Privacy Policy & Medical Data ConfidentialityDigital Personal Data Protection Act, 2023 (DPDP Act) & Medical Confidentiality

Full statutory compliance with India's Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and National Medical Commission (NMC) ethical confidentiality standards.

DPDP Act 2023 & NMC Compliant
Our Radical Medical Confidentiality Pledge

At the clinical practice of Dr. Manish Aggarwal (Director of Interventional Cardiology at Yashoda Medicity, Indirapuram), patient trust and diagnostic privacy are inviolable. We treat your personal details, consultation requests, and cardiac imaging records (Angiogram CDs, Echocardiograms, ECGs) with the highest tier of medical discretion. We do not sell, rent, monetize, or trade patient information with any commercial advertiser or third-party marketing broker.

Zero Third-Party Advertising Trackers 256-Bit TLS End-to-End Encryption DPDP Act 2023 Compliant Handling

1. Statutory Framework & Regulatory Scope

This Privacy Policy governs the collection, processing, storage, and protection of personal data and Sensitive Personal Data or Information (SPDI) through the official website https://drmanishaggarwal.in, operated for Dr. Manish Aggarwal (Delhi Medical Council Registration No. 26547 Delhi Medical Council, 2005).

Our data processing practices adhere strictly to:

  • The Digital Personal Data Protection Act, 2023 (DPDP Act) of the Republic of India.
  • The Information Technology Act, 2000 (including Section 43A and the IT Reasonable Security Practices and Procedures and Sensitive Personal Data or Information Rules, 2011).
  • National Medical Commission (NMC) Code of Medical Ethics and Delhi Medical Council standards regarding professional doctor-patient privilege.
  • Telemedicine Practice Guidelines issued by the Board of Governors in supersession of the Medical Council of India (MoHFW).

2. Information We Collect & Process

We only collect data that is strictly necessary for triaging clinical consultations, appointment scheduling, and evaluating cardiac diagnostic second opinions:

Personal Identity Details

  • • Patient Full Legal Name
  • • Contact Phone / Mobile Number
  • • Email Address
  • • Preferred Appointment Date & Time Window

Clinical & Diagnostic Records

  • • Reported Cardiac Symptoms (e.g., exertional chest pain, syncope)
  • • Clinical Procedure of Interest (e.g., TAVI, CTO Angioplasty)
  • • Diagnostic Reports voluntarily shared (Echo EF, Angiogram CD clips)
  • • Cashless Insurance / TPA coverage status

3. Purpose of Clinical Data Processing

Your data is collected and processed exclusively for the following lawful clinical purposes:

  1. Clinical Appointment Coordination: Enabling our clinical desk at Yashoda Medicity to confirm, coordinate, and register your consultation slot with Dr. Manish Aggarwal.
  2. Pre-Procedure Case Review: Reviewing reported coronary blockages, valve gradients, and ejection fractions before outpatient consultation to ensure appropriate diagnostic equipment and cath lab availability.
  3. Cashless Insurance Verification: Facilitating pre-authorization inquiries with Yashoda Medicity's on-site TPA coordinators (CGHS, ECHS, Star Health, Care Health, HDFC ERGO, etc.).
  4. Appointment Receipts & Reminders: Dispatching confirmation emails and SMS/WhatsApp notifications containing clinic directions and consultation reference IDs.

4. Strict Non-Disclosure & Zero Monetization

Absolute Commercial Prohibition: We will never sell, lease, transfer, or disclose your personal or medical data to data brokers, pharmaceutical sales representatives, marketing agencies, or social media advertising platforms.

Data is shared strictly with authorized healthcare personnel directly involved in your clinical management at Yashoda Medicity, Indirapuram, or when mandated by statutory judicial process under applicable Indian law.

5. Data Security Safeguards & Storage

We employ military-grade physical, administrative, and technological security controls:

  • End-to-End Encryption in Transit: All communications between your web browser and our edge servers are encrypted using modern Transport Layer Security (TLS 1.3 / 256-bit AES encryption) verified with HTTPS.
  • Zero Insecure Web Database Exposure: Consultation requests are routed directly to authenticated clinical mailboxes via enterprise email infrastructure with zero unencrypted exposure on public databases.
  • Role-Based Access Control: Only accredited clinical coordinators bound by medical non-disclosure agreements have access to submitted patient histories.
  • Edge Security Shield: Continuous DDoS protection, Web Application Firewall (WAF) inspections, and automated rate limiting powered by Cloudflare's secure infrastructure.

6. Your Rights under the DPDP Act, 2023

As a data principal under Indian data protection law, you possess explicit statutory rights:

Right to AccessYou may request a summary of the personal and contact data maintained in relation to your consultation request.
Right to CorrectionYou may request correction of any inaccurate, incomplete, or outdated personal or clinical details.
Right to ErasureYou may request the permanent deletion of your inquiry contact details, subject to statutory medical record retention obligations.
Right to Grievance RedressalYou have the right to register concerns with our designated Clinical Data Privacy Officer.

7. Data Privacy Officer & Grievance Redressal

For any questions regarding this Privacy Policy, your medical confidentiality rights, or to submit a data erasure request, please contact our designated Practice Administrator:

Direct Practice Phone+91 98711 83181
Clinical LocationYashoda Medicity, Ghaziabad, Delhi NCR (201014)
Last Updated & Effective Date: October 2026 · Compliant with DPDP Act 2023 & NMC Medical Code