Privacy & Data Protection Notice

Aligned to the India — DPDP Act 2023. Last updated on registration of your account.

Usha Ki Asha(“we”, “us”) is committed to protecting your personal and health information. This notice explains what we collect, why, and the rights you have as a Data Principal under India's Digital Personal Data Protection (DPDP) Act, 2023.

What we collect

• Account details: your name, email and phone number.
• Appointment information: requested times, the clinician, and any reason for visit you choose to share.
• Health documents: files you upload (medical bills, prescriptions, consultation summaries) and summaries we attach to your record.

Why we collect it (purpose)

We process your data solely to provide and manage your psychiatric care: scheduling appointments, maintaining your clinical record, and communicating with you about your treatment. We do not sell your data or use it for advertising.

Consent

We process your personal and health data on the basis of the consent you give when you create an account. You may withdraw your consent at any time by contacting us (see below); withdrawal does not affect processing already carried out, and some records may be retained where the law requires.

How we protect it

• Access is controlled by individual logins. You can only ever see your own appointments and documents; only the treating clinician/admin can see records across patients.
• Documents are stored in encrypted, access-controlled storage and are never exposed by public or guessable links — downloads use short-lived, signed URLs.
• We apply the principle of data minimisation: we keep clinical detail in the portal to what is necessary.

Your rights

As a Data Principal under the DPDP Act, you have the right to:

• access and obtain a summary of the data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data where it is no longer needed for the purpose, subject to legal retention requirements;
• nominate another individual to exercise your rights in case of death or incapacity;
• raise a grievance with us about how your data is handled.

Retention

We retain your data for as long as needed to provide your care and to meet legal and medical record-keeping obligations, after which it is securely deleted.

Contact & grievances

To exercise any right, withdraw consent, or raise a grievance, contact our grievance point of contact at panditsharma.raman@gmail.com or call +91 83192 29494. We aim to respond promptly and within the timelines required by law.

Emergencies

This portal is not monitored 24/7 and is not for emergencies. If you or someone else is in danger, contact your local emergency services immediately.

This notice is a good-faith template and not legal advice. Please have it reviewed by a qualified professional before relying on it.