Payout Test Clinic
Book consultation

Privacy Policy

Version 1.1 · Effective 16 August 2026

This Privacy Policy describes how Payout Test Clinic (“we”, “us”, or “our”) collects, uses, and protects personal information of patients and visitors when you use our online appointment booking and patient management services powered by the Treatlly platform.

Clinic Information

Payout Test Clinic
12 MG Road · Pune · Maharashtra

Information We Collect

We may collect the following categories of personal information:

  • Identity & contact details — name, mobile number, email address, age, sex, and residential address.
  • Health information — medical history, prescriptions, diagnostic reports, and clinical notes necessary for providing care.
  • Appointment data — booking dates, times, doctor preferences, and consultation history.
  • Payment information — transaction IDs, payment status, and refund records. Card or bank details are processed securely by our RBI-authorised payment gateway and are never stored on our servers.
  • Device & usage data — browser type, IP address, and pages visited, collected automatically for analytics and security. From your IP address we derive an approximate location (city or region level); we do not use your device’s GPS. If you use our mobile app and allow notifications, we store a push notification token for that device.

How We Use Your Information

  • Schedule, confirm, and manage appointments.
  • Provide medical consultations and clinical care.
  • Process payments, issue receipts, and handle refunds.
  • Send appointment reminders, follow-up notifications, and health updates via SMS or email.
  • Comply with applicable laws, regulations, and legal obligations.
  • Improve our services and user experience.

Data Sharing & Disclosure

We do not sell, rent or trade your personal data or health information, and we do not share it with advertising networks. Information may be shared only with:

  • Treating doctors and authorized clinic staff for clinical care.
  • Our technology provider — this clinic’s booking and records system is operated on our behalf by Treatlly, under contract, and only on our instructions.
  • Payment gateways — RBI-authorised payment aggregators, for processing transactions and refunds.
  • SMS and communication providers — to deliver one-time passwords and appointment messages.
  • Cloud hosting and infrastructure providers — our records are hosted on servers located in India.
  • Push notification services — where you use our mobile app, alerts are delivered through the services operated by the Android and iOS platforms.
  • Analytics and error monitoring providers — usage and diagnostic data that excludes your name, contact details and health information.
  • Diagnostic or laboratory partners, if referred by your doctor.
  • Government or regulatory authorities, when required by law.

Some of these providers process data outside India — specifically for AI-assisted clinical features (where we use them), delivery of push notifications, app analytics, and diagnostic error monitoring. Such transfers are made under the Digital Personal Data Protection Act, 2023, which permits transfer to any country the Central Government has not restricted, and each provider is bound by contract to process the data only for that purpose.

Data Security

We apply reasonable technical and organizational safeguards — including encrypted connections (HTTPS), secure server infrastructure, and access controls — to protect your data from unauthorized access, alteration, or disclosure.

Data Retention

Your personal and medical data is retained for as long as necessary to provide services and comply with applicable medical record retention requirements. You may request deletion at any time — but please note that deletion is not always total, and we would rather say so plainly. We remove your identifying details, such as your name and contact details. Records that Indian law requires us to keep are not deleted; instead they are de-identified, so the record remains without being traceable back to you.

  • Financial records (invoices, receipts, GST documents) — kept for 8 years, as required by the Income Tax Act and the Companies Act.
  • Medical records (prescriptions, lab orders, consultation notes) — kept for the period set by the medical-records guidance applicable to this clinic, typically 3 years for outpatient records, and longer where a case is in active litigation.
  • Backups — automated backups may briefly still contain your data; these age out within 7 days.

Your Rights

Under the Digital Personal Data Protection Act, 2023 and the SPDI Rules, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Correction — request corrections to inaccurate or incomplete information.
  • Deletion — request deletion of your data, subject to the legal and medical record retention obligations described above.
  • Withdraw consent — withdraw consent at any time where our processing relies on it, and opt out of non-essential communications. Withdrawing consent does not affect processing already carried out.
  • Grievance redressal — raise a complaint about how your data has been handled, and receive a response.

Grievance Redressal & Contact

If you have questions about this Privacy Policy, wish to exercise any of the rights above, or want to raise a grievance about how your data has been handled, please contact us using the contact details provided on this website. We will acknowledge your request and respond within the timelines required by applicable law.