Privacy Policy

1. Information We Collect

We collect information that you provide directly to us, as well as information collected automatically when you use our website.

1.1 Information You Provide

When you book an appointment or submit a contact enquiry, we collect your name, email address, phone number, and details of your medical concern or message. This information is necessary to schedule appointments, respond to your queries, and provide you with appropriate care.

1.2 Information Collected Automatically

When you access our website, we automatically collect certain technical information, including your IP address, browser type, device information, pages visited, and time spent on each page. This data is used for security, analytics, and to improve our services.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To schedule, confirm, and manage your appointments.
• To respond to your enquiries and contact form submissions.
• To send appointment confirmations and related communications via email.
• To improve and maintain the functionality of our website.
• To protect against abuse, fraud, and unauthorised access to our services.

3. Data Protection

We implement appropriate technical and organisational measures to safeguard your personal information. These include:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS protocols.
• Form submissions are stored in a secured content management system with access restricted to authorised personnel.
• Rate limiting is applied to all form endpoints to prevent automated abuse.
• Access to patient data is strictly limited to Dr. Utkarsh Shah and authorised staff of Arihant Multispeciality Hospital.

4. Third-Party Service Providers

We engage the following third-party service providers to operate this website. Each provider processes data in accordance with their own privacy policies and applicable data protection regulations.

• Sanity CMS — stores appointment and contact form submissions securely.
• Resend — delivers transactional email notifications for appointments and enquiries.
• Vercel — hosts and serves the website infrastructure.

5. Cookies

This website uses only essential cookies that are strictly necessary for the site to function. We do not use advertising cookies, tracking pixels, or analytics cookies that identify individual users.

6. Data Retention

We retain your personal information only for as long as is reasonably necessary to fulfil the purposes outlined in this policy. Appointment and contact records are retained for the duration of the treatment relationship and thereafter as required by applicable medical record-keeping regulations under Indian law.

7. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right of correction — to request correction of inaccurate or incomplete information.
• Right of deletion — to request erasure of your data, subject to legal and medical record-keeping obligations.

To exercise any of these rights, please contact us using the details provided below.

8. Children's Privacy

This website is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. Appointment bookings for patients under 18 must be submitted by a parent or legal guardian.

9. Changes to This Policy

We may revise this Privacy Policy from time to time to reflect changes in our practices or applicable regulations. Any updates will be published on this page with a revised "Last updated" date. We encourage you to review this page periodically.

10. Contact

For questions regarding this Privacy Policy or to exercise your data rights, please contact: