Privacy Policy & Data Protection Notice

1. Introduction & Data Fiduciary Identity

This Privacy Policy describes how Dr. Vijay Anand Reddy ("Data Fiduciary," "we," "us," or "our"), practicing as Senior Consultant Oncologist at Apollo Cancer Centres, Jubilee Hills, Hyderabad, collects, uses, stores, and protects personal data obtained through this website (drvijayanandreddy.com).

We process personal data in strict compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and applicable National Medical Commission (NMC) professional conduct standards.

2. Personal Data We Collect (Data Minimisation)

Under the principle of data minimisation, we collect only personal data necessary to facilitate medical consultation requests, patient inquiries, and essential website functionality:

• Identity & Contact Details: Full Name, Email Address, and Phone Number provided voluntarily via contact and inquiry forms.
• Health & Consultation Details: General descriptions of health symptoms or inquiry context provided voluntarily in message fields.
• Technical & Browsing Data: IP addresses, browser types, device information, and navigation analytics collected via cookies and security tools (Google reCAPTCHA v3 and Google Analytics).

3. Purpose of Processing & Consent Mechanism

In accordance with Section 6 of the DPDP Act 2023, personal data is processed solely on the basis of freely given, specific, informed, unconditional, and unambiguous consent signified through an affirmative action (such as selecting our consultation inquiry consent checkbox).

We use your personal data exclusively for:

• Responding directly to your clinical appointment or consultation inquiries.
• Verifying appointment schedules at Apollo Cancer Centres, Jubilee Hills.
• Maintaining website security and preventing fraudulent submissions.

We do not sell, rent, trade, or monetize your personal data. We do not use your personal details for commercial marketing or unsolicited promotional outreach.

4. Third-Party Data Processors

To deliver secure web services, we engage reputable third-party Data Processors bound by confidentiality and data protection obligations:

5. Processing Children's Personal Data (Section 9)

Certain cancers affect pediatric patients (e.g., retinoblastoma, pediatric brain tumors). Pursuant to Section 9 of the DPDP Act, 2023, personal data belonging to individuals under 18 years of age is processed only with the verifiable consent of a parent or lawful guardian. We strictly prohibit tracking, profiling, or behavioral monitoring of minors.

6. Your Rights as a Data Principal (Sections 11–14)

The DPDP Act guarantees you specific statutory rights over your personal data:

• Right to Access Summary (Section 11): Request a summary of your personal data being processed and details of any third parties with whom it has been shared.
• Right to Correction & Completion (Section 12(1)): Request rectification of inaccurate, incomplete, or outdated personal details.
• Right to Erasure (Section 12(2)): Request deletion of your personal data when it is no longer necessary for the initial purpose of collection.
• Right to Withdraw Consent (Section 6(4)): Withdraw consent at any time. Withdrawal does not affect lawful processing conducted prior to withdrawal.
• Right to Nominate (Section 14): Nominate an individual who shall exercise your rights in the event of your death or incapacity.

To exercise any of these rights, submit your request to our Grievance Redressal Officer at [email protected].

7. Data Retention & Erasure Schedule

In accordance with Section 8(7) of the DPDP Act, general consultation inquiry records received through website forms are securely retained for a maximum period of 90 days, after which they are permanently deleted, unless ongoing medical treatment requires retention under Indian clinical establishment regulations or medical records retention guidelines.

8. Grievance Redressal & Right to Complain to DPBI

If you have questions, concerns, or grievances regarding your personal data or this policy, please contact our designated Grievance Redressal Officer:

If your grievance is not resolved satisfactorily by our Grievance Redressal Officer, you have the statutory right under Section 13(3) of the DPDP Act, 2023, to file a formal complaint with the Data Protection Board of India (DPBI).