How we handle your personal and health information
This policy explains what information we collect, why we collect it, who we share it with, and what rights you have. We have written it in plain language rather than legal jargon.
Lapser Multi Speciality Clinic (“Lapser”, “we”, “us”) operates this website and provides surgical and medical consultation services at our clinics in Sithalapakkam and Velachery, Chennai, Tamil Nadu.
This policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have over it. It applies to this website and to information you give us when you contact us or attend a consultation.
We are the data fiduciary in respect of the personal data described in this policy.
We collect only what we need in order to respond to you and to provide care.
Where you attend a consultation, we record clinical information necessary for your care — your medical history, examination findings, investigation results, diagnoses, treatment provided and follow-up notes.
Health information is sensitive. We treat your medical information with the confidentiality expected of a healthcare provider, and access within the clinic is limited to those involved in your care or in administering it.
We use your information for the following purposes:
We process your information on the basis of the consent you give us when you contact us or attend a consultation, and where processing is necessary for your medical treatment or to meet a legal obligation.
We do not sell your personal information, and we do not share it with advertisers or data brokers. We do not use your health information for marketing.
We share information only where it is necessary, and only to the extent necessary. This may include:
Where a referral to another specialist is appropriate, we share the clinical information needed for your continued care.
Our website offers WhatsApp and telephone as ways to contact us. These are convenient, but they are not encrypted health record systems and you should bear that in mind.
Please avoid sending detailed medical information, photographs of a medical nature, or scanned reports over WhatsApp unless we have specifically asked you to. A brief message asking for an appointment is fine. Detailed clinical discussion belongs in a consultation.
WhatsApp is operated by a third party and is subject to its own privacy policy and terms, over which we have no control. Messages you send us are retained on your device and ours.
We keep your information for as long as necessary for the purpose it was collected, and for as long as we are required to retain it.
Specify your actual retention periods here, confirmed against the Indian Medical Council (Professional Conduct) Regulations and any applicable Tamil Nadu Clinical Establishments requirements. Retention periods differ for outpatient records, inpatient records and medico-legal cases.
This website uses cookies — small files stored on your device — to make the site work and to understand how it is used.
You can control or delete cookies through your browser settings. Disabling essential cookies may affect how the site works.
List the specific services you actually use — for example Google Analytics, Google Ads conversion tracking, or Meta Pixel — and link to their respective privacy policies. If you use a cookie consent banner, describe it here.
We take reasonable technical and organisational measures to protect your information against unauthorised access, loss, misuse or alteration. These include restricted access to records, secure storage, and confidentiality obligations on our staff.
No method of transmission over the internet is completely secure. While we take care to protect your information, we cannot guarantee absolute security of information transmitted to us online.
Under the Digital Personal Data Protection Act, 2023, you have the following rights in respect of your personal data:
To exercise any of these rights, contact us using the details at the end of this page. We may need to verify your identity before acting on a request.
Erasure has limits in a medical context. We are required to retain medical records for defined periods, and cannot delete clinical records on request where a retention obligation applies. We will explain if this is the case.
Where we treat a patient under the age of 18, information is provided and consented to by a parent or legal guardian. We do not knowingly collect personal information directly from children through this website.
If you believe a child has provided information to us through this website, please contact us and we will take appropriate action.
This website may contain links to other websites, including our YouTube channel, Google listings and social media pages. We are not responsible for the privacy practices or content of those websites. We encourage you to read their privacy policies.
If you have a concern about how your personal data has been handled, you may contact our Grievance Officer. We will acknowledge your complaint and respond within the timeframe prescribed under applicable law.
The Digital Personal Data Protection Act, 2023 requires a data fiduciary to publish the contact details of a Grievance Officer or an equivalent designated contact. Insert the officer's name, designation, email address and postal address here before this page goes live.
We may update this policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this page shows when it was last updated.
Where changes are significant, we will take reasonable steps to bring them to your attention. Continued use of this website after an update constitutes acceptance of the revised policy.
If you have a question about this policy or about how your information is handled, get in touch.
This privacy policy is provided for general information. It has been prepared as a working draft and should be reviewed by a qualified legal professional before publication, and kept current with the Digital Personal Data Protection Act, 2023 and any rules notified under it, together with applicable medical record-keeping regulations.
