Privacy Policy

Last updated: 11 August 2026

Sevens Physiotherapy and Rehabilitation (“Sevens Physiotherapy”, “we”, “us”, “our”) operates sevensphysiotherapy.com and the HSR Layout clinic at 2nd Floor, Lotus Pride, 17th Cross Rd, above Haldiram’s, Sector 4, HSR Layout, Bengaluru, Karnataka 560102. This policy explains what personal data we collect — through this website and through your care at our clinic — why, and what choices you have about it. Because we’re a healthcare provider, some of what we hold about you is sensitive health data, so we’ve been deliberately specific below rather than using boilerplate.

What we collect

Website and enquiry data. When you fill in the booking or enquiry form on this website (on the homepage or the Book & Contact page), we collect the details you enter: your first and last name, phone number, email address, the area of pain or service you’re interested in, your preferred clinician, and any message you write describing your condition.

Clinical data. If you become a patient, we collect what’s clinically necessary to assess and treat you: your health and injury history, physical assessment findings, diagnosis, treatment plan, session notes and progress records, and any relevant medical history or documents you choose to share with us (for example, a doctor’s referral, scan reports, or prior treatment records). This is sensitive personal data, and we only collect what’s needed to plan and deliver your care.

We don’t track you across other websites or buy data about you from anyone.

Consent for sensitive health data

Under India’s Digital Personal Data Protection Act, 2023 (DPDPA), health data is treated with particular care. We collect and process your clinical data only with your consent — given when you book your first assessment and confirmed again in person before treatment begins. You can withdraw that consent at any time; if you do, we’ll stop using your data for anything beyond what’s already required to safely close out or hand off your care, and withdrawal doesn’t undo processing that already happened lawfully before you withdrew. Withdrawing consent may mean we’re no longer able to continue treating you, since clinical data is what our care is built on.

How we use it

Enquiry details are used to get back to you: confirming your appointment by phone or WhatsApp, matching you to the right clinician, and keeping a record of what you told us so your first visit doesn’t start from zero.

Clinical data is used only to plan and deliver your care — assessing your condition, designing and adjusting your treatment plan, tracking your progress across sessions, and coordinating between clinicians if more than one is involved in your care. It’s handled with the same confidentiality any physiotherapy clinic owes its patients, and is not used for marketing.

Submissions and records are stored in our website’s database and clinic systems, and enquiry details are also sent by email to our front desk. None of this is shared, sold, or rented to any third party for marketing.

Who we share data with

We don’t sell your data, and we don’t share your clinical records with third parties as a matter of course. The limited cases where information does leave the clinic:

• At your request — for example, if you ask us to send your records or a discharge summary to another doctor or clinic.
• WhatsApp/Meta — if we message you on WhatsApp for appointment confirmations or reminders, that message passes through WhatsApp/Meta’s platform under their own terms.
• Service providers who help us run the clinic and website (e.g. hosting, email delivery) — solely to operate the systems we use, not to use your data for their own purposes.
• Where the law requires it — if we’re legally compelled to disclose information (e.g. a court order).

We do not currently process insurance claims on patients’ behalf, so we don’t share clinical data with insurance companies. If that changes, this policy will be updated before it happens.

Contacting us directly

If you call, email, or message us on WhatsApp instead of using the form, that conversation is governed by the respective service’s own policy (your telecom provider, your email provider, or WhatsApp/Meta). We only use the contact details you give us there to respond to you.

Cookies and third-party services

This site uses a small number of third-party services to function and to measure how people find us:

• Google Fonts — loads the typefaces used on this site from Google’s servers.
• Google Maps — the map on our Book & Contact page is embedded directly from Google, so visiting that page loads content from Google’s servers, subject to Google’s own privacy policy.
• Google Tag Manager & Google Ads — we use these to measure how our advertising is performing (for example, whether a click from an ad led to a booking enquiry). This can set cookies in your browser used for that measurement.

These providers may process some technical data (like your IP address or browser type) under their own privacy terms; we don’t control what they do with it beyond the purpose we’ve configured. None of this touches your clinical records — those live in our clinic systems, not in our analytics or advertising tools.

How long we keep it

Enquiries that don’t turn into a booking are kept only as long as needed to follow up, and you can ask us to delete one at any time.

Clinical records are kept for a minimum of 3 years from your last visit, in line with standard allied-health record-keeping practice in India, and longer where ongoing or recurring care, an open treatment episode, or a legal reason requires it. After that, records are securely deleted or anonymised unless you’ve asked us to keep them longer (for example, if you may return for follow-up care).

Your rights

As a Data Principal under the DPDPA, and simply as our patient, you can ask us at any time to:

• Tell you what personal data (including clinical data) we hold about you.
• Correct or update anything that’s inaccurate or incomplete.
• Delete data that we’re not required to keep for clinical or legal reasons.
• Withdraw consent for us to process your data, as described above.
• Raise a grievance about how we’ve handled your data (see below).

To exercise any of these, email hello@sevensphysiotherapy.com or call +91 99009 01958. We’ll respond within a reasonable time and won’t charge you for a straightforward request.

Grievance redressal

If you’re unhappy with how we’ve handled your personal data, contact us at hello@sevensphysiotherapy.com or +91 99009 01958 and we’ll treat it as a formal grievance: we aim to acknowledge it within 48 hours and resolve it within 30 days. If you’re not satisfied with how we’ve handled it, you have the right to complain to the Data Protection Board of India under the DPDPA.

Security

We take reasonable technical and organisational steps to protect the information you share with us, including keeping clinical records access limited to the clinicians involved in your care. No website or method of transmission is completely secure, so we can’t guarantee absolute security, but we don’t take that lightly.

Children and minors

We do treat younger patients as part of our sports injury and paediatric-adjacent care. Any booking, enquiry, or consent for treatment involving a minor must be made by a parent or guardian, who provides consent on the minor’s behalf for both the website enquiry and any clinical data we collect during treatment. Correspondence about a minor’s care will be directed to the parent or guardian, and we don’t independently market to minors.

Changes to this policy

We may update this policy as the website, our tools, or applicable law change. The “Last updated” date at the top will always reflect the latest version, and material changes will be reflected here directly.

Questions

If anything here is unclear, or you want to understand exactly what we hold about you, just ask — email hello@sevensphysiotherapy.com.