Privacy Policy | Divine Care

Executive Summary & Patient Assurance

At Divine Diabetic and Geriatric Care, we hold the sanctity of your personal and health information to the highest standards. We strictly distinguish between general website usage data and confidential clinical information submitted for appointment coordination or medical consultations. We never sell or commercialize your personal health information.

1. Key Distinction: Website Data vs. Clinical Information

Fundamental Privacy Principle

To provide complete transparency, Divine Diabetic and Geriatric Care strictly separates the governance of general website interactions from clinical health records.

Please review the two operational categories below:

Category A: Website & Digital Interaction Data

Data collected when you browse our website, submit non-clinical general inquiries, or interact with digital widgets:

Contact details: Name, email address, phone number submitted through contact inquiry forms.
Technical telemetry: IP address, browser type, device operating system, referring URLs, and pages viewed.
Analytics: Optional website usage metrics (via Google Analytics 4) to understand page navigation and visitor engagement, enabled only with your explicit consent.
Communication logs: General customer support inquiries and website feedback.

Category B: Clinical & Medical Information

Data collected when you schedule clinical consultations, submit medical history for appointments, or receive care:

Patient identification: Full legal name, date of birth, age, gender, emergency contact person details.
Clinical history: Medical history voluntarily provided during online intake, diabetes logs, geriatric care requirements, current medications, allergy details.
Diagnostic & Lab records: Pathology lab reports, prescription slips, blood glucose charts uploaded for physician review.
Consultation & Billing notes: Doctor appointment summaries, visit dates, treatment plans, and invoice records.

Confidentiality of Clinical Information

Clinical and medical records are governed by stringent healthcare confidentiality protocols and clinical governance standards. They are strictly compartmentalized and accessible only to authorized medical doctors and clinical care coordinators.

2. How We Collect Your Information

We collect information directly from you when you interact with our website or engage with our healthcare coordinators.

Information is collected through the following touchpoints:

Direct Patient Submissions

Submitting an appointment request form or consultation booking.
Communicating with our clinic via official WhatsApp, telephone, or email.
Completing voluntary pre-consultation medical assessment questionnaires.

Automated Digital Collection

Technical connectivity data required for secure website communication (our code does not set any first-party cookies).
Optional traffic analytics through Google Analytics 4, activated only if you choose to enable analytics.

3. Purposes for Which Information Is Used

We only collect and process personal and clinical information for legitimate, defined healthcare purposes.

Data Type	Primary Purpose	Access Authorization
Website Inquiries	Responding to questions, improving clinic information accessibility	Administrative Support Staff
Appointment Bookings	Scheduling doctor slots, sending SMS/WhatsApp appointment reminders	Patient Care Coordinators
Clinical Records & Reports	Medical diagnosis, diabetes management, geriatric treatment planning	Attending Physicians & Clinical Team
Billing & Invoicing	Issuing GST-compliant receipts, treatment fee records	Accounts & Administration Department

4. Zero Sale of Patient Data & Sharing Policies

Core Guarantee

Divine Diabetic and Geriatric Care maintains a strict Zero-Sale policy for all personal and medical data.

We will NEVER sell, rent, lease, or monetize patient contact details, health profiles, or browsing activity to data brokers, third-party pharmaceutical advertisers, or marketing agencies.

Information is disclosed only under strictly controlled operational conditions:

Permitted Operational Disclosures

With certified diagnostic laboratories when you request integrated blood tests or pathology services.
With technology infrastructure partners hosting our secure booking systems under strict non-disclosure and data processing agreements.
When mandatory by applicable Indian law, court subpoenas, or authorized statutory public health directives.

5. Information Security Measures

We implement industry-standard security measures and administrative protocols to protect your personal and clinical data against unauthorized access, alteration, disclosure, or destruction.

Technical & Physical Safeguards

Encrypted data transmission across the website using modern HTTPS / TLS security protocols.
Strict role-based access control (RBAC), ensuring only authorized personnel have access to specific categories of data.
Routine server patching, firewall monitoring, and vulnerability assessments.
Physical access controls at clinic premises where medical records and diagnostic terminals are situated.

Security Note

While we employ industry-standard safeguards, no digital system can guarantee 100% invulnerability. We advise patients to avoid sharing sensitive financial credentials or passwords over unencrypted communication channels.

6. Your Privacy Rights & Grievance Redressal

As a patient and website visitor, you have explicit rights regarding your personal and medical information under the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology (SPDI) Rules, 2011:

Your Entitlements

Right to Access: Request a summary of personal information and clinical consultation records maintained by the clinic.
Right to Correction & Erasure: Request prompt correction of inaccurate demographic, contact, or clinical background details, or erasure of non-clinical website inquiries.
Right to Revoke Consent: Withdraw consent for non-essential digital communications at any time.
Right to Grievance Redressal: Lodge questions, discrepancies, or privacy concerns directly with our designated Grievance Officer.

Designated Grievance & Data Protection Officer

In compliance with Section 12 of the DPDP Act 2023 and Rule 5(9) of the Information Technology Rules, 2011, the official contact details for our designated Grievance Officer are published below:

Official Designation: Patient Grievance & Data Protection Officer
Appointed Authority: Office of the Clinic Administrator & Patient Relations Lead
Organization: Divine Diabetic and Geriatric Care
Email Address: divinehealth.blr@gmail.com
Direct Telephone: +91 80739 89700
Physical Postal Address: Byrava Complex, behind Prestige Jindal City Apartment, Mayanna Layout, Shrikantapura, Anchepalya, Madanayakanahalli, Karnataka 560073, India
Working Hours: Monday to Saturday, 10:00 AM – 5:00 PM IST (Excluding National Holidays)

Statutory Response Timeline

We acknowledge all privacy inquiries and data grievances promptly. Discrepancies and concerns are formally reviewed and addressed within 30 days in accordance with statutory regulations.

7. Cookies and Web Analytics

Divine Diabetic and Geriatric Care is committed to transparent digital privacy. Our website code creates zero first-party cookies. All core functionality — including exploring services, viewing doctor profiles, and requesting appointments — operates entirely without cookies.

We optionally use Google Analytics 4 to understand how visitors interact with our website, such as which pages are visited and how long visitors stay. Google Analytics is only activated if you click 'Accept Analytics' on our cookie consent notice.

When analytics is accepted, Google Analytics sets third-party cookies (_ga, _ga_*) in your browser. If you select 'Essential Only', Google Analytics does not load, and no analytics cookies are created.

Your consent decision is saved locally in your browser storage (localStorage key 'divine_cookie_consent') so you are not asked on every visit. No personal patient records, clinical notes, symptoms, phone numbers, or appointment form inputs are ever sent to Google Analytics.

Cookies and Storage Used

First-party cookies: None. Our website code sets zero cookies in your browser.
Google Analytics cookies (_ga, _ga_*): Third-party cookies created by Google Analytics only if you grant consent. Used by Google to distinguish unique visits and sessions.
Browser storage (localStorage): Stores your cookie choice ('accepted' or 'essential') under 'divine_cookie_consent'. This remains purely on your device and is never transmitted across the network.

Managing Your Preferences

You can choose 'Essential Only' to prevent Google Analytics from loading at any time.
You can clear your browser cookies and storage at any time via your browser settings, which will reset your consent preference.

8. Data Retention Policies

Clinical records and consultation documentation are retained in accordance with applicable medical council guidelines and clinical establishment statutory mandates to ensure continuity of patient care.

General website contact queries are routinely purged once the inquiry has been resolved, unless ongoing communication is requested.

Designated Regulatory Authority

Patient Grievance & Data Protection Officer

Office of the Clinic Administrator · Divine Care · Healthcare Privacy & Patient Grievance Redressal

Working Hours:

Monday to Saturday, 10:00 AM – 5:00 PM IST

Official Email:divinehealth.blr@gmail.com

Direct Telephone:+91 80739 89700

Clinic Address:

Byrava Complex, behind Prestige Jindal City Apartment, Mayanna Layout, Shrikantapura, Anchepalya, Madanayakanahalli, Karnataka 560073

Statutory Response Commitment: We acknowledge all patient privacy inquiries and accessibility feedback promptly. Formal grievances are addressed within statutory timelines during regular clinic business hours.

Executive Summary & Patient Assurance

1. Key Distinction: Website Data vs. Clinical Information

Fundamental Privacy Principle

To provide complete transparency, Divine Diabetic and Geriatric Care strictly separates the governance of general website interactions from clinical health records.

Please review the two operational categories below:

Category A: Website & Digital Interaction Data

Data collected when you browse our website, submit non-clinical general inquiries, or interact with digital widgets:

Contact details: Name, email address, phone number submitted through contact inquiry forms.
Technical telemetry: IP address, browser type, device operating system, referring URLs, and pages viewed.
Analytics: Optional website usage metrics (via Google Analytics 4) to understand page navigation and visitor engagement, enabled only with your explicit consent.
Communication logs: General customer support inquiries and website feedback.

Category B: Clinical & Medical Information

Data collected when you schedule clinical consultations, submit medical history for appointments, or receive care:

Patient identification: Full legal name, date of birth, age, gender, emergency contact person details.
Clinical history: Medical history voluntarily provided during online intake, diabetes logs, geriatric care requirements, current medications, allergy details.
Diagnostic & Lab records: Pathology lab reports, prescription slips, blood glucose charts uploaded for physician review.
Consultation & Billing notes: Doctor appointment summaries, visit dates, treatment plans, and invoice records.

Confidentiality of Clinical Information

Data Type

Primary Purpose

Access Authorization

Website Inquiries

Responding to questions, improving clinic information accessibility

Administrative Support Staff

Appointment Bookings

Scheduling doctor slots, sending SMS/WhatsApp appointment reminders

Patient Care Coordinators

Clinical Records & Reports

Medical diagnosis, diabetes management, geriatric treatment planning

Attending Physicians & Clinical Team

Billing & Invoicing

Issuing GST-compliant receipts, treatment fee records

Accounts & Administration Department