This notice explains what personal data we collect when you use Best Doctors and Clinics, why we collect it, who we share it with, how long we keep it and what you can ask us to do with it. Last updated 2 November 2026.
Who we are
The site is run by Faz, as an individual. There is no company behind it. Faz decides how your personal data is used, which makes Faz the data fiduciary under the Digital Personal Data Protection Act, 2023. “We” in this notice means Faz. For any question about your data, contact our grievance officer.
Which laws apply
- Now: section 43A of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. These treat information about physical, physiological and mental health, and medical records and history, as sensitive personal data.
- Phasing in: the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, notified on 13 November 2025. Most duties, including notice, consent, security, breach reporting and your rights, start on 13 May 2027, when the 2011 Rules fall away.
We already try to follow the DPDP standard, ahead of May 2027.
What we collect and why
| When | What we collect | Why |
|---|---|---|
| You send an enquiry to a clinic | Your name, phone or WhatsApp number, and your message. Optionally, your email and preferred language. The clinic, and the doctor if you chose one | To pass your enquiry to that clinic so it can reply to you |
| You use the contact or grievance form | Your name, contact details and message | To answer you and deal with your complaint |
| You add, claim or correct a listing | Your name, role, contact details and the listing details you send | To check and publish the listing, and to contact you about it |
| You visit any page | Server logs: IP address, browser type, the page requested and the time | To keep the site secure, stop abuse and fix faults |
| You visit any page | Google Analytics data, explained below | To count visits and see which pages are useful |
The enquiry form asks you not to include medical reports or health records, and we ask the same on every form. Your message may still say something about your health, so we treat every enquiry as sensitive.
We also publish information about doctors and establishments, such as names, qualifications and registration numbers, from public registers and from the clinics themselves. See how we verify.
Cookies and analytics
We use no advertising cookies and no tracking for advertising. The site may set cookies that are strictly needed for it to work, such as a security cookie when a form is sent, or a login cookie for our own team.
We use Google Analytics, which sets cookies. It collects the pages you view, including the words in the page address, such as what you type into the site’s search; the site you came from; your device and browser; and your approximate location. Please do not type personal health details into the search box. What you type into a contact or enquiry form is not sent to it. Google processes this data for us.
Consent, and withdrawing it
We send an enquiry to a clinic only after you tick an unticked consent box that names that clinic. Consent is for that one purpose. We do not use enquiries for marketing, and we never make marketing a condition of sending one.
You can withdraw consent at any time by writing to our grievance officer. We will then delete our copy. Once an enquiry has reached the clinic, the clinic holds its own copy, and you should ask the clinic directly to delete it.
Who we share it with
- An enquiry goes only to the clinic you chose. Not to other clinics, not to doctors elsewhere, and not to anyone who pays us. If we do not yet have an email address for that clinic, we pass it on by hand, still only to that clinic.
- Service providers who host the site, send our email and provide our analytics (Google), only to run the site for us.
- Authorities, when the law requires it, such as a court order.
We never sell personal data, and we never rent or trade enquiry lists.
How long we keep it
| Data | Kept for |
|---|---|
| Our copy of an enquiry | 90 days, then deleted automatically |
| Contact and grievance messages | 12 months, then deleted |
| Listing correspondence | As long as the listing is live, then 12 months |
| Server logs | The period set by our host, Hostinger. We use them only for security and fixing faults |
How we protect it
The site runs over an encrypted connection. Enquiries are stored privately, can be seen only by us, and are deleted on schedule. Clinic email addresses used for enquiries are never shown on the site. Forms are protected against automated abuse. If a breach affects your data, we will tell you and the authorities as the law requires.
Your rights
You can ask us to:
- tell you what personal data we hold about you, what we do with it and who we shared it with
- correct, complete or update it
- erase it, unless the law requires us to keep it
- withdraw consent you gave earlier
- resolve a grievance about how we handled your data
- record a nominee who can use these rights for you if you die or cannot act yourself
Write to our grievance officer. We will reply as soon as we can and within 90 days at the latest. From 13 May 2027, if you are not satisfied, you can complain to the Data Protection Board of India.
Children
The site is meant for adults. If an enquiry is about someone under 18, a parent or guardian should send it. We do not knowingly collect personal data from children, and we do not track or target them.
Where your data is stored
The site is hosted by Hostinger, and Google provides our analytics. Either company may store or process data on servers outside India.
Changes to this notice
When we change this notice, we update the date at the top. If a change affects how we use data you have already given us, we will ask for your consent again where the law requires it.