Privacy Policy
What we collect, why we collect it, who sees it, how long we keep it, and the rights you have over it.
1. Who we are
Le Yantra Health Care Pvt. Ltd. ("Le Yantra", "we", "us") operates the website at leyantra.com and provides physiotherapy, chiropractic and related clinical services at our clinics in Malleshwaram and MEI Layout, Bengaluru.
For the purposes of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary responsible for the personal data described in this policy.
2. What this policy covers
This policy explains what personal information we collect through our website and in the course of providing care, why we collect it, who we share it with, how long we keep it, and what rights you have over it.
It applies to visitors to our website, people who contact us or book appointments, and our patients. Where we act on behalf of a corporate client, additional terms may apply and will be explained to you at the time.
3. Information we collect
Information you give us
- Name, age, gender, phone number and email address
- Address and preferred clinic location
- Appointment details, including your preferred service and time
- Details of your complaint, symptoms and reason for visiting
- Health information: medical history, current medication, previous injuries, scans and reports you share with us, and the clinical records created during your assessment and treatment
- Emergency contact details where you provide them
- Correspondence with us by email, phone, WhatsApp or social media
- Feedback, reviews and testimonials you choose to give us
Information collected automatically
- IP address, browser type, device type and operating system
- Pages visited, time spent, and how you arrived at our site
- Cookie identifiers, where you have consented to non-essential cookies
Information from other sources
- Referrals from doctors, surgeons or other healthcare providers
- Information from a corporate employer where treatment is arranged through a workplace programme
- Publicly posted reviews on Google or social media that mention us
4. Why we use your information
- Providing care
- Assessing, diagnosing within our scope, treating and following up. This is the core purpose and the reason most of the information is collected.
- Managing appointments
- Booking, confirming, rescheduling and reminding you.
- Clinical records
- Maintaining an accurate record of your assessment and treatment, as required of a healthcare provider.
- Communicating with you
- Responding to enquiries, answering questions, and sending information related to your treatment.
- Payments and billing
- Processing fees and maintaining accounting records.
- Improving our service
- Understanding how our website is used, and reviewing the quality of care we provide.
- Marketing, only with consent
- Health information, offers or newsletters, where you have specifically opted in. You can withdraw at any time.
- Legal obligations
- Where we are required by law, regulation or a court to retain or disclose information.
We do not use your health information for marketing, and we do not sell your personal data to anyone.
5. Your health information
Health information is the most sensitive category of data we hold, and it is treated accordingly. Access to clinical records is restricted to the clinicians involved in your care and to administrative staff who need it to manage your appointments. Records are not discussed with family members, employers or anyone else without your consent, except where we are legally required to disclose.
If your treatment is arranged and paid for by your employer under a corporate programme, we share attendance and programme-level information with them. We do not share your individual clinical details, diagnosis or treatment notes with your employer without your specific written consent.
6. Cookies and website analytics
Our website uses cookies. Essential cookies make the site work and cannot be switched off. Analytics and marketing cookies help us understand how the site is used and are only set where you consent.
We use Google Analytics, Google Tag Manager, Google Ads and the Meta Pixel and Conversions API. These tools set cookies and collect information about your visit in a form that does not directly identify you. You can manage your preferences through the cookie banner at any time, and through your browser settings.
Where we add a new analytics or advertising tool, this section is updated at the same time.
7. Who we share your information with
- Our clinicians and staff, to the extent needed to provide your care
- Our appointment booking system, which stores the booking details you enter
- Payment processors, where you pay online. We do not store your card details.
- IT, hosting and software providers who maintain our systems, under contract and confidentiality obligations
- Other healthcare providers, where you ask us to share information with them or where a referral is in your interest and you have agreed to it
- Professional advisers, insurers and auditors, where necessary
- Government authorities, regulators or courts, where we are legally required to disclose
Appointments are booked through our booking system at crm.leyantra.in, which is operated separately from this website and stores the details you enter there. We do not sell, rent or trade your personal data.
8. Storage and transfers outside India
Your information is stored on servers operated by our hosting and software providers. Some of these providers may store or process data outside India. Where that happens, we take reasonable steps to ensure appropriate safeguards are in place, and any such transfer is made in accordance with applicable Indian law.
9. How long we keep your information
We keep your information only as long as we need it for the purpose it was collected, or as long as the law requires. When we no longer need it, we delete it or remove anything that identifies you.
| Type of record | Retention period |
|---|---|
| Clinical records | For as long as we may need them to care for you, and for the period required of a healthcare provider under applicable law. Records relating to a patient who was a child when treated are kept longer. |
| Appointment and booking records | For as long as needed to manage your care and to answer questions about a past appointment. |
| Billing and accounting records | As required under applicable tax and company law. |
| Website enquiry forms | For as long as needed to deal with your enquiry and any follow-up, then deleted. |
| Marketing consents | Until you withdraw consent, and a record of the withdrawal thereafter. |
| Analytics data | As configured in our analytics tools. |
10. How we protect your information
We use reasonable technical and organisational measures to protect your information, including access controls, encrypted connections on our website, restricted access to clinical records, and confidentiality obligations for our staff and contractors.
No system is completely secure. If a personal data breach occurs that affects you, we will notify you promptly and in plain language, telling you what happened, what it means for you, what we are doing about it, and who to contact.
11. Your rights
Under Indian data protection law you have the right to:
- Access a summary of the personal data we hold about you and how we process it
- Request correction of information that is inaccurate, incomplete or out of date
- Request erasure of your personal data, where we are not required to retain it
- Withdraw consent you previously gave, at any time and as easily as you gave it
- Nominate another person to exercise these rights on your behalf, including in the event of your death or incapacity
- Make a complaint to us, and escalate to the Data Protection Board of India if you are not satisfied with our response
To exercise any of these rights, contact our Grievance Officer using the details in section 14. We will acknowledge your request promptly and respond within 30 days. Withdrawing consent does not affect processing carried out before the withdrawal, and it may mean we can no longer provide certain services to you.
12. Children
We treat anyone under 18 as a child. Where we provide care to a child, we collect and process their information with the verifiable consent of a parent or legal guardian. We do not use children's data for behavioural tracking or targeted advertising.
13. Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it was last changed. Where a change materially affects how we use your information, we will tell you directly rather than relying on you noticing the update.
14. Contact us and grievance redressal
For any question about this policy, or to exercise your rights, contact our Grievance Officer:
The Grievance Officer, Le Yantra Health Care Pvt. Ltd. #34, 2nd Cross, Sampige Road, Malleshwaram, Bengaluru, Karnataka 560003 malleshwaram@leyantra.com +91 73493 90989If you are not satisfied with our response, you may complain to the Data Protection Board of India.
See also our Terms of Use.