This notice explains what personal data Physio Central by Dr Nitin Sunku ("we", "us") collects through this website and at the clinic, why we collect it, and the choices and rights you have. We follow the Digital Personal Data Protection Act, 2023 (DPDP Act) and the rules made under it.
Who we are
Physio Central by Dr Nitin Sunku is a physiotherapy clinic at #1181, 1st Floor, 24th Main Rd, behind Maramma temple, Garden Layout, Sector 2, HSR Layout, Bengaluru, 560102. For anything in this notice, call us on +91 74111 74333.
What we collect
When you send an appointment request we ask for:
- The patient's full name and mobile number (required)
- Email address (optional)
- The service, preferred date and time, and whether you have visited before
- A brief reason for the visit and any access or assistance needs (both optional)
- Your choice on whether to receive occasional clinic updates
We deliberately do not ask for detailed medical history on the website. If you become a patient, your physiotherapist records clinical notes, assessment findings and treatment plans as part of your care. Those records are held securely and are only available to the clinical team looking after you.
We also keep basic technical logs (such as IP address and browser type) for security and to keep the site working.
Analytics and cookies
We use Google Analytics to understand how visitors use our public pages, such as which pages are viewed, roughly where visits come from (city level), and the device and browser used. Google Analytics sets cookies in your browser and processes this data on our behalf under Google's terms and privacy policy, which may include servers outside India.
- Google's advertising features and ad personalisation are switched off, and we do not use advertising cookies.
- Analytics does not run on your private appointment page or on staff systems.
- We do not send your name, phone number, email or anything you type into the booking form to Google Analytics.
You can block or delete cookies in your browser settings, or install Google's opt-out add-on (tools.google.com/dlpage/gaoptout). The site works fully without them.
Why we use it
- To respond to your request, confirm or reschedule your appointment and send reminders
- To provide, record and follow up your treatment
- To issue estimates, invoices and receipts
- To meet legal and regulatory obligations, including medical-record keeping
- To send occasional clinic updates, only if you opted in
We rely on your consent, which you give when you submit the booking form, and on purposes the law allows without consent (for example, medical emergencies or complying with a legal obligation).
Who we share it with
We do not sell your data. We share it only:
- With the clinicians involved in your care, including an onward referral to an orthopaedic surgeon if you agree to one
- With service providers who host and run this website and our booking system, under contract and only for that purpose. Our hosting and database providers store data on servers in Singapore.
- Where the law requires it, for example a valid request from a court or regulator
The map on our contact page is provided by Google. If you interact with it, Google may collect data under its own privacy policy.
How long we keep it
Appointment requests that don't become a visit are deleted or anonymised once they're no longer needed. Clinical records are kept for at least as long as Indian law requires for medical records, and then securely deleted. If you withdraw marketing consent, we stop sending updates straight away.
How we protect it
Data is encrypted in transit, access is limited to staff who need it and protected by individual logins, and staff actions on patient records are logged. Your appointment status page is reachable only through a private link sent to you.
Your rights
Under the DPDP Act you can:
- Ask what personal data we hold about you and how it is used
- Ask us to correct, complete or update it
- Ask us to erase it, where we are not required by law to keep it
- Withdraw your consent at any time (this does not affect anything done before you withdrew it)
- Nominate someone to exercise these rights on your behalf if you die or become unable to
- Raise a grievance with us, and if you are not satisfied, complain to the Data Protection Board of India
To use any of these rights, call +91 74111 74333 or speak to the front desk. We will verify your identity before acting on a request.
Children
If the patient is under 18, a parent or lawful guardian must make the request and give consent on their behalf.
Changes
We will update this page if our practices change and show the date of the latest version at the top.