Privacy Policy

1. Who this policy covers

This policy describes information handling by Jeevan-Prerana Senior Citizens’ Clinic, Patna, in connection with jpscclinic.com and www.jpscclinic.com, appointment booking and related communications. It applies to patients, website visitors and authorised caregivers. Third-party websites and services also apply their own privacy policies.

2. Information we collect or receive

• Contact and appointment details: your name, telephone number, email address, selected service, appointment date and time, and information you provide through the website booking form, telephone, email, WhatsApp or directly to the clinic.
• Care information: health concerns, medical history, prescriptions, reports and other information you choose to provide for care. Please share sensitive information only when needed and through a channel agreed with the clinic.
• Payment and booking records: payment and order IDs, clinic booking references, selected service, amount, currency, payment/refund status, transaction times and appointment confirmation. The financial payment register and reporting tools exclude names, contact details and clinical records. A separate appointment register stores the patient name and patient or caregiver mobile number encrypted, linked to the booking reference, so the clinic can arrange the visit. These details are also encrypted during the temporary checkout hold. Abandoned holds without an order are removed after 24 hours when booking requests run.
• Technical and security information: IP address, browser/device details, requested pages, approximate access times and error or security logs handled by the website and its providers. Payment abuse prevention uses a protected identifier derived from the visitor’s IP address.
• Optional booking-source information: where the checkout offers “Allow the clinic to record how I found it”, selecting it allows advertising-link parameters to be used to record the source and campaign alongside the booking. Leaving it unchecked does not prevent booking.

The clinic website does not collect or store your full card number, CVV, UPI PIN, banking password or payment OTP. Enter payment credentials only in the authorised payment provider’s interface. Never send them to clinic staff.

3. Why we use information

We use relevant information to answer enquiries, arrange appointments, provide and coordinate care, communicate service updates, issue receipts, verify payments, handle cancellations and refunds, maintain necessary records, prevent misuse and meet applicable legal obligations.

4. Service providers and information sharing

• Razorpay and payment partners: process payment information, verification, refunds and fraud checks. The clinic may access transaction information needed for payment support and accounting. See Razorpay’s Privacy Policy.
• Website appointment booking: appointment times are selected and confirmed directly on this website. Google Calendar is not used for new website appointments. Google services continue to support clinic email and website advertising measurement. See Google’s Privacy Policy.
• Hosting and administration providers: the website is hosted through OpenAI Sites and Cloudflare infrastructure. These providers process data needed to host, secure and operate the service. Authorised clinic administration tools can access limited booking and payment records for reconciliation and reporting.
• Communication providers: email, telephone and WhatsApp providers handle communications when you choose those channels, under their respective privacy terms. WhatsApp is optional; telephone and email contact are also available.
• Care and legal recipients: relevant information may be shared with authorised clinic personnel, a care professional involved in your treatment with appropriate permission or another lawful basis, or an authority where disclosure is required by law.

We limit clinic-controlled sharing to information needed for the purpose. Caregiver involvement does not give unrestricted access to a patient’s records. Some service providers may process information outside India, subject to applicable legal requirements and their published privacy terms.

5. Cookies, browser storage and advertising measurement

The payment flow may store a booking reference and a payment-status access token in your browser’s session storage so you can check a payment after returning to the page. Avoid sharing this information. Closing the browser tab normally clears session storage; browser restore features may retain it. The website also provides a downloadable confirmation with a private access code for viewing, rescheduling or cancelling your appointment. Keep that code private; anyone who obtains it may be able to manage that booking. Clearing browser storage may require you to enter your saved code or ask the clinic for assistance. The clinic owner can replace a lost code after identity verification, which invalidates the old code. No automatic SMS or email confirmation is currently sent.

With your permission, Google Ads measurement can use cookies and advertising click identifiers (gclid, gbraid or wbraid) and campaign parameters. Consented source information is retained across pages in this tab for up to 30 days; server-held click identifiers are encrypted and removed after 30 days when booking requests run. A confirmed-booking event uses a random transaction identifier, amount and currency. Patient names, phone numbers, medical information and private booking codes are not included. A browser dispatch does not prove that Google received or attributed a conversion. See Google’s Privacy Policy.

Optional advertising measurement is off until you choose “Allow measurement” in Privacy choices or select the optional measurement checkbox during booking. Choosing “Use essential only” disables future optional measurement on this browser. The website remembers this choice for up to 30 days. Booking and payment work without optional measurement. Personalised advertising remains disabled. You can use browser privacy settings to block or delete cookies and control tracking, and manage Google advertising preferences in My Ad Center. Blocking storage or scripts may affect online payment or scheduling. You may contact the clinic by telephone for assistance.

6. Security and retention

The website uses HTTPS, restricted administrative access and payment-verification controls. Access to clinic-held information should be limited to people who need it for their work. No internet transmission or storage method is completely secure.

We retain information for as long as necessary for its purpose, including continuity of care, accounting, payment disputes and applicable record-keeping requirements. A deletion request may not cover records we must retain by law or for an unresolved claim. Where information is no longer needed and no retention requirement applies, it should be deleted or anonymised.

7. Your choices and privacy requests

You may ask what information the clinic holds about you, request correction, request deletion where permitted, or withdraw consent for optional processing by contacting us below. We may need to verify your identity or authority before releasing or changing records. We will explain if a request cannot be fulfilled because of a legal or clinical record-keeping obligation.

You can decline optional source recording without affecting your consultation. Withdrawing consent does not undo earlier lawful processing. If essential booking or care information is withheld, we will explain how that affects the requested service. Permission for marketing, if separately requested, is not a condition of receiving care.

An adult making a booking for someone else should have their permission or appropriate legal authority. This senior-care website is not intended for children to make independent bookings.

8. Privacy contact and complaints

Send privacy questions or complaints to the clinic administration, attention Dr Nishant Kumar, using the subject “Privacy request”. Include a safe way to contact you and only the details needed to identify your concern. Do not email payment passwords, PINs or OTPs.

We aim to acknowledge privacy complaints within two business days and resolve them within one month, or explain any delay and next steps. This process does not limit any rights available under applicable Indian law.

9. Policy updates

We will publish changes on this page with a revised effective date. If a new use of information requires additional notice or consent, we will seek it as applicable; publishing an update alone does not replace that requirement.