Privacy Policy

1. Who we are

Uro-Onco Connect is the Uro-Oncology practice of Dr. Anshuman Singh in Lucknow, offering in-person consultations, teleconsultations and an online patient portal. This policy explains what information we collect through this website and the portal, why we collect it, and the choices you have. It is written with reference to the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

2. Information we collect

• Contact details you give us when you book, enquire or register: name, phone number, email address, age, gender and address.
• Health information needed for your care: symptoms, history, reports, scans, biopsy results, prescriptions and treatment notes, including files you or our team upload to the patient portal.
• Appointment and billing details: dates, consultation type, invoices and payment status. Card and bank details are entered on the payment provider's page and are not stored by us.
• Technical information: IP address, browser type and pages visited, collected through server logs, security checks and Google Tag Manager / analytics cookies.

3. How we use it

We do not sell your personal information, and we do not use your health information for advertising.

• To arrange, conduct and follow up your consultations, investigations and treatment.
• To send appointment confirmations, reminders, login codes and prescriptions by SMS, email or WhatsApp.
• To issue invoices and process payments and refunds.
• To keep the website and portal secure, including detecting misuse and keeping a record of who accessed patient records.
• To understand how the website is used so we can improve it. Analytics data is not used to identify you.

4. Who we share it with

We share information only when it is needed for your care or to run the service:

• Doctors and clinical staff involved in your care, and hospitals or laboratories where you are referred for tests or treatment.
• Service providers that act on our instructions: hosting and database providers, SMS and email services, Google Calendar and video-call tools for teleconsultations, and Razorpay for online payments.
• Authorities, where the law requires it (for example a court order or a notifiable disease report).

5. Consent

By submitting a form, booking an appointment or registering on the portal, you consent to the use of your information as described here. You may withdraw consent at any time by contacting us; this does not affect care already provided or records we are required to keep.

6. How long we keep it

Medical records are kept for as long as required by medical regulations and for your continuing care. Enquiries that do not lead to a consultation are deleted when no longer needed. Security and access logs are kept for a limited period to investigate misuse.

7. How we protect it

• Encrypted connections (HTTPS) for the whole website and portal.
• Medical record files stored outside the public website and shown only to you, your treating doctor and authorised staff after they log in.
• One-time login codes, limits on login attempts and automatic log-out.
• A record of who viewed or changed patient records, and when.

8. Your rights

You can ask to see the information we hold about you, correct it, update it, or have it erased where we are not required to keep it. You can also ask how it has been used and who it has been shared with. To make a request or raise a concern, contact us using the details below; we aim to reply within 30 days.

9. Cookies

The website uses cookies to keep you logged in to the portal and, through Google Tag Manager, to measure visits. You can block or delete cookies in your browser settings; the portal will not work without its login cookie.

10. Children

Information about patients under 18 is provided and managed by a parent or guardian.

11. Changes to this policy

We may update this policy. The date at the top shows when it last changed.