Privacy policy

Sample policy for review. This text is a starting point and must be checked by a qualified lawyer before the website goes live.

Last updated: 4 October 2026

• Who we are
• What we collect
• How we use it
• Who we share it with
• Patient photos
• How long we keep it
• Your rights
• Contact

Who we are

This website belongs to the dental and oral & maxillofacial surgery practice of Dr Afshan Qureshi ("we", "us"), at Mukundam Hospital, 63-A, Bombay Motors Circle, Pratap Nagar, Jodhpur, Rajasthan 342003. We are responsible for the personal information described in this policy.

We handle personal information in line with India's Digital Personal Data Protection Act, 2023 and the rules made under it, and with our professional duty of confidentiality as dental surgeons.

What we collect

When you use this website

• The website itself doesn't store your details. The appointment form and feedback form don't save anything on our website. They open WhatsApp with your message ready, and you choose whether to send it.
• Messages you send us on WhatsApp or by phone: your name, number and whatever you tell us about your concern.
• Basic technical information collected by the services that power parts of the site (see "Who we share it with"), such as your device type and approximate location.

When you visit as a patient

• Your name, age, contact details and address.
• Your medical and dental history, medicines and allergies.
• Examination notes, X-rays, scans, clinical photos and treatment records.
• Billing and payment records.

How we use it

• To book, confirm and remind you about appointments.
• To examine you, plan and provide treatment, and look after you afterwards.
• To coordinate with your physician or another specialist when your care needs it.
• To send you aftercare messages and check-up reminders. You can ask us to stop at any time.
• To ask for feedback or a testimonial about your visit. Sharing one is always your choice.
• To meet our legal, accounting and professional record-keeping duties.

We use your information only for these purposes. We never sell it, and we don't use it for advertising.

Who we share it with

• People involved in your care, such as dental laboratories, imaging centres, pathology labs and other doctors, only as much as they need.
• Mukundam Hospital, where treatment takes place on its premises, for hospital records and billing.
• WhatsApp (Meta), when you message us. Your messages are covered by WhatsApp's own privacy policy.
• Google, which provides the map, the fonts on this website and our Google profile, where patients can post testimonials. Google may collect technical information when these load, under Google's privacy policy.
• Authorities, only when the law requires it.

This website doesn't set its own advertising or tracking cookies. The embedded Google map may set cookies when it loads.

Patient photos

Before and after photos and clinical photos appear on this website only with the patient's written consent. We crop them to remove faces and identifying details wherever possible. If you see a photo of yourself and want it removed, contact us and we'll take it down promptly.

How long we keep it

We keep treatment records for as long as the law and professional guidelines require, and then delete or securely destroy them. WhatsApp messages that aren't part of your treatment record are deleted periodically.

We protect records with reasonable security measures, including limited staff access and secure storage of paper and digital files.

Your rights

You can ask us to:

• Tell you what personal information we hold about you, and give you a copy of your records.
• Correct anything that's wrong or out of date.
• Delete information we no longer need to keep by law.
• Stop using your information for reminders, feedback requests or photos you agreed to share. You can withdraw consent at any time.
• Name someone to act on your behalf if you're unable to.

For a child's information, a parent or guardian makes these requests. We reply within a reasonable time, normally within 30 days. If you're not satisfied with our reply, you can complain to the Data Protection Board of India.

Contact and grievances

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.