Privacy policy
How Dirghayu Centre of Micro Dentistry ("we", "the clinic") collects, uses and protects your information, written to India's Digital Personal Data Protection Act, 2023 (the DPDP Act).
Notice version 2026-10-31
This policy should be reviewed by the clinic's legal advisor.
Who we are
Dirghayu Centre of Micro Dentistry, Kulpi Rd, Doltala, Baruipur, West Bengal 700144, is the Data Fiduciary for the personal data described here. You, the patient, are the Data Principal.
What we collect
- Identity and contact details: name, phone number, email, address, date of birth and gender.
- Appointments: the treatment you asked for, your doctor, dates and times, and messages about your booking.
- Health information: medical and dental history, examination findings, diagnoses, treatment notes, prescriptions, test requests and reports, X-rays, scans and photographs.
- Payments: amounts, dates and payment method (cash, UPI or card). We do not store card numbers.
- Consent records: when and how you gave or withdrew consent, the notice version, the language, the IP address of the device used, and a signature image when you sign on the clinic tablet.
- Reviews: the name, rating and text you submit on this website.
- Technical data: server logs such as IP address and browser type, kept to keep the service secure. This website does not use advertising or tracking cookies.
Why we use it
- To diagnose and treat you safely and keep an accurate record of your care.
- To book, confirm, remind you of and manage appointments by SMS, WhatsApp, email or phone.
- To request tests, share reports with your treating doctor, and bill and record payments.
- To meet our legal duties, for example keeping medical records and accounts.
- To publish your review on this website, only after the clinic has checked it.
We do not sell your data, and we do not use it for advertising.
Legal basis: your consent
We process your data on the basis of your free, specific and informed consent, given by a clear action: ticking an unticked box when you book online, tapping "I agree" on a consent link, or signing on the clinic tablet. Until consent is given, we keep only your contact and appointment details and do not record clinical notes. The DPDP Act also allows some processing without consent for legitimate uses, such as responding to a medical emergency or complying with a law or court order.
Who can see your information
- Your treating doctors are the only staff who can see your medical history, notes and reports.
- Reception and management see your name, contact details and appointments.
- Accounts staff see what is needed to record payments.
- Diagnostics staff see your basic details and the instructions for tests your doctor has requested.
Each staff member has their own login, and access to medical and financial records is written to an audit log.
Service providers (Data Processors)
We use these providers to run our systems. They process data only on our instructions and under contract.
| Provider | What it does | Where |
|---|---|---|
| Hostinger | Hosts this website, the staff app and the database. | India |
| Cloudflare (R2 and Turnstile) | Stores files such as X-rays, reports and consent signatures; checks that online bookings come from a person, not a bot. | India and other countries |
| Resend | Delivers emails such as appointment confirmations and consent receipts. | Outside India |
| Groq (staff assistant) | Runs the AI assistant our staff use to look up schedules and records. It only receives what the staff member asking is already allowed to see. | Outside India |
| Groq (Toothsie) | Answers questions typed into the Toothsie chat on this website. Messages are not stored by the clinic. | Outside India |
| The clinic's own mobile phone | Sends SMS reminders and consent links over the mobile network; WhatsApp messages are sent by our staff from the clinic phone. | India |
Some providers process data outside India, which the DPDP Act permits except to countries the Government restricts. The staff AI assistant and the Toothsie chat both process data outside India. Please do not type personal health details into Toothsie; call us or book a visit instead.
How long we keep it
- Medical records are kept for as long as the law requires: at least 3 years from your last visit under Indian medical council regulations, and longer where another law, an insurance claim or a legal dispute requires it.
- Payment and accounting records are kept for as long as tax laws require.
- Consent records are kept as long as the data they cover, so we can show consent was given.
- Everything else (for example an unanswered booking or a declined review) is deleted when it is no longer needed for the purpose it was collected for.
Your rights
- Access: ask for a summary of the personal data we hold about you and who we have shared it with.
- Correction: ask us to correct, complete or update inaccurate information.
- Erasure: ask us to delete your data. We will delete what we can; medical and accounting records we must keep by law are retained until that period ends.
- Withdraw consent: at any time, as easily as you gave it. Withdrawal does not affect care already given, and records we must keep by law are retained.
- Nominate: name a person who can exercise these rights for you if you die or become unable to.
- Grievance: complain to our Grievance Officer, and if you are not satisfied, to the Data Protection Board of India.
To use any of these rights, email support@dirghayubaruipur.in or ask at reception. We may need to confirm your identity first.
How we protect your data
- All connections to our website and staff app are encrypted (HTTPS).
- Clinical notes and report summaries are encrypted in the database, and files are stored privately and shown only after a permission check.
- Role-based access: each role sees only what it needs, and medical history is limited to doctors.
- Two-factor authentication for staff accounts with access to sensitive records.
- An audit log of who viewed or changed medical and financial records, and encrypted daily backups.
If a personal data breach happens, we will inform you and the Data Protection Board of India as the law requires.
Grievance Officer and contact
Grievance Officer, Dirghayu Centre of Micro Dentistry
Email: support@dirghayubaruipur.in
Phone: 07980304440
Address: Kulpi Rd, Doltala, Baruipur, West Bengal 700144
Consent notice
This is the short notice shown when you give consent (version 2026-10-31).
Privacy notice
Dirghayu Centre of Micro Dentistry ('the Clinic') collects and stores your name, contact details, appointment history, medical and dental history, clinical findings, test reports, radiographs and images, and payment records, solely to provide safe treatment and to maintain your clinical record.
Your medical and dental history is accessible only to the clinicians treating you. Other members of staff see only the information their role requires, such as your name, telephone number and appointment time.
Your records are held on secure servers in India and with a small number of service providers engaged by the Clinic for hosting, file storage, email and AI assistance, each named in our privacy policy. The Clinic never sells your personal data.
Under the Digital Personal Data Protection Act, 2023, you may request access to or correction of your information, raise a grievance, or withdraw this consent by writing to support@dirghayubaruipur.in. Clinical records are retained for the period required by law, including after consent is withdrawn.
গোপনীয়তা বিজ্ঞপ্তি
দীর্ঘায়ু সেন্টার অফ মাইক্রো ডেন্টিস্ট্রি ('ক্লিনিক') কেবলমাত্র নিরাপদ চিকিৎসা প্রদান এবং আপনার চিকিৎসা-সংক্রান্ত রেকর্ড রক্ষণাবেক্ষণের উদ্দেশ্যে আপনার নাম, যোগাযোগের তথ্য, অ্যাপয়েন্টমেন্টের ইতিহাস, চিকিৎসা ও দাঁতের ইতিহাস, ক্লিনিক্যাল পর্যবেক্ষণ, পরীক্ষার রিপোর্ট, রেডিওগ্রাফ ও ছবি এবং পেমেন্টের রেকর্ড সংগ্রহ ও সংরক্ষণ করে।
আপনার চিকিৎসা ও দাঁতের ইতিহাস কেবল আপনার চিকিৎসকরাই দেখতে পারেন। অন্যান্য কর্মীরা তাঁদের দায়িত্বের জন্য যতটুকু প্রয়োজন কেবল ততটুকুই দেখেন, যেমন আপনার নাম, ফোন নম্বর ও অ্যাপয়েন্টমেন্টের সময়।
আপনার রেকর্ড ভারতের সুরক্ষিত সার্ভারে এবং হোস্টিং, ফাইল সংরক্ষণ, ইমেল ও AI সহায়তার জন্য ক্লিনিকের নিযুক্ত অল্প কয়েকটি পরিষেবা প্রদানকারীর কাছে রাখা হয়, যাদের নাম আমাদের গোপনীয়তা নীতিতে দেওয়া আছে। ক্লিনিক কখনও আপনার ব্যক্তিগত তথ্য বিক্রি করে না।
ডিজিটাল ব্যক্তিগত তথ্য সুরক্ষা আইন, ২০২৩ অনুযায়ী, support@dirghayubaruipur.in-এ লিখে আপনি আপনার তথ্য দেখতে বা সংশোধন করতে, অভিযোগ জানাতে, অথবা এই সম্মতি প্রত্যাহার করতে পারেন। সম্মতি প্রত্যাহারের পরেও আইন অনুযায়ী নির্ধারিত সময় পর্যন্ত চিকিৎসার রেকর্ড রাখা হয়।
Changes to this policy
When this policy or the consent notice changes, we update the version number above and, where the change affects how we use your data, ask for your consent again.