Privacy Policy

The Medical Marvel · Pune, India · Aligned with the Digital Personal Data Protection Act, 2023

Draft, not yet reviewed by a lawyer

This wording is drafted from how the platform actually behaves and from the structure the DPDP Act requires. It has not been reviewed or approved by The Medical Marvel or by any legal adviser. Details the law requires but that are not yet available are marked in gold below.

1. Who is responsible for your data

Under the DPDP Act, the person who decides why and how your personal data is handled is the Data Fiduciary. For this website that is The Medical Marvel, founded by Ramesh Chandra, Pune, India.

You are the Data Principal, the person the data is about. This page is your notice under Section 5 of the Act.

2. What we collect, and why

Only what you type in. We do not buy data, and we do not profile you from any other source.

If you take the Practice Health Score:

Never send us patient data or clinical records. We do not ask for it, we have no lawful basis to hold it, and we will delete it.

3. Consent, and withdrawing it

You tick the consent box yourself. Nothing is pre-ticked. We record the exact wording you agreed to and when, not a simple yes.

You may withdraw consent at any time, and it must be as easy to withdraw as it was to give. Email us with the word Withdraw. Your personal data is then erased.

4. Your rights under the DPDP Act

5. Grievance redressal

If we do not resolve it, you may escalate to the Data Protection Board of India.

6. Erasure means erasure

When you ask us to delete your data, your name, email address and WhatsApp number are permanently deleted, not flagged, not hidden. Your anonymous answers remain, because they identify nobody and they are what the group benchmarks are built from. Nothing in a benchmark identifies you.

Erasure is also replayed after any database restore, so a backup cannot quietly bring your details back.

7. Cookies and tracking

This website sets no cookies and runs no analytics. No Google Analytics, no advertising pixel, no tracking script. The typefaces are self-hosted, so no font CDN sees your IP address either.

8. Children

This platform is for healthcare professionals aged 18 and over. Under Section 9 we do not track children, serve them targeted advertising, or knowingly collect their data.

9. Retention, security and breaches

If your personal data is breached, the Act requires us to notify both you and the Data Protection Board of India.

10. Contact

info@themedicalmarvel.com · See also the Terms and the Disclaimer.