Privacy Policy

Privacy Policy

Last Updated: 04 November 2026

At Dr. Lohith U's website (https://drlohithgastrosurgeon.com/), we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains what personal information we collect, how and why we use it, when it may be shared, how long it may be retained, and how you can exercise your privacy rights.

This policy applies to visitors who access our website, submit contact or appointment requests, or communicate with us through the contact details provided on this website.

Identity of the Data Fiduciary

The entity responsible for determining the purpose and means of processing personal data through this website is:

Legal Name: Dr. Lohith U

Website: https://drlohithgastrosurgeon.com/

Privacy Contact: lohith8885@gmail.com

Phone: +91 9611489807 / +91 8073479146

For this Privacy Policy, references to "we", "us" or "our" mean the above-mentioned entity.

1. Personal Information We Collect

Depending on how you interact with our website and services, we may collect the following categories of personal information:

1.1 Personal Identification Information

• Full name.
• Other identifying information voluntarily provided by you.

1.2 Contact Information

• Mobile number.
• Email address.
• Contact details provided through appointment forms or other communication channels.

1.3 Appointment and Enquiry Information

• Appointment requests and preferred appointment details, where provided.
• Questions and enquiries submitted through our website or other communication channels.
• Information required to respond to or manage your appointment request.
• Communication records relating to appointment scheduling and confirmations.

1.4 Health-Related Information

Depending on your interaction with us, we may receive health-related personal information that you voluntarily share through communication channels, including:

• Medical history and existing health conditions.
• Symptoms and health-related concerns.
• Medical reports, diagnostic information or investigation details voluntarily shared with us.
• Other health-related information necessary for responding to your healthcare enquiry or providing requested medical services.

Please avoid submitting unnecessary medical information through general website contact or appointment forms. Where detailed medical information is required, we will communicate the appropriate method for providing it.

1.5 Technical and Website Usage Information

Where applicable and depending on the technologies enabled on our website, we may collect:

• Internet Protocol (IP) address.
• Browser type and version.
• Device and operating system information.
• Website pages visited and interaction information.
• Cookie identifiers and website performance information.
• Information collected through analytics, website security and similar technologies, where enabled.

Our website contains embedded Google-related services, including map content. Information may be processed by these third-party services according to their respective configurations and privacy policies.

We aim to collect only personal information that is reasonably necessary for the purposes described in this policy.

2. Purpose of Collecting and Processing Personal Information

We may process your personal information for the following specific purposes:

• To receive, review and respond to appointment requests.
• To contact you regarding appointment availability, scheduling and confirmations.
• To respond to questions and enquiries submitted through the website.
• To provide healthcare-related information, assistance or services requested by you.
• To communicate information relevant to your appointment or enquiry.
• To coordinate appointment-related communication with authorised clinic or hospital personnel, where necessary.
• To maintain website functionality, security and performance.
• To understand website usage and improve our website and services, where applicable.
• To prevent misuse, spam, fraudulent submissions and unauthorised access.
• To comply with applicable legal, regulatory and record-keeping requirements.

We will not knowingly use your personal information for purposes unrelated to those explained to you unless we obtain the required consent or have another valid basis permitted under applicable law.

3. Lawful Basis and Consent

We process personal information in accordance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act), and the rules made under it, to the extent they are applicable and in force.

Where consent is the basis for processing, we will seek consent through a clear affirmative action, such as selecting an appropriate consent checkbox before submitting an appointment or contact form.

Where required, we will explain:

• The categories of personal information being collected.
• The specific purposes for which the information will be processed.
• How you can withdraw consent.
• How you can exercise your privacy rights and raise a grievance.

Where processing is permitted under another lawful ground under applicable law, we may process personal information on that basis.

Submitting a form or using the website will not be treated as blanket consent for unrelated purposes.

4. How We Share Personal Information

We do not sell your personal information.

We may share personal information only where necessary for the purposes explained in this policy, where you have provided the required consent, or where sharing is otherwise permitted or required by applicable law.

Depending on the actual services and systems used, information may be shared with:

4.1 Authorised Healthcare Personnel

Relevant doctors, clinic or hospital personnel, or healthcare professionals involved in responding to your enquiry or providing requested healthcare-related services.

4.2 Service Providers

Third-party providers who support website hosting, website maintenance, communication, appointment management, website security, analytics, map services or other technical operations.

4.3 Hospitals and Healthcare Facilities

Where necessary for appointment coordination or the provision of requested healthcare services, relevant information may be shared with the concerned hospital or healthcare facility, subject to applicable law and the required permissions.

4.4 Legal and Regulatory Authorities

Government authorities, regulators, courts or law enforcement agencies where disclosure is required or authorised under applicable law.

We take appropriate steps to ensure that service providers who process personal information on our behalf are subject to suitable contractual and confidentiality obligations.

The actual names or categories of service providers used by this website should be disclosed accurately wherever required, including hosting, email, messaging, analytics and other third-party technology providers.

5. Data Security

We take reasonable steps to protect personal information against unauthorised access, disclosure, alteration, misuse, destruction or loss.

Depending on the systems used, appropriate technical and organisational measures may include:

• Restricting access to personal information to authorised personnel.
• Using suitable access controls and authentication measures.
• Maintaining appropriate security measures for website forms and hosting environments.
• Taking reasonable steps to protect information transmitted through the website.
• Reviewing and addressing identified security vulnerabilities.
• Maintaining appropriate procedures for handling security incidents.

We periodically review relevant security practices and take corrective steps where necessary.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

6. Data Retention and Deletion

We retain personal information only for as long as it is reasonably necessary to fulfil the purpose for which it was collected, or for the period required under applicable legal, medical, regulatory or record-keeping obligations.

Retention may depend on the type of information and the reason for collecting it.

For example:

• Appointment and enquiry information may be retained for responding to and managing requests.
• Healthcare-related information may be retained in accordance with applicable medical and legal record-keeping requirements.
• Website technical and analytics information may be retained according to the applicable service configuration and retention settings.

When personal information is no longer required and there is no legal reason to retain it, we will take appropriate steps to delete or securely dispose of it.

You may request erasure of your personal information, subject to applicable legal obligations and any lawful reason for continued retention.

7. Your Privacy Rights

Subject to the applicable provisions and commencement of the DPDP Act and Rules, you may exercise the following rights in relation to your personal information:

7.1 Right to Access Information

You may request information about the personal data being processed and other details made available under applicable law.

7.2 Right to Correction and Completion

You may request correction of inaccurate or misleading personal information and completion of incomplete personal information.

7.3 Right to Erasure

You may request erasure of personal information where applicable, subject to legal and regulatory requirements that require us to retain certain records.

7.4 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time.

7.5 Right to Grievance Redressal

You may raise a concern or complaint regarding the processing of your personal information or the handling of your privacy-related requests.

7.6 Right to Nominate

You may nominate another individual to exercise your applicable privacy rights in the event of your death or incapacity, in accordance with applicable law.

To exercise these rights, please contact us using the details provided in the Contact and Grievance Redressal section below.

8. Withdrawal of Consent

Where we process your personal information based on consent, you may withdraw that consent at any time.

You can submit a withdrawal request using the following contact details:

Email: lohith8885@gmail.com

Phone: +91 9611489807 / +91 8073479146

Please provide sufficient details to help us identify your earlier request or the information concerned. We may request reasonable information to verify your identity before acting on the request.

After receiving a valid withdrawal request, we will take appropriate steps to stop the relevant consent-based processing and inform relevant processors where required, unless continued processing is permitted or required under applicable law.

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

Please note that withdrawing consent may affect our ability to provide certain services that depend on the relevant information.

9. Contact and Grievance Redressal

If you have any questions, concerns or complaints about how your personal information is collected, used, stored, shared or processed, you may contact our privacy contact using the details below.

Privacy and Grievance Contact

Name / Designation: Dr. Lohith U / Consultant - Laparoscopic, Bariatric and GI surgeon

Email: lohith8885@gmail.com

Phone: +91 9611489807 / +91 8073479146

When submitting a request, please:

• Clearly mention that your request relates to personal data or privacy.
• Describe your concern or the right you wish to exercise.
• Provide the relevant contact details or reference information needed to identify your records.
• Avoid sending unnecessary medical reports or sensitive information in your initial complaint.

We will review and respond to valid requests in accordance with applicable laws and prescribed timelines.

If your grievance is not satisfactorily addressed, you may pursue the available remedies under applicable data protection laws, including approaching the Data Protection Board of India where the relevant provisions and procedures are in force.

10. Cookies and Third-Party Technologies

Our website may use cookies and similar technologies to support website functionality, security, performance and analytics.

Depending on the technologies actually enabled, these may collect information such as:

• Browser and device information.
• IP address.
• Website usage and browsing activity.
• Cookie identifiers.
• Website performance information.

Cookies may be used for essential website functions and, where enabled, analytics or other purposes.

Our website also contains embedded Google-related content, including Google Maps. When you interact with such embedded services, the respective third-party providers may collect or process information according to their respective privacy policies and applicable terms.

Our website may use the following third-party services and technologies, depending on their actual configuration:

• Google Tag Manager: Used to manage and deploy website tags and tracking scripts, depending on the tags configured.
• Google Maps: Used to display clinic and hospital locations and provide location-related information.
• CAPTCHA Services: Used to help protect website forms against spam and automated submissions, depending on the CAPTCHA technology configured.
• Website Hosting Provider: Our website and information submitted through website forms may be stored or processed through our hosting service provider.
• Email and Communication Services: Information submitted through appointment and contact forms may be processed through the email or communication services configured to receive and respond to enquiries.
• Analytics Services: Where enabled, analytics tools may collect website usage and performance information to help us understand and improve website functionality.

These third-party providers may process certain technical or personal information in accordance with their respective privacy policies and service terms.

Where required under applicable law, we will obtain the necessary consent before using non-essential cookies or tracking technologies that process personal information.

You may manage or disable cookies through your browser settings. Disabling certain cookies may affect some website functions.

We recommend reviewing the privacy policies of the respective third-party providers to understand how they collect and process information.

11. Children's Personal Data

We recognise the importance of protecting children's personal information.

Where personal data relating to a child below 18 years of age is processed, we will comply with the applicable requirements concerning verifiable parental or lawful guardian consent, subject to the exemptions and conditions permitted under applicable law.

We will not knowingly process children's personal information in a manner prohibited by applicable law.

If you believe that a child has submitted personal information through our website without the required consent, please contact us using the details in this policy so that we can review the matter and take appropriate action.

12. Personal Data Breach Management

We take reasonable measures to prevent and respond to personal data breaches.

If a personal data breach occurs, we will take appropriate steps, as applicable, to:

• Investigate and assess the incident.
• Take steps to contain and minimise its impact.
• Prevent further unauthorised access or disclosure.
• Take corrective and remedial measures.
• Notify affected individuals and relevant authorities in accordance with applicable legal requirements and prescribed timelines.

13. Data Processing Outside India

Where our service providers or technology partners process personal information outside India, such processing will be subject to applicable Indian data protection laws and any restrictions or requirements imposed by the Central Government.

We will take appropriate steps to ensure that any permitted transfer or processing of personal information outside India complies with applicable legal requirements.

14. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in our website, services, data processing practices, technology or applicable legal requirements.

Any revised version will be published on this page with an updated revision date.

We encourage you to review this page periodically to understand how your personal information is handled.

15. Contact Us

For questions about this Privacy Policy, your personal information or any privacy-related request, please contact us:

Dr. Lohith U

Consultant – Laparoscopic, Bariatric and GI Surgeon

Email: lohith8885@gmail.com

Phone: +91 9611489807 / +91 8073479146

Website: https://drlohithgastrosurgeon.com/