Privacy notice

This notice explains what personal data this website collects, why, who else receives it, and how you can control it, as required by the Digital Personal Data Protection Act, 2023.

Last updated 30 September 2026

Who we are

Apex Orthopedic & Eye Hospital (“we”, “us”) is the Data Fiduciary for personal data collected through this website. We are at 4027 (4th floor), Palladium Mall, Yogi Chowk Ground, Nana Varachha, Surat, Gujarat 395006, India.

This notice covers this website and the enquiries it sends us. Your medical records at the hospital are handled under our patient privacy practices and the laws that apply to them.

What we collect and why

  • Contact form: your name, phone number, email, the department you choose and your message. We use these only to reply to you and arrange an appointment. The website does not store them — pressing “Send Message” opens WhatsApp with the details addressed to our number, and we receive them there.
  • Calls, WhatsApp and email: whatever you choose to tell us, used to answer your question and book your visit.
  • Website usage (only with your consent): which pages are visited and how, through Google Analytics, so we can see which information helps patients.
  • Technical data: your IP address and browser details reach our hosting provider on every visit, to deliver the site and protect it from abuse.

We process this data on the basis of your consent, or because you have voluntarily given it to us for a specific purpose such as booking an appointment, as the DPDP Act permits. We do not sell personal data, and we do not use it for advertising.

Services that receive your data

ServiceWhenWhat it receives
WhatsApp (Meta)When you press “Send Message” on our contact form, or message us on WhatsAppThe details you typed, your phone number and WhatsApp profile
Google Analytics, via Google Tag ManagerOnly if you choose “Accept” in the privacy bannerPages visited, device and browser, approximate location, IP address, cookie identifiers
Instagram (Meta)Only if you accept, or press “Load Instagram reels”IP address, device details, cookies set by Instagram
Google MapsOnly if you accept, or press “Load map” on the contact pageIP address, device details, cookies set by Google
YouTube (privacy-enhanced mode)When a page with one of our videos loads, or you press playIP address and device details; YouTube sets no tracking cookies until you play a video
Vercel (website hosting, Analytics and Speed Insights)Every visit, to deliver and secure the websiteIP address and request details in server logs; page-view and performance counts without cookies

These providers may process data outside India. Any such transfer is subject to the restrictions the Government of India notifies under the DPDP Act.

Cookies and your choices

The website itself works without cookies. Google Analytics, Instagram and Google Maps are optional and stay switched off until you choose “Accept” — or, for a single Instagram or map embed, press its “Load” button for that visit. We remember your choice in your browser for up to 12 months. You can change it at any time; withdrawing is as easy as giving consent.

How long we keep it

We keep enquiry details only as long as we need them to respond and arrange your appointment, and then delete them — unless you become our patient, in which case the law on medical records applies, or another law requires us to keep them. Analytics data is kept for the period set in our Google Analytics account.

Your rights

Under the DPDP Act you can:

  • ask for a summary of the personal data we hold about you and how we use it;
  • ask us to correct, complete, update or erase it;
  • withdraw your consent at any time — this does not affect processing done before you withdrew;
  • nominate someone to exercise these rights for you if you die or become unable to;
  • raise a grievance with us, and then complain to the Data Protection Board of India if you are not satisfied.

Children

If you are under 18, please ask a parent or guardian to contact us for you. When a parent or guardian shares a child's details, we use them only to arrange that child's care. We do not track children or show them targeted advertising.

How we protect it

The website is served only over encrypted HTTPS, stores no form submissions, and loads optional third-party services only after you opt in. Access to enquiries we receive is limited to the staff who need them to help you. If a personal data breach occurs, we will inform you and the Data Protection Board as the law requires.

Contact us or raise a grievance

For any question about your personal data, to use your rights, or to make a complaint, contact us:

We will acknowledge your request promptly and resolve it within the time required under the DPDP Act and Rules. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

Language and changes

You can ask for this notice in Gujarati, Hindi or any other language listed in the Eighth Schedule to the Constitution of India. If we change how we handle personal data, we will update this page and its date, and ask for your consent again where needed.

Back to contact