Legal & Compliance

PRIVACY POLICY

Last Updated: August 21, 2026

Zafoor Clinic (“Zafoor Clinic”, “we”, “our”, or “us”) respects your privacy and is committed to protecting the personal information that you provide when using our website, booking an appointment, contacting us, or communicating with the clinic.

This Privacy Policy explains what information we collect, why we collect it, how it may be used, how it may be shared, and the choices and rights available to you.

Our public website is: https://zafoorclinic.com/

Our clinic’s internal administrative and patient-management system operates separately at: https://crm.zafoorclinic.com/

The CRM is an internal system and is not intended for public browsing.

1. Information We Collect

Depending on how you interact with Zafoor Clinic, we may collect the following information.

1.1 Appointment Booking

When you use the online appointment booking facility, we may collect:

  • First name
  • Last name, when provided
  • Mobile phone number
  • Email address, when provided
  • Gender, when provided
  • Selected service or treatment
  • Selected doctor
  • Appointment date and time
  • Reason for visit, when provided

The appointment information submitted through the website is transmitted to our clinic’s appointment-management system for processing and managing your appointment.

1.2 Contact and Enquiry Forms

When you submit an enquiry through our contact form, we may collect:

  • Name
  • Phone number
  • Department or service selected
  • Message or enquiry submitted by you

Website enquiries are delivered to the clinic’s designated email address through our form-processing provider.

1.3 Information You Provide During Clinic Care

If you become a patient of Zafoor Clinic, additional information may be collected and maintained through our clinic’s internal systems as necessary for patient administration and healthcare operations.

Depending on the services you receive, this may include information such as:

  • Contact and identification information
  • Date of birth
  • Gender
  • Address
  • Emergency-contact information
  • Insurance information
  • Medical history
  • Allergies
  • Chronic conditions
  • Medical alerts
  • Clinical notes
  • Symptoms and complaints
  • Vitals
  • Diagnoses
  • Prescriptions
  • Treatment and encounter information
  • Relevant medical documents
  • Appointment and billing information
  • Communication preferences

Such information is handled as part of the clinic’s patient-care and administrative operations and is not required merely to browse the public website.

1.4 Technical Information

When you access our website, certain technical information may be processed automatically by web browsers, hosting infrastructure, security systems, or third-party services. Depending on the service involved, this may include information such as:

  • IP address
  • Browser and device information
  • Operating-system information
  • Referring page
  • Requested pages or resources
  • Approximate technical and usage information

We use such information where necessary for website operation, security, troubleshooting, and service delivery.

2. How We Use Your Information

We may use information collected through the website and our clinic systems for purposes including:

  • Processing appointment requests and bookings
  • Managing appointment schedules
  • Contacting you regarding your appointment
  • Responding to enquiries
  • Providing requested healthcare services
  • Maintaining patient and appointment records
  • Communicating with patients regarding clinic services and appointments
  • Managing clinic operations
  • Maintaining billing and administrative records where applicable
  • Protecting the security and integrity of our systems
  • Detecting, preventing, or investigating misuse, fraud, or security incidents
  • Meeting applicable legal, regulatory, accounting, or record-keeping obligations
  • Improving the operation and usability of our website and services

We do not use your personal information for unrelated purposes without an appropriate basis for doing so.

3. Healthcare and Sensitive Information

Information relating to a person’s health may be particularly sensitive.

We request only information that is reasonably relevant to the interaction for which it is collected.

Information provided in an appointment’s “reason for visit” field should contain only information you are comfortable providing for appointment-management purposes. Detailed medical records should be discussed through appropriate clinic channels rather than submitted unnecessarily through a public website form.

Healthcare information that becomes part of your patient record is handled through the clinic’s internal systems and is accessed only by authorized personnel according to their responsibilities and permissions.

4. How We Share Information

We do not sell your personal information.

We may share or permit access to personal information where reasonably necessary to provide our services, operate our systems, or comply with applicable law.

This may include:

4.1 Clinic Staff and Authorized Personnel

Authorized doctors, healthcare personnel, administrative personnel, and other staff may access information required to perform their assigned responsibilities.

Access within the clinic’s internal systems may be controlled through authentication and role-based permissions.

4.2 Technology and Service Providers

We may use service providers that process information on our behalf or provide infrastructure required to operate the website and clinic systems.

For example, the website currently uses a third-party form-processing service, FormSubmit, for the public contact form. Information submitted through that form may pass through the service for delivery to the clinic.

We may also use hosting, storage, communications, security, mapping, or other technical providers where required to operate the website and clinic systems.

4.3 Legal and Regulatory Requirements

We may disclose information where necessary to:

  • comply with applicable law or legal process;
  • respond to lawful requests from competent authorities;
  • protect the rights, safety, or property of the clinic, our patients, staff, or others; or
  • investigate suspected fraud, abuse, or security incidents.

5. Appointment and Communication Data

If you provide your mobile number, email address, or other contact information while requesting an appointment, we may use it to communicate with you about:

  • Your appointment
  • Appointment confirmation
  • Appointment changes or cancellations
  • Relevant clinic communications
  • Responses to enquiries you initiated

Providing information for appointment-related communication does not automatically mean that you have consented to unrelated promotional communications.

Where marketing or promotional communication requires consent, we will seek consent as required by applicable law.

7. Google Maps and Third-Party Content

Our website may display third-party content or services, including an embedded map for the clinic location.

Third-party services may process technical information according to their own privacy policies.

Your use of such third-party services is subject to the respective provider’s terms and privacy practices.

8. Cookies and Similar Technologies

Our website may use cookies or similar technical mechanisms that are necessary for the operation, security, performance, or functionality of the website or third-party services embedded in it.

Some third-party services may also use cookies or similar technologies according to their own policies.

You can control or restrict cookies through your browser settings. Blocking certain cookies or browser storage mechanisms may affect some website functionality.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including appointment management, healthcare delivery, patient records, administrative requirements, security, dispute resolution, and compliance with applicable legal or regulatory obligations.

Healthcare and clinical records may need to be retained for longer periods than ordinary website enquiries because of applicable professional, legal, operational, or record-keeping requirements.

When information is no longer required and there is no continuing lawful reason to retain it, we may securely delete, anonymize, or otherwise dispose of it.

10. Data Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, misuse, loss, alteration, disclosure, or destruction.

These measures may include:

  • Authentication and access controls
  • Role-based access within internal systems
  • Secure transmission where supported
  • Access restrictions for clinic personnel
  • Audit and operational controls
  • Appropriate system and application security measures

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

You should avoid submitting unnecessary sensitive information through public website forms.

11. Your Rights and Choices

Subject to applicable law and its effective provisions, you may have rights relating to your personal data, including rights to:

  • Request information about the personal data we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion or erasure where applicable
  • Withdraw consent where processing is based on consent
  • Raise a complaint regarding the processing of your personal data
  • Exercise other rights available under applicable data-protection law

Certain rights may be subject to legal, medical, regulatory, contractual, or other lawful limitations.

Where consent is the basis for processing, withdrawing consent does not necessarily affect processing that was lawfully carried out before withdrawal.

12. How to Exercise Your Rights

To ask a privacy-related question, request access or correction, request deletion where applicable, withdraw consent, or raise a privacy complaint, contact us using:

When making a request, please provide enough information for us to identify the relevant interaction or record.

We may need to verify your identity before responding to requests involving personal information.

13. Children’s Privacy

Our website is intended for general users and may be used by a parent or legal guardian when arranging healthcare for a child.

Where information about a child is provided for healthcare or appointment purposes, it should be provided by the child’s parent, legal guardian, or another person legally authorized to do so.

We do not knowingly seek unnecessary personal information from children through general website enquiries.

14. Third-Party Websites and Services

Our website may contain links, embeds, or integrations provided by third parties.

Examples may include:

  • WhatsApp
  • Google Maps
  • FormSubmit
  • Hosting or infrastructure providers
  • Other external services used to provide website functionality

Once you interact directly with a third-party service, its own privacy policy and terms may apply.

We recommend reviewing the privacy practices of those third parties where appropriate.

15. International or Cross-Border Processing

Some technology or service providers used to operate the website may process or store information in locations outside India.

Where such processing occurs, we take reasonable steps to use appropriate service providers and safeguards consistent with applicable law.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • Our services
  • Website functionality
  • Technology providers
  • Data-processing practices
  • Applicable laws or regulations

The updated version will be published on this page with a revised “Last Updated” date.

We encourage you to review this page periodically.

17. Applicable Data-Protection Framework

Zafoor Clinic intends to handle personal information in accordance with applicable Indian data-protection and privacy requirements, including the Digital Personal Data Protection Act, 2023 and applicable rules and regulations as and when their relevant provisions apply to the clinic and its processing activities.

Nothing in this Privacy Policy limits any rights available to you under applicable law.

18. Contact Information

Zafoor Clinic

No 69/70, St. Xavier Street
Broadway, Sevenwells, Chennai – 600001
Landmark: Opposite Huda Mosque