Privacy Policy

Last updated: 4 June 2026

This Privacy Policy explains how Minomax Orthopaedics Pvt. Ltd. and Dr. Ashwani Maichand (“we”, “us”, “our”) collect and use your personal data when you use this website, drashwanimaichand.com. We are the Data Fiduciary for this data under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the DPDP Rules, 2025.

This is a brochure and information website. We do not run user accounts, logins, or online payments on this site. We only collect the limited personal data described below.

1. What we collect and why

We collect each item below only for the specific purpose stated next to it, and only with your consent (given by a clear, affirmative action such as ticking a box):

• Contact / enquiry form — your first and last name, phone number, email address, and your message.
  Purpose: to respond to your enquiry and coordinate an appointment. We collect this only when you fill in and submit the form, after you tick the consent box.
• Newsletter signup — your email address.
  Purpose: to send you health updates you have asked for. Sent only if you subscribe; you can unsubscribe at any time.
• Analytics (cookies) — your IP address, device/browser type, and pages viewed, via Google Analytics.
  Purpose: to measure traffic and improve the site. This runs only after you opt in through our cookie banner.
• Spam protection — Google reCAPTCHA processes limited technical data on the contact form.
  Purpose: to prevent spam and automated abuse (a necessary security measure).
• Embedded maps and videos — when you view pages with Google Maps or YouTube embeds, your IP address is shared with Google to load that content.
• Server logs — your IP address, request time, and basic technical data are recorded by our server for security and troubleshooting.

We do not knowingly collect any “special” or sensitive health records through this website. Please do not include detailed medical history in the contact form — bring it to your consultation instead.

2. The legal basis: your consent

Under the DPDP Act, our processing is based on your consent, which must be free, specific, informed, unambiguous, and given by a clear affirmative action. We do not use pre-ticked boxes, and we do not bundle unrelated purposes together.

You can withdraw your consent at any time, and doing so is as easy as giving it — use the Cookie Preferences link (for cookies) or contact our Grievance Officer (for form/newsletter data). Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

3. Cookies

We use a small number of cookies and similar technologies:

• Essential — needed for the site and its forms (including spam protection) to work. Always on.
• Analytics — Google Analytics, to understand site usage. Off until you opt in.
• Marketing — not currently used; reserved for any future campaigns and off by default.

Non-essential cookies do not run until you consent. You can change or withdraw your choice any time via Cookie Preferences or your browser settings.

4. Who we share it with

We do not sell your personal data. We share it only with the service providers (Data Processors) needed to run the site and respond to you, under contracts that require them to protect it:

• Zoho (ZeptoMail) — delivers the contact-form email to our clinic inbox.
• Google — Analytics (if you opt in), reCAPTCHA, Maps, and YouTube embeds.
• DigitalOcean — website hosting.
• Appointment booking — our online booking runs on a separate system at booking.drashwanimaichand.com, which has its own notice for any data you enter there.

We may also disclose data where required by law or to protect our legal rights.

5. How long we keep it

We keep personal data only as long as needed for the purpose it was collected, then delete it:

• Contact-form enquiries (held as email in our clinic inbox): up to 24 months, then deleted, unless an ongoing patient relationship or a legal obligation requires us to keep it longer.
• Newsletter email: until you unsubscribe.
• Analytics data: retained per our Google Analytics settings.
• Server logs: up to 12 months for security purposes.

6. Cross-border transfers

Some of our service providers (such as Google and Zoho) may process data on servers outside India. The DPDP Act permits such transfers except to countries specifically restricted by the Central Government; we do not transfer your data to any restricted country.

7. Your rights

Under the DPDP Act you have the right to:

• Access — request a summary of the personal data we hold about you and how we process it.
• Correction & completion — have inaccurate or incomplete data corrected or updated.
• Erasure — ask us to delete your personal data when it is no longer needed.
• Withdraw consent — at any time, as easily as it was given.
• Nominate — nominate another person to exercise your rights on your behalf in the event of your death or incapacity.
• Grievance redressal — raise a complaint with our Grievance Officer (below) and have it addressed.

To exercise any of these, email our Grievance Officer with your request. We may need to verify your identity before acting.

8. Grievance Officer

If you have any question or complaint about your personal data, please contact:

• Grievance Officer: Dr. Ashwani Maichand, Minomax Orthopaedics Pvt. Ltd.
• Email: drashwanimaichand1@gmail.com
• Clinic: 8/29, West Patel Nagar, Opp. Metro Pillar No. 198, New Delhi 110008

We will acknowledge and respond to your request within 30 days (and in any case within the period required by law). Please use this internal channel first. If you are not satisfied, you may escalate to the Data Protection Board of India.

9. Children

This website is intended for adults. We do not knowingly collect the personal data of anyone under 18 without verifiable consent from a parent or guardian, and we do not carry out behavioural tracking or targeted advertising directed at children. If you believe a child has provided us data, please contact our Grievance Officer and we will delete it. An equivalent protection applies to persons with disabilities who are represented by a lawful guardian.

10. Security

We use reasonable security safeguards to protect your data, including HTTPS/TLS encryption in transit, restricted access to the clinic inbox, and security-hardening on our servers. No method of transmission or storage is completely secure, but we take appropriate measures and require our service providers to do the same.

11. Existing data

If you contacted us before this policy took effect, this notice also describes how we handle the data you previously provided. You may contact our Grievance Officer at any time to access or delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the “Last updated” date above.

Contact

For any privacy question, email drashwanimaichand1@gmail.com or use our contact page.

This Privacy Policy is provided for general information and to support our DPDP compliance. It is not legal advice; for a binding interpretation of how the law applies, consult a qualified data-protection lawyer.