Legal
Privacy notice
Health information is about as sensitive as personal data gets. Here is exactly how we handle it, including the things we have chosen not to build.
Draft, pending legal reviewThis describes how the service is designed and is written to be understood rather than to be legally complete. It is under review by data protection lawyers covering India, the United Kingdom, the European Union and Canada. The final notice will be published before we accept our first patient.
The short version
This website collects as little about you as we could manage. There is no file upload anywhere on it. There are no cookies for advertising or tracking. Anything clinical moves through a separate secure system, never through this site.
What this website collects
The website itself collects nothing about you beyond anonymous page view counts. There is no form on it, no login, and no account.
When you book a conversation
Booking is handled by Cal.com, a third party scheduling service. When you book, they collect your name, your email address, the time you chose, and your answers to the few questions we ask, which are the country you live in, a broad treatment area, and roughly what stage you are at.
The treatment area is a broad category such as spinal surgery. It is not a diagnosis and we do not ask for one. Please do not put clinical details, scan results or medical history into the booking notes.
The calendar does not load until you press the button asking for it. Until you do that, nothing about your visit reaches the scheduling provider. If you would rather not use them at all, contact us directly and we will arrange a time by email.
Cal.com processes this information on our behalf. Where they store it and for how long is governed by their own terms, and we are completing the paperwork that a processor handling health-adjacent information requires before we take our first patient.
What this website refuses to collect
No medical records. No scan results. No clinical history. No diagnosis. No medication list. There is no upload field anywhere on this website, and that is a design decision rather than an oversight.
If you put clinical details into the booking notes despite the warnings, we will handle them under the same protections as any clinical information, but please do not.
Medical records, when we do need them
Once we have spoken and you have decided to proceed, we send you a link to a dedicated secure transfer service. Records go there, not to this website, not to email and not to WhatsApp.
We ask only for the documents needed to answer the specific clinical question. We tell you which ones those are. If you send more than we need, we will tell you.
Independent specialists reviewing your case see what is necessary for that review, and are bound by professional confidentiality obligations.
Analytics and cookies
We use privacy-preserving analytics that set no cookies, store no persistent identifier and do not follow you between websites. We can see that a page was viewed. We cannot see who you are.
We do not use Google Analytics, advertising pixels, remarketing tags, heat mapping or session recording. There is no cookie consent banner on this site because there is nothing to consent to, which is the outcome we wanted.
We never send anything about your health, your treatment interest or your enquiry into any analytics system.
Where your information goes
We are based in India, so information you send us is processed in India.
This matters and we are not going to gloss over it. India is not currently covered by a United Kingdom or European Union adequacy decision, which means transfers of personal data from the UK, Ireland or the EU to us require a specific lawful safeguard to be put in place. Establishing the correct mechanism, and documenting it, is part of the legal work we are completing before we take our first patient.
We would rather tell you that this work is in progress than publish a notice implying it is settled.
How long we keep things
Enquiries that do not become cases are deleted within twelve months. Case records are kept for as long as we are required to, and the final retention periods will be confirmed as part of the legal review. Medical records are held only for as long as needed to deliver your case and meet any legal obligation.
Your rights
Depending on where you live, you have rights to see what we hold about you, correct it, have it deleted, restrict how we use it, receive a copy, and object to certain uses. You can also complain to your national data protection regulator.
We will not make you jump through hoops. Ask us and we will do it.
Things we will never do
We will never sell your information. We will never pass your details to a hospital, clinic or any other provider without your explicit agreement, on a case by case basis. We will never add you to a marketing list because you asked us a question. We will never use your medical information for anything other than delivering the service you asked for.
Contact
Our published contact route for privacy questions will appear here alongside our general contact details before launch. In the meantime, use the contact page.