Address: Kulpi Rd, Doltala, Baruipur, West Bengal 700144
Changes to this policy
When this policy changes, we update the date above. If a change affects how we use your information, we will tell you before it takes effect.