Privacy policy

Who we are

PhysioSetu is operated by Digital Cure, based in Dehradun, Uttarakhand. In the language of India's Digital Personal Data Protection Act 2023, we are the Data Fiduciary for the personal data described here. Our full address and contact details are at the bottom of this page.

PhysioSetu is a directory. It helps a patient find a physiotherapy clinic and ring it, and it introduces a patient to a physiotherapist for a consultation by video. We are not a healthcare provider and we hold no clinical records.

What we do not do

It is easier to start here, because the list is short and it is the part most privacy policies bury.

• We run no analytics, no advertising and no tracking of any kind. There is no Google Analytics, no advertising pixel and no third-party script on these pages.
• We set no tracking cookies. Once clinic login exists in a later phase, a logged-in clinic will carry a session cookie, and only then.
• We do not sell, rent or share personal data with anyone for marketing, ever.
• We keep no clinical records, no diagnoses and no prescriptions. Nothing about your treatment is stored in PhysioSetu.
• We ask for no account, no password and no login to browse or search this site.

What we collect when you simply browse

Nothing you have to give us. Our hosting provider records ordinary technical logs of requests, including an IP address, the page requested, the time, and the browser making the request. These logs exist to keep the site running and to detect abuse, and are not used to build any profile of you.

What we collect when you ask for a consultation

There is no form on this site. If you ask for a remote consultation you do so by sending us a WhatsApp message, an email or a phone call, and what we hold is what you chose to tell us: your name, your mobile number, the town you are in, and a description of what is troubling you in your own words.

The purpose is single and specific: to find a physiotherapist who can help you and to introduce the two of you. We pass those details to the one physiotherapist we match you with, and to no one else. We do not share them with clinics you did not ask about, and we send no marketing.

You may ask us to delete them at any time and we will, other than what we must keep to show that we handled a complaint properly.

Clinic and physiotherapist listings

The clinic listings on PhysioSetu were compiled from publicly available sources, including business listings that clinics themselves published. They carry a clinic name, address, telephone number and, where published, a website. We charged nothing for them and they imply no endorsement in either direction.

A listing exists so that a patient can find a real clinic and ring it. If you run a listed clinic and any detail is wrong, or you would rather not be listed at all, write to us and we will correct it or take it down. We do not ask for a reason, we charge nothing, and we act on it within one working day wherever we can.

A physiotherapist who joins us gives us their name, qualification and contact details, and their qualification is verified once. Verification documents are not published on the site.

How long we keep things

Consultation requests are kept only as long as they are useful for the introduction and any follow-up, and are removed within 180 days at the latest. Our database is built to blank personal details automatically at that point while keeping an anonymous row for counting how many people we helped.

Listing details stay until a clinic asks us to change or remove them. Technical logs are kept for a short period by our hosting provider and then discarded.

Who else can see your data

Three sorts of people and nobody else. The physiotherapist we introduce you to, and only the one. Our service providers, who run the servers, the database and our email, under contract and only to provide those services. And anyone we are legally required to disclose to under Indian law, which we would resist where we properly can.

Our servers and database are hosted in India, in the Mumbai region.

Your rights under the DPDP Act

The Act gives you these rights over your personal data, and you exercise all of them by writing to us at the address at the bottom of this page.

• To ask what personal data of yours we hold and what we have done with it.
• To have anything inaccurate, incomplete or out of date corrected or completed.
• To have your personal data erased when it is no longer needed for the purpose you gave it for.
• To withdraw a consent you gave us, at any time, as easily as you gave it.
• To nominate another person to exercise these rights on your behalf if you die or become unable to act.
• To complain to us first, and then to the Data Protection Board of India if we have not put it right.

Grievance officer

Complaints about personal data go to Arnav Kumar, Grievance Officer, Digital Cure, at ask.jalasri@gmail.com or +91 95600 29496. We answer every complaint, and we aim to resolve one within thirty days.

Children

PhysioSetu is not meant for use by anyone under 18 on their own. A parent or guardian should make any request for a consultation on a child's behalf, and we will deal with the adult throughout.

Security, and being honest about it

Access to our database is restricted by rules enforced in the database itself rather than only in the application, personal details are reachable only by the people who need them, and the site is served over HTTPS throughout. No system is perfect. If a breach ever affects your personal data we will tell you and the Data Protection Board, as the Act requires, rather than quietly hoping.

Changes to this policy

PhysioSetu is being built, and this page will change as it gains features. The date it took effect is shown at the top. A change that affects how we handle your personal data will be announced on this page before it takes effect, not after.