Privacy Policy

1. Introduction & Website Operator

This Privacy Policy outlines how Dr. Prerna Ayurveda Clinic & Apothecary ("we", "us", or "our"), operated under the clinical leadership of Dr. Prerna Kohad, BAMS(Ayu) (Maharashtra Council of Indian Medicine Registration No: 1-91049-A-1), collects, uses, protects, and handles personal, clinical, and transactional information on https://www.drprerna.com.

We are committed to maintaining the confidentiality, integrity, and security of patient data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act 2023), Section 43A of the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Telemedicine Practice Guidelines, 2020 issued by the Ministry of AYUSH.

2. Information We Collect

We collect personal and health information through your voluntary interactions with our website, clinical consultations, AI diagnostic questionnaires, and apothecary store:

• Identity & Contact Information: Full name, email address, mobile/WhatsApp telephone number, age, gender, and residential/billing address.
• Clinical & Health Information (Separately Guarded): Self-reported health symptoms, skin/hair condition details, digestive health history, Prakriti/Dosha questionnaire answers (from AI skin, hair, and diet tests), previous medical history, and clinical notes recorded during teleconsultation or OPD visits.
• Product, Order & Delivery Information: Products selected, cart data, recipient delivery address, delivery instructions, and order history.
• Payment & Billing Data: Transaction ID, payment status, and billing details. Note: All card, UPI, and net banking details are processed directly by certified, PCI-DSS-compliant payment gateway providers (such as Razorpay). We do not store raw card numbers, CVVs, or bank PINs on our servers.
• Technical & Usage Information: Device type, browser type, IP address, approximate geographical region, session duration, referring URL, and interaction logs collected through Google Tag Manager (GTM-M5VD63Z7) and Google Analytics 4 (G-QCJPSZ4G9P).

3. Purpose of Collection & Lawful Processing

Your data is processed strictly for legitimate, declared healthcare and operational purposes:

• To schedule, confirm, and conduct in-clinic OPD appointments and telemedicine consultations with Dr. Prerna Kohad.
• To evaluate root-cause Ayurvedic imbalances and formulate personalized botanical recommendations and lifestyle regimens.
• To process, pack, invoice, dispatch, and track apothecary product orders.
• To communicate appointment reminders, digital prescription summaries, and tracking links via SMS, Email, or WhatsApp.
• To monitor website performance, enhance navigation safety, and prevent unauthorized portal access.

4. Separation & Protection of Clinical Health Data

We maintain strict structural and operational separation between commercial e-commerce order details and sensitive clinical health data. Patient medical history, telemedicine notes, and diagnostic responses are accessible only to the registered practitioner (Dr. Prerna Kohad) and bound by professional medical confidentiality. Clinical records are never shared with marketing platforms, advertising networks, or third-party brokers.

5. Data Sharing with Essential Service Providers

We share minimum necessary information only with verified operational partners:

• Payment Processors: To complete secure online payment transactions (e.g. Razorpay/UPI).
• Logistics & Courier Partners: Name, delivery address, and contact number shared with courier partners (e.g. Bluedart/Delhivery/DTDC/India Post) solely for parcel delivery.
• Statutory & Lawful Authorities: Only when strictly mandated by applicable Indian law, court subpoena, or public health regulatory order.

6. Cookies & Web Analytics

Our website utilizes essential functional cookies and Google Tag Manager / Google Analytics 4 tracking to measure traffic patterns, optimize page load speed, and remember shopping cart contents. You may disable cookies via your browser settings; however, certain cart and interactive test functions may experience reduced convenience.

7. Data Retention & User Rights

Clinical consultation records are retained in compliance with the retention periods mandated by the Telemedicine Practice Guidelines and AYUSH medical records standards. Order data is retained for accounting and tax compliance.

Under the DPDP Act 2023, you have the right to:

• Request a summary of personal information held about you.
• Request correction or updating of inaccurate personal data.
• Request deletion of non-statutory personal data where legally permissible.
• Withdraw consent for optional promotional notifications.

8. Children's Privacy Notice

Consultations for individuals under 18 years of age must be booked and supervised by a parent or legal guardian in compliance with telemedicine regulations.