Your privacy, in plain words.

Dr. Prabhat Arya, MBBS, MD (Internal Medicine), Delhi Medical Council Reg. No. DMC-83759, decides how your personal data is used. In the words of India’s Digital Personal Data Protection Act, 2023, he is the “Data Fiduciary”.

This policy is written for that Act and its Rules of 2025, and for the Information Technology Act, 2000 and its rules on sensitive personal data, which count health information as sensitive.

Last updated 28 September 2026.

You can read every page without giving your name or making an account. There are no advertising cookies, no tracking and no visitor-counting services.

The company that delivers the pages, Cloudflare, sees the technical details every website receives, such as your internet address and the kind of phone or browser you use. These are used only to deliver the pages and protect the site from attack.

If you tick items on a checklist, or pause the moving picture on the home page, that choice is saved only in your own browser. It is never sent to us.

To look after you, these are collected:

• Your name, age, sex and phone number, and your email if you give it.
• For a child: the child’s weight and the parent’s or guardian’s details.
• Your health: the problem, past illnesses, medicines, allergies, and any reports or photographs you send.
• What happens in the consultation: his notes, the prescription and the advice given.
• Your patient number (UHID), which joins all your records together, and the one-time codes sent to your WhatsApp to sign in.
• Readings you choose to record, such as blood pressure and sugar, and the medicine reminders made from your prescriptions. He may set limits for these readings; a reading beyond a limit is flagged to him, and a dangerous one shows you a message at once to call 112 or go to hospital. These are not watched round the clock.
• Payment: the amount, date, method and reference number. Card and UPI details are handled by the payment company; your full card number or UPI PIN is never seen or kept here.

• To give you medical care: the consultation, the prescription and the follow-up.
• To book your time, remind you of it and send you your prescription.
• To take payment and give you a receipt.
• To keep the medical records the law requires.
• To answer your questions and complaints.

Your data is used because you agree to it when you book. You can withdraw that consent at any time, as easily as you gave it: write to consult@drprabhatarya.com, send a WhatsApp message to +91 95383 71985, or tell him at your visit. Use of your data then stops, except for the records the law requires to be kept. Withdrawing does not undo care already given.

In a medical emergency, the law allows your details to be used to help you without waiting for consent.

Only the people and companies below, and only what each one needs:

• The payment company (Cashfree Payments), to take your payment.
• WhatsApp (Meta), for booking messages, reminders, and your prescription if you choose to receive it there.
• The companies that host the website and the booking and records system, which store the data securely.
• A laboratory, pharmacy, another doctor or a hospital: only when you ask, when your care needs it, or in an emergency.
• The government or a court: only when the law requires it.

Some of these companies may store data outside India. Data goes only to companies bound to protect it at least as well as Indian law requires, and never to a country the Government of India has restricted.

Children under 8 are not seen online. For anyone under 18, a parent or lawful guardian books and gives consent, and a parent or another adult whose identity has been confirmed must be on every call. A child’s data is never used for advertising or to track the child.

Medical records are kept for at least three years from the start of treatment, as Indian medical rules require, and longer when your continuing care needs them or a law or court requires it. Payment records are kept for as long as tax law requires. Anything no longer needed is deleted.

Your records are open only to Dr. Arya, and booking and billing details also to his assistant. Connections to this website are encrypted. Reasonable security measures are taken, as the law requires.

If a breach ever affects your data, you and the Data Protection Board of India will be told, as the law requires.

You can ask:

• for a summary of the data held about you and who it has been shared with;
• for anything wrong or missing to be corrected, completed or updated;
• for your data to be erased, except records the law requires to be kept;
• to name someone who can use these rights for you if you die or cannot act yourself.

Write to consult@drprabhatarya.com or send a WhatsApp message to +91 95383 71985.

Tell him what happened and what you would like done. Your complaint will be acknowledged within 48 hours and resolved within one month at the latest, usually much sooner.

If you are not satisfied with the answer, you may complain to the Data Protection Board of India.

If this policy changes, the new version and its date are shown on this page. A change that affects how your data is used will also be told to you before it applies to you.