Privacy policy
What this website collects, what the practice holds about patients, and what you can ask for.
Last updated: 17 October 2026
Before publishing
This policy is a working draft prepared alongside the website. It should be reviewed by a lawyer familiar with the Digital Personal Data Protection Act, 2023 and with medical records requirements before the site goes live, and the Data Protection Officer details below must be completed.
Who we are
Dr Hitesh Aggarwal, MBBS, DDVL, Delhi Medical Council Reg. 57994, practising at clinics in Narela and Rohini, Delhi, and providing online consultations. Contact: info@drhiteshaggarwal.com.
What the website collects
Analytics
If you agree to analytics when asked, we record which pages are visited, how far down a page people scroll, and which buttons are used. This is used to understand which pages are useful.
This analytics data is deliberately limited. It does not include your name, phone number, email address or anything you type. Specific health conditions are recorded only as broad categories, never as the individual page where that would identify a health concern with a person. If you decline, no analytics are loaded at all.
If you contact us
When you message on WhatsApp, call, or email, we receive whatever you choose to send — typically your name, contact number and a description of your concern. This is used to respond to you and to arrange a consultation.
Patient records
If you attend a consultation, in person or online, a clinical record is created. It contains your history, examination findings, any photographs you provide or that are taken with your consent, test results, and prescriptions issued.
Clinical records are confidential. They are not shared with family members, employers or anyone else without your consent, except where disclosure is required by law.
Records are retained in line with medical record-keeping requirements in India. Online consultations are additionally governed by the Telemedicine Practice Guidelines, which require that identity, consent and the consultation record are documented.
Photographs
Photographs form part of your clinical record and are stored with it. They are never used on this website, on social media, in teaching or in any other public setting without your separate, specific, written consent — and that consent can be withdrawn.
Who else processes your data
The website is hosted by a third-party hosting provider. Analytics are processed by a third-party analytics provider, only with your consent. Payments, when taken, are processed by a payment provider and card details are never held by us. Where any of these are located outside India, data may be processed outside India.
Your rights
Under the Digital Personal Data Protection Act, 2023 you may:
- Ask what personal data we hold about you
- Ask for inaccurate data to be corrected
- Ask for data to be erased, subject to medical record retention requirements
- Withdraw consent you previously gave, including for analytics and for photographs
- Raise a grievance, and escalate it to the Data Protection Board of India
To make any of these requests, write to info@drhiteshaggarwal.com.
Changing your analytics choice
Your choice is stored in your own browser. Clearing your browser's site data for this website will make the question appear again, and you can answer differently.
Children
This website is not directed at children. Patients under 18 are consulted with a parent or guardian present, and their records are handled with the same confidentiality.
Grievance contact
[To be completed before publication: name and contact details of the person responsible for data protection queries.]