Privacy policy

Last updated: 16 August 2026

Mahavirai Dental and Medical Care (“we”, “us”, “the clinic”) operates mahaviraiclinic.com. This policy explains how we handle personal information collected through this website. It is written to be read rather than to be impressive - if anything here is unclear, ask and we will explain it plainly.

Information you give us in the clinic as a patient - medical history, clinical notes, X-rays and treatment records - is governed by medical confidentiality and the record-keeping obligations that apply to dental practice in India. This policy covers the website; your clinical records are held to that stricter standard.

1. What we collect

When you use the appointment or contact form we collect your name, phone number, email address if you provide one, the treatment you are asking about, your preferred date and time slot, and anything you write in the message box. The form also contains a hidden field that real visitors never see or fill in; it exists only to catch automated spam and collects nothing about you.

When you use the chat assistant the text of your messages is processed so it can answer you. Please do not type detailed medical history, identity numbers or payment details into it - it is a website assistant, not a patient portal. If a question needs your history, we will ask you to call or come in.

When you simply browse, our hosting provider records standard technical information: IP address, browser type, pages requested and timestamps. This is ordinary web server logging, used for security and reliability.

Analytics. The site uses Google Tag Manager and Google Analytics to understand which pages people find useful. This uses cookies and collects usage data such as pages visited, approximate location and device type.

2. Why we use it

• To reply to your enquiry and arrange, confirm or reschedule an appointment
• To send you a confirmation email when you have given us an email address
• To provide dental care and keep the records the law requires us to keep
• To answer questions asked through the chat assistant
• To keep the website secure and working
• To understand, in aggregate, how the site is used so we can improve it

We do not sell, rent or trade your personal information, and we do not use your contact details for marketing you did not ask for.

3. Who else processes your information

A small number of service providers help us run the website. They process data on our instructions, for the purposes above only:

• Cloudflare hosts the website and delivers it to your browser. It processes technical log data including your IP address.
• Resend delivers form submissions to our clinic inbox and sends your confirmation email. It processes the contents of your form submission.
• Groq powers the chat assistant and processes the text of your chat messages. We do not attach your name, email or phone number to it.
• Google provides Tag Manager and Analytics, the fonts this site uses, and the maps we link to. Loading fonts and maps means your browser contacts Google directly, so Google receives your IP address.

We may also disclose information where the law requires it, or where it is necessary to protect someone’s safety.

4. How long we keep it

Enquiries that do not lead to an appointment are kept only as long as needed to deal with them, then deleted from our inbox. If you become a patient, your details form part of your clinical record and are retained for the period required for dental records in India. Server logs and analytics data are retained according to those providers’ standard retention periods.

5. How we protect it

The website is served entirely over an encrypted connection. Form submissions travel encrypted and are delivered to a clinic-controlled email account. Access to patient information within the clinic is limited to staff who need it to provide your care, and everyone here is bound by patient confidentiality. Access keys for the services above are held on the server and are never exposed to your browser.

No system is perfectly secure and we will not pretend otherwise. What we can say is that we collect as little as possible in the first place.

6. Your rights

Under India’s Digital Personal Data Protection Act, 2023, you may ask us to:

• Tell you what personal information about you we hold, and what we do with it
• Correct anything inaccurate or incomplete
• Delete information we no longer need to keep
• Withdraw a consent you previously gave
• Nominate someone to exercise these rights on your behalf

Some limits apply. Clinical records must be retained for a defined period regardless of a deletion request, because they exist to protect you as much as us. Write to dentalbyshipra@gmail.com and we will respond as quickly as we reasonably can.

7. Cookies

Cookies are small files a website stores in your browser. The ones here come from Google Analytics and are used to count visits and see which pages get read. The website itself does not need cookies to work, so you can block or delete them in your browser settings and everything except analytics will behave normally.

8. Children

We treat children as patients and welcome them. The website itself is not directed at children and we do not knowingly collect information from a child through it - a parent or guardian should make the enquiry. If you believe a child has submitted information to us, contact us and we will remove it.

9. Changes to this policy

If we add a tool that handles your information, or the law changes, we will update this page and change the date at the top. Material changes will be made obvious rather than slipped in quietly.

10. Contact and grievances

For any question, request or complaint about how we handle your information, contact the clinic:

Mahavirai Dental and Medical Care
11B, Ground Floor, Vipul Trade Center, Dhani, Sector 48, Gurugram, Haryana 122018
dentalbyshipra@gmail.com · (+91) 98991-53961

If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India.

See also our terms of service and disclosure policy.