Privacy Policy โ€” Navdant Clinic

๐Ÿ“… Effective: 4 July 2026๐Ÿข Navdant Clinic๐ŸŒ navdant.phst.in
This Privacy Policy is prepared in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and DPDP Rules, 2025. By using our services, you (the Data Principal) consent to the practices described herein.

1. About Us

Navdant Clinic is a Clinic โ€” Dental clinic, operating as the Data Fiduciary under Section 2(i) of the DPDP Act, 2023. We operate our website (navdant.phst.in) and mobile application (Navdant Dental Clinic).

Registered Address:
Navdant Clinic Valsad

2. Scope & Applicability

This Policy applies to all digital personal data processed by Navdant Clinic in connection with our website (navdant.phst.in) and mobile application (Navdant Dental Clinic) and associated services โ€” including all Data Principals in India whose data we process.

Exclusions: (a) non-digital data; (b) purely personal or domestic use; (c) publicly available data, as exempted under the DPDP Act.

3. Personal Data We Collect

We collect only the data necessary for the stated purposes below. We do not collect data we do not need.

3.1 Personal Data

3.2 Sensitive Personal Data

Collected subject to explicit consent only:

3.3 How We Collect Data

4. Lawful Purpose & Basis of Processing

We process personal data only for lawful purposes for which you have given free, specific, informed, and unambiguous consent or where processing is necessary for a legitimate use of the DPDP Act.

We will not process your data for purposes beyond those stated above without obtaining fresh consent or as otherwise permitted by law. You may withdraw consent at any time.

5. Data Retention & Deletion

Under DPDP Act, Navdant Clinic erases personal data once the collection purpose is no longer served, unless retention is required by applicable law.

Data CategoryRetention PeriodLegal Basis
Account & profile data10 YearsMedical Records
Transaction & payment records10 YearsMedical Records
Customer support records10 YearsMedical Records
Marketing preferences10 YearsMedical Records

Deletion Requests: By contacting clinic

6. Data Sharing & Third-Party Processors

We share personal data with trusted third-party Data Processors acting on our behalf, under written contracts that mandate DPDP-compliant data protection standards.

We do not sell, rent, or trade your personal data to third parties for their own commercial purposes.

We may disclose data to government authorities, law enforcement, or regulatory bodies where required by applicable Indian law or court order.

7. Your Rights as a Data Principal

Contact our Grievance Officer (Section 11) to exercise any of these rights:

Right to Access Information

Obtain a summary of the personal data we process about you, the purposes for processing, and details of all Data Fiduciaries and Processors involved.

Right to Correction & Updating

Request correction of inaccurate, incomplete, or misleading personal data, or request that it be updated or supplemented.

Right to Erasure

Request erasure of your personal data where: (a) the collection purpose is no longer served; (b) consent has been withdrawn; or (c) as required by law.

Right to Withdraw Consent

Where processing is consent-based, you may withdraw consent at any time. Prior lawful processing is unaffected. We will cease processing as soon as reasonably practicable.

Right to Nominate

You may nominate another individual to exercise your data rights in the event of your death or incapacity, of the DPDP Act.

Right to Grievance Redressal

You may raise grievances with our Grievance Officer. If unsatisfied, you may escalate to the Data Protection Board of India (DPBI) of the DPDP Act.

8. Data Security & Breach Notification

Navdant Clinic implements appropriate technical and organisational safeguards to protect your personal data against unauthorised access, loss, or disclosure.

Breach Notification: In the event of a personal data breach likely to cause harm, Navdant Clinic will notify the Data Protection Board of India within 72 hours of becoming aware, and will notify affected Data Principals as required.

9. Children's Personal Data

Our services are not directed at individuals under 18. We do not knowingly collect personal data from children without verifiable parental consent as required by the DPDP Act. If we become aware of such collection, we will delete it immediately. Contact our Grievance Officer if you believe this has occurred.

10. Cross-Border Data Transfers

Navdant Clinic primarily stores and processes personal data within India. To the extent data is processed by international service providers, such transfers comply with the DPDP Act and applicable government-notified restrictions.

11. Consent Management & Policy Updates

We collect consent through a clear, affirmative action (e.g., ticking a checkbox) before processing personal data. We may update this Policy to reflect changes in practices, services, or legal obligations. Material changes will be notified on our website (navdant.phst.in) and mobile application (Navdant Dental Clinic). The Effective Date above indicates when this Policy was last updated.

12. Grievance Officer & Contact

Navdant Clinic has designated a Grievance Officer to address privacy-related complaints, questions, and data rights requests:

Data Officer, Navdant Clinic
Grievance Officer
Email: [email protected]
Address: Navdant Clinic Valsad

We acknowledge all grievances within 48 hours and resolve within 30 days. If you are not satisfied with our resolution, you may lodge a complaint with the Data Protection Board of India (DPBI) established under the DPDP Act at digitindia.gov.in.