Privacy Policy

1. Commitment to Privacy

Dr. Aparna Jha Dental Clinic & Implant Centre ("Clinic," "we," "us," or "our") is committed to protecting the privacy and confidentiality of our patients' personal and medical information. This policy is drafted in accordance with the **Information Technology Act, 2000**, the **Digital Personal Data Protection Act (DPDPA), 2023**, and the **Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002**.

2. Information We Collect

We collect and process the following categories of data:

• Personal Identifiable Information (PII): Full name, age, gender, residential address, email address, and phone number.
• Sensitive Personal Data (SPD): Dental and medical history, diagnostic reports (X-rays, Scans), treatment plans, prescription details, and payment information.
• Technical Data: IP address, device type, and interaction logs with our AI Dental Information tool.

3. Purpose of Data Processing

Your data is collected for the following legitimate purposes:

• Provision of personalized dental diagnosis and surgical treatment (RCT, Implants, etc.).
• Management of appointments, reminders, and post-operative follow-up.
• Maintenance of legal medical records as required by clinical establishment laws in Uttar Pradesh, India.
• Processing of insurance claims or billing at your explicit request.

4. Data Sharing and Disclosure

We maintain strict doctor-patient confidentiality. Data is shared with third parties only under the following circumstances:

• Medical Necessity: Sharing diagnostic data with external dental laboratories for crown/bridge fabrication.
• Legal Obligations: Compliance with orders from Indian law enforcement or regulatory authorities under the IT Act.
• Emergency: Disclosure to another healthcare professional in a life-threatening emergency.

5. AI Consultations and Digital Tools

Conversations with our **AI Dental Info** tool are logged to improve accuracy. These logs are stripped of Personally Identifiable Information (PII) before analysis. Users are advised not to share bank details or extremely sensitive non-dental information with the AI interface.

6. Data Security and Retention

We implement robust technical and organizational measures (encryption, restricted access) to safeguard your data against unauthorized access. Patient records are retained for the minimum period mandated by the **Medical Council of India (MCI)** (typically 3 years from the last treatment date).