YourPrivacy Matter

Privacy Policy

This Privacy Policy explains how parwezurology.com may collect, use, store, share and protect personal information when you use the website, contact the clinic, book a consultation, share reports or make an online payment. We aim to use personal information only for legitimate patient-care, communication, administrative, security and website-operation purposes.

What This Policy Covers

This policy applies to personal information handled through parwezurology.com and related website-based interactions, including contact forms, appointment requests, online consultation workflows, report-sharing, payment confirmation, email communication, approved WhatsApp links, cookies and website analytics where used. It may not fully govern independent third-party services that have their own privacy policies, such as external payment gateways, messaging platforms, maps, video-consultation platforms, analytics providers or embedded services. Users should also review the privacy notices provided by those services.

Information You Provide Directly

✔️ Name, phone number, email address and basic contact details
✔️ Appointment or consultation preferences
✔️ Messages, enquiries and information entered into website forms
✔️ Medical symptoms, history, reports, prescriptions, test results or images you choose to share through an
approved consultation/report channel
✔️ Identity or travel-related details when genuinely required for international patient coordination
✔️ Payment-related transaction references, amount/status and invoice information where online payment is used

Information Collected Automatically

✔️ IP address, browser and device information
✔️ Website pages viewed, approximate visit time, referral source and technical logs
✔️ Cookie identifiers or analytics data where such tools are enabled
✔️ Security and anti-abuse logs used to protect the website and forms

Medical Information Requires Extra Care

Medical reports, symptoms, prescriptions, diagnostic images and consultation details can be highly sensitive from a patient perspective. Users should share only information that is reasonably necessary for the intended consultation or service and should use the approved report-sharing or consultation channel rather than placing unnecessary medical details into a general enquiry form. The website should not ask visitors to upload medical documents unless there is a clear purpose, a suitable secure workflow and a defined person or team responsible for handling them.

How We Collect Information

✔️ When you complete a contact, appointment or consultation form
✔️ When you upload or send reports through an approved channel
✔️ When you communicate by email, phone or an approved WhatsApp link
✔️ When you complete a consultation payment through a third-party payment gateway
✔️ Automatically through hosting logs, security tools, cookies and analytics where enabled
✔️ From a caregiver or authorised representative when they contact the clinic on your behalf

How We May Use Personal Information

✔️ Respond to enquiries and appointment requests
✔️ Arrange in-person or online consultations
✔️ Review reports and support follow-up care where clinically appropriate
✔️ Verify booking or payment status
✔️ Provide patient-support, administrative and travel/outstation coordination
✔️ Communicate about appointments, rescheduling, reports, follow-up or service updates
✔️ Maintain records reasonably required for medical, administrative, accounting, security or legal purposes
✔️ Prevent spam, fraud, unauthorised access and abuse of website services
✔️Understand website performance and improve user experience where analytics are used
✔️ Comply with applicable legal, regulatory, professional or court requirements

Use Clear, Purpose-Specific Notices

Where consent or a privacy notice is required, the website should clearly explain what information is being requested and why. Consent should not be bundled into unrelated marketing permissions. Users should not be forced to consent to optional promotional communication merely to request medical care or an appointment. Privacy implementation should be reviewed against applicable Indian law, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as and when relevant provisions apply. Because commencement is staged, the final policy should be checked against the legal position on the actual publication date.

Use Only Necessary Information for the Service

Appointment and online-consultation workflows may require contact details, symptoms, medical history, reports and scheduling information. Reports should be accessible only to authorised people involved in the relevant care or administrative workflow. General website staff should not receive more medical information than they need for their role. If a video consultation or report-sharing platform is operated by a third party, that provider may process data under its own terms and privacy policy.

Payment Processing May Be Handled by a Third Party

Where consultation fees are paid online, payment card, bank or UPI credentials should be entered directly into the authorised payment gateway whenever possible. The website should not store full card numbers, CVV values, banking passwords, UPI PINs or other authentication credentials. The clinic or website may receive limited payment information such as transaction status, amount, gateway reference, invoice or refund status for accounting, booking confirmation and support purposes.

Cookies Should Be Used Transparently

The website may use strictly necessary cookies for core functionality and security. Analytics or other non-essential technologies may also be used to understand website performance, subject to the actual tools installed and applicable privacy requirements. Before publication, the site owner should complete a cookie audit and make sure the Privacy Policy, Cookie Policy and cookie-banner settings all describe the same technologies. Do not list Google Analytics, Meta Pixel, Hotjar or any other tool unless it is actually installed and approved.

WhatsApp, Email, Phone & Other Communications

If a visitor chooses to contact the clinic through WhatsApp, email, phone or another external communication service, that service may process communication metadata and content under its own policies. Patients should avoid sending highly sensitive medical or financial information through informal channels unless specifically instructed to do so through an approved workflow. Marketing messages should be separated from essential appointment or care-related communication and should provide an appropriate opt-out where required.

How Information May Be Shared

Personal information should not be sold. It may be shared only when reasonably necessary for a legitimate
purpose, for example:
✔️ With Dr. Parwez Alam and authorised staff involved in consultation, scheduling or patient support
✔️With hospitals, laboratories, imaging centres or other care providers when required for the patient’s care and
appropriately authorised
✔️ With technology providers supporting hosting, email, forms, security, backups, communications or video
consultation
✔️ With the payment processor for consultation fees, refunds or payment verification
✔️ With accountants, auditors, advisers or service providers where reasonably necessary and subject to
appropriate confidentiality
✔️ With government, regulatory, law-enforcement or judicial authorities where disclosure is legally required
✔️In an emergency or serious safety situation where disclosure is permitted or required by applicable law

Third-Party Services & External Links

The website may contain links or embedded services operated by third parties, such as maps, payment gateways, messaging platforms, social media, video consultation tools or other providers. Those services may collect information independently. Dr. Parwez Alam does not control every third-party privacy practice, and users should review the relevant third-party privacy notice before providing information.

International / Cross-Border Processing

Some website, hosting, email, security, analytics, messaging or communication providers may process or store data outside India. International patients may also share information from outside India. Any cross-border processing should be reviewed against applicable law, contractual arrangements and the actual providers used by the website. Do not claim that all data remains in India unless this has been technically verified.

Keep Information Only as Long as Needed

Different categories of information may need different retention periods depending on clinical, administrative, accounting, security, legal and operational requirements. The website should avoid keeping abandoned enquiries, duplicate reports, old form submissions or unnecessary analytics identifiers indefinitely. Before publication, the site owner should document practical retention rules for contact-form leads, appointment records, consultation records, uploaded reports, payment references, backups and security logs.

Reasonable Safeguards, Not Absolute Security

Appropriate technical and organisational safeguards should be used to reduce the risk of unauthorised access,alteration, disclosure, loss or misuse. Examples may include HTTPS, role-based access, strong passwords, multi- factor authentication where available, software updates, backups, security monitoring, restricted file access andcareful management of administrator accounts. No website, email system, messaging platform or online transmission can be guaranteed to be completely secure. The Privacy Policy should never claim 100% security or immunity from cyber incidents.

Data Breach & Security Incident Response

If a security incident affects personal information, the site owner should investigate promptly, contain the issue, preserve relevant logs, change compromised credentials, assess the affected data and take notification or other steps required by applicable law. Security incidents should not be hidden merely because they are inconvenient.

Requests Will Be Handled According to Applicable Law

Depending on the law in force and the circumstances of the processing, individuals may be able to request access to information about their data, correction of inaccurate information, erasure where appropriate, withdrawal of consent for optional processing, grievance redressal or other rights. Some requests may be limited where records must be kept for medical, legal, accounting, fraud-prevention or other permitted reasons. Privacy requests can be sent to info@parwezurology.com. The site owner should verify identity before disclosing or changing personal data.

Children, Minors & Dependent Patients

A parent, lawful guardian or appropriately authorised caregiver may need to act on behalf of a child, minor or dependent patient. The website should not knowingly collect unnecessary personal information from children for marketing or unrelated purposes. Where parental or guardian consent is legally required, the relevant workflow should obtain and document it appropriately.

Data Provided About Another Person

If you submit information about a family member, dependent or another person, you should have appropriate authority to do so. Do not submit another person’s medical reports, identification documents or contact details merely for convenience if you do not have permission or a legitimate caregiving reason.

Changes to This Privacy Policy

This policy may be updated when website features, service providers, legal requirements or clinic processes change. The page should display a clear “Last Updated” date. Material changes should be reflected in the live policy and, where appropriate, brought to users’ attention through the relevant service or notice.

Have a Privacy Question or Request?

For privacy questions, requests or concerns relating to parwezurology.com, contact:
✔️ Email: info@parwezurology.com
✔️ Phone: +91-6377712552
✔️ Location: Aligarh, Uttar Pradesh, India
Before final publication, confirm whether a named grievance contact, data-protection contact or legal entity name
must be published. Do not invent a designation or person merely to make the policy look complete.

Frequently Asked Questions

What personal information may this website collect?

The website may collect contact details, appointment information, messages, consultation details, medical reports you choose to share, limited payment transaction information, and technical information such as device, browser, log or cookie data where relevant.

Does the website collect my medical reports?

Only if you choose to share them through an approved consultation or report-sharing workflow. Do not upload or send more medical information than is reasonably necessary for your consultation or enquiry.

Is my payment card information stored by the website?

The preferred approach is for payment credentials to be entered directly into the authorised payment gateway. The website should not store full card numbers, CVV values, banking passwords or UPI PINs. It may receive limited transaction or payment-status information.

Why is my personal information used?

Information may be used to respond to enquiries, arrange appointments, provide online or in-person consultation support, review reports, process payments, communicate with you, maintain necessary records, secure the website and improve the service.

Is my personal information sold?

The policy should state that personal information is not sold. Information may be shared with authorised clinical, administrative or technology providers only when reasonably necessary for the relevant service or where disclosure is legally required.

Can my information be shared with hospitals or laboratories?

It may be shared when required for your care, investigation, treatment coordination or another legitimate purpose, and where appropriate with your knowledge or authorisation. The exact workflow depends on the service involved.

Does the website use cookies?

The website may use necessary cookies for functionality and security and may use analytics or other technologies if they are actually installed. The live Cookie Policy and consent settings should match the tools in use.

Can I request correction or deletion of my information?

You can contact info@parwezurology.com with a privacy request. Whether information can be corrected or deleted depends on the type of data, the reason it is held and applicable medical, legal, accounting or other retention requirements.

How long is my information kept?

Retention depends on the type and purpose of the information. Contact enquiries, appointment records, consultation information, payment references, reports, security logs and backups may have different retention periods. The site owner should document these before publication.

Is my information completely secure online?

No online system can guarantee absolute security. The website should use reasonable safeguards such as HTTPS, access controls, updates, backups and security monitoring, while being transparent that cyber risk cannot be reduced to zero.

What happens if I contact the clinic through WhatsApp or email?

WhatsApp, email and other communication services are operated by third parties and may process your data under their own policies. Avoid sending unnecessary highly sensitive information through informal channels unless instructed to use them for a specific purpose.

How can I raise a privacy concern?

Email info@parwezurology.com or use the Contact page and clearly state that your message is a privacy request
or concern. The team may need to verify your identity before disclosing, correcting or deleting personal
information.