1. Who we are
This website (drjyotibajpaiphysiotherapy.com) is operated by Hope Physiotherapy Clinic (“we”, “us”, “the Clinic”), led by Dr. Jyoti Bajpai (MPT, NIRTAR), based in Gurgaon, Haryana, India. For the purposes of the DPDP Act, 2023, we act as the Data Fiduciary for the personal data you provide.
2. What information we collect
We only collect what we need to provide safe, effective online physiotherapy care:
Information you give us
- Identity & contact: name, age, gender, city, phone/WhatsApp number, and email address.
- Health information (sensitive personal data): the body region and symptoms you describe, pain levels, how long you've had the condition, how it started, what makes it better or worse, prior treatments and imaging, current medications, past surgeries, other health conditions, and your recovery goals — i.e. the details you enter into our intake or contact forms.
- Consultation records: clinical notes, assessments, exercise plans and follow-up communications created during your care.
Information collected automatically
- Usage data: basic analytics (pages visited, device type, approximate region) via Google Analytics, used only to improve the website.
3. Why we use it (purpose & legal basis)
We process your data on the basis of your consent, which you give when you submit a form or book a consultation. We use it to:
- Assess your condition and provide an online physiotherapy consultation;
- Prepare and send your clinical report and exercise plan;
- Contact you (by WhatsApp, phone or email) to schedule, confirm, remind, or follow up on your care;
- Maintain accurate medical records as required for continuity of care;
- Improve our website and services in aggregate, non-identifying form.
We do not sell your data, and we do not use your health information for advertising.
4. Where your data is stored
Your form submissions and clinical records are stored in a secured Supabase (PostgreSQL) database hosted in the Mumbai, India (ap-south-1) region — your data stays in India. Access is protected by row-level security so that only Dr. Jyoti Bajpai's authenticated account can read patient records. The website is hosted on Vercel, and transactional emails (confirmations, reports) are sent via Resend. These providers act as our Data Processors and only handle data on our instructions.
5. Who we share it with
We share your information only with:
- Dr. Jyoti Bajpai, who provides your clinical care;
- Our infrastructure processors (Supabase, Vercel, Resend, Google Analytics) strictly to operate the service;
- Authorities, only if required by law (e.g. a valid legal order).
6. How long we keep it
We retain clinical records for as long as needed to provide continuity of care and to meet professional record-keeping standards. You may ask us to delete your data at any time (see Your Rights below), subject to any minimum retention required by law.
7. How we protect it
- Encrypted transmission (HTTPS) across the entire site;
- Database row-level security restricting patient records to the treating clinician;
- Email addresses kept out of public page source to deter harvesting;
- Access limited to the minimum personnel needed to provide care.
8. Your rights under the DPDP Act, 2023
You have the right to:
- Access the personal data we hold about you;
- Correct or update inaccurate or incomplete data;
- Erase your data when it is no longer needed;
- Withdraw consent at any time (this won't affect care already provided);
- Grievance redressal — raise any concern about how your data is handled and receive a timely response.
To exercise any of these rights, contact us using the details below. We will respond within a reasonable period as required by law.
9. Children's data
We provide paediatric physiotherapy. Where a patient is under 18, the intake and consent must be completed by a parent or legal guardian. We process a child's data only with verifiable parental consent and only for the purpose of providing care.
10. Cookies & analytics
We use privacy-respecting analytics to understand site usage in aggregate. We do not use advertising or cross-site tracking cookies. You can block cookies in your browser settings without affecting your ability to book a consultation.
11. Changes to this policy
We may update this policy as our services or the law evolve. The “last updated” date at the top reflects the latest version. Material changes will be highlighted on this page.
12. Grievance & contact
Data Protection / Grievance Contact: Dr. Jyoti Bajpai, Hope Physiotherapy Clinic, Gurgaon, Haryana, India.
Email: dr.bajpai@drjyotibajpaiphysiotherapy.com
Phone / WhatsApp: +91 98183 99214