Clinic Privacy Policy Template — DPDP Readiness Sprint
**Business:** [CLINIC / LAB NAME]
**Location:** [CITY]
**Last updated:** [DATE]
[BUSINESS NAME] collects only the information needed to respond to enquiries, book appointments, coordinate service delivery, process payments, and support customers.
Information we collect
Name, phone number, email, service interest, appointment details, messages you submit, and limited operational records needed to handle your enquiry. Do not submit emergency medical information through website forms.
Why we use it
To respond to your enquiry, schedule or coordinate service, send requested information, manage follow-up, improve our service experience, and meet applicable operational/legal requirements.
Who handles it
Authorised staff, website/hosting providers, email/WhatsApp/CRM tools, payment providers, and approved service vendors where required. Vendor details should be listed in the data inventory.
WhatsApp and follow-up
When you message us or submit a form, we may contact you about that enquiry on phone, email, or WhatsApp. Promotional messages need a separate opt-in where applicable.
Retention
We keep enquiry records only for the period required for follow-up, service, reporting, or legal/accounting needs. Final retention periods must be approved by the business owner/legal counsel.
Your requests
You may request correction, access, or deletion of your personal data by contacting [CONTACT EMAIL/PHONE]. Some records may need to be retained where required by law or legitimate operations.
Operational readiness template only; not legal advice.