Privacy Policy & Medical Data ConfidentialityDigital Personal Data Protection Act, 2023 (DPDP Act) & Medical Confidentiality
Full statutory compliance with India's Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and National Medical Commission (NMC) ethical confidentiality standards.
At the clinical practice of Dr. Manish Aggarwal (Director of Interventional Cardiology at Yashoda Medicity, Indirapuram), patient trust and diagnostic privacy are inviolable. We treat your personal details, consultation requests, and cardiac imaging records (Angiogram CDs, Echocardiograms, ECGs) with the highest tier of medical discretion. We do not sell, rent, monetize, or trade patient information with any commercial advertiser or third-party marketing broker.
1. Statutory Framework & Regulatory Scope
This Privacy Policy governs the collection, processing, storage, and protection of personal data and Sensitive Personal Data or Information (SPDI) through the official website https://drmanishaggarwal.in, operated for Dr. Manish Aggarwal (Delhi Medical Council Registration No. 26547 Delhi Medical Council, 2005).
Our data processing practices adhere strictly to:
- The Digital Personal Data Protection Act, 2023 (DPDP Act) of the Republic of India.
- The Information Technology Act, 2000 (including Section 43A and the IT Reasonable Security Practices and Procedures and Sensitive Personal Data or Information Rules, 2011).
- National Medical Commission (NMC) Code of Medical Ethics and Delhi Medical Council standards regarding professional doctor-patient privilege.
- Telemedicine Practice Guidelines issued by the Board of Governors in supersession of the Medical Council of India (MoHFW).
2. Information We Collect & Process
We only collect data that is strictly necessary for triaging clinical consultations, appointment scheduling, and evaluating cardiac diagnostic second opinions:
Personal Identity Details
- • Patient Full Legal Name
- • Contact Phone / Mobile Number
- • Email Address
- • Preferred Appointment Date & Time Window
Clinical & Diagnostic Records
- • Reported Cardiac Symptoms (e.g., exertional chest pain, syncope)
- • Clinical Procedure of Interest (e.g., TAVI, CTO Angioplasty)
- • Diagnostic Reports voluntarily shared (Echo EF, Angiogram CD clips)
- • Cashless Insurance / TPA coverage status
3. Purpose of Clinical Data Processing
Your data is collected and processed exclusively for the following lawful clinical purposes:
- Clinical Appointment Coordination: Enabling our clinical desk at Yashoda Medicity to confirm, coordinate, and register your consultation slot with Dr. Manish Aggarwal.
- Pre-Procedure Case Review: Reviewing reported coronary blockages, valve gradients, and ejection fractions before outpatient consultation to ensure appropriate diagnostic equipment and cath lab availability.
- Cashless Insurance Verification: Facilitating pre-authorization inquiries with Yashoda Medicity's on-site TPA coordinators (CGHS, ECHS, Star Health, Care Health, HDFC ERGO, etc.).
- Appointment Receipts & Reminders: Dispatching confirmation emails and SMS/WhatsApp notifications containing clinic directions and consultation reference IDs.
4. Strict Non-Disclosure & Zero Monetization
Absolute Commercial Prohibition: We will never sell, lease, transfer, or disclose your personal or medical data to data brokers, pharmaceutical sales representatives, marketing agencies, or social media advertising platforms.
Data is shared strictly with authorized healthcare personnel directly involved in your clinical management at Yashoda Medicity, Indirapuram, or when mandated by statutory judicial process under applicable Indian law.
5. Data Security Safeguards & Storage
We employ military-grade physical, administrative, and technological security controls:
- End-to-End Encryption in Transit: All communications between your web browser and our edge servers are encrypted using modern Transport Layer Security (TLS 1.3 / 256-bit AES encryption) verified with HTTPS.
- Zero Insecure Web Database Exposure: Consultation requests are routed directly to authenticated clinical mailboxes via enterprise email infrastructure with zero unencrypted exposure on public databases.
- Role-Based Access Control: Only accredited clinical coordinators bound by medical non-disclosure agreements have access to submitted patient histories.
- Edge Security Shield: Continuous DDoS protection, Web Application Firewall (WAF) inspections, and automated rate limiting powered by Cloudflare's secure infrastructure.
6. Your Rights under the DPDP Act, 2023
As a data principal under Indian data protection law, you possess explicit statutory rights:
7. Data Privacy Officer & Grievance Redressal
For any questions regarding this Privacy Policy, your medical confidentiality rights, or to submit a data erasure request, please contact our designated Practice Administrator: