Privacy Policy | Dr. Ayush Sharma, Physiotherapist

Last updated: 16 October 2026

Who we are

This website is run by Dr. Ayush Sharma Physiotherapy — Dr. Ayush Sharma (BPT), Physiotherapist, Jaipur, Rajasthan, India (“we”, “us”). For the purposes of the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for the personal data described below.

What we collect

Account details — your name, email address, mobile number and password (stored only in encrypted, hashed form; we can’t see it).
Appointment requests — name, phone, email (optional), whether you want a video consultation or a home visit, your description of the problem, and preferred date and time.
Health information — conditions and symptoms you tell us about, the exercise programs assigned to you, your progress, and notes from Dr. Ayush.
Payment details — payments are processed by Razorpay. We receive the amount, date and Razorpay order/payment IDs. We never see or store your card, UPI or bank details.
Technical data — a login cookie that keeps you signed in, and basic server logs (such as IP address) used for security and to block abuse.

Why we use it

To assess and treat you, hold video consultations, plan home visits, and give you your exercise programs.
To contact you about appointments by phone, WhatsApp or email.
To take payments, issue refunds and keep the accounting records the law requires.
To keep the website and your account secure.

We use your health information only to provide your care. We do not sell your data, and we do not use it for advertising.

Video consultations

Video sessions take place over Google Meet or WhatsApp video. We do not record them, and we ask you not to record them without our agreement. Google and WhatsApp (Meta) carry the call under their own privacy policies. Dr. Ayush may write short clinical notes from the session, which are kept with your treatment records as described below.

Your consent

We process your personal data with your consent, which you give when you create an account or send us an appointment request, and where the law otherwise allows (for example, to keep tax records). You can withdraw your consent at any time by contacting us. Withdrawing consent does not affect processing already done, and we may then be unable to continue your treatment or your online program.

Who we share it with

We share data only with the service providers needed to run this website, and only for that purpose:

Website hosting and database providers (Netlify and MongoDB Atlas).
Supabase — stores exercise videos and gallery photos.
Razorpay — processes online payments.
Google (Gmail and Google Meet) — sends booking and account emails, and carries video sessions held on Meet.
WhatsApp — for messages and video sessions, only when you choose to use it with us.

Some of these providers may store data on servers outside India, as permitted by Indian law. We will also disclose information if required by law or a lawful order of a court or government authority.

How long we keep it

Account, program and treatment records — while your account is active and for up to 3 years after your last appointment or program, unless you ask us to delete them sooner (where the law allows).
Appointment requests that didn’t lead to treatment — up to 1 year.
Payment records — for as long as tax and accounting laws require.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

ask for a summary of the personal data we hold about you and how we use it;
ask us to correct, complete or update it;
ask us to erase it, unless we must keep it by law;
nominate another person to exercise these rights if you are unable to; and
raise a grievance with us, and if you are not satisfied with our response, complain to the Data Protection Board of India.

To use any of these rights, contact us using the details below. We may need to confirm your identity first.

Children

Patients under 18 must be registered, and their appointments requested, by a parent or legal guardian, who gives consent on their behalf.

Security

The website uses HTTPS, passwords are hashed, payments are handled by Razorpay, and only Dr. Ayush has access to the admin panel. No system is perfectly secure; if we become aware of a breach affecting your data, we will inform you and the authorities as the law requires.

Cookies

We use one essential cookie to keep you logged in. We do not use advertising or tracking cookies. Razorpay may set its own cookies on the payment window.

Changes to this policy

We may update this policy. The date at the top shows the latest version. If we make important changes, we will tell registered patients by email or on their dashboard.

Grievance officer

For any question or complaint about your personal data, contact Dr. Ayush Sharma, who is responsible for data protection at Dr. Ayush Sharma Physiotherapy.

Contact us

Email: contact@drayushsharma.co.in
Phone / WhatsApp: +91 96722 56305
Address: Jaipur, Rajasthan, India