Digital Personal Data Protection (DPDPA) Privacy Policy

Last Updated: April 2026

1. Introduction

Welcome to SmartMove Physio. We respect your medical privacy and are fully committed to protecting your sensitive personal data in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology (SPDI) Rules, 2011.

2. Data Collection & Purpose Limitation

We collect your Name, Phone Number, Email, Date of Birth, and Clinical Treatment Notes explicitly for the purpose of providing physiotherapy care, processing financial receipts, and communicating appointment updates via WhatsApp or Email. We will never sell your data to third-party marketers.

3. Data Retention & Automatic Anonymization

Operating under Indian medical continuity and taxation laws, clinical and financial records are generally retained for up to 7 years. However, true to DPDPA compliance, once this mandatory statutory period expires, your digital identity (Name, Phone, Email) is permanently and irreversibly scrambled ("Anonymized") from our active databases, leaving only a financial ghost ledger.

4. Your Right to Erasure

As a Data Principal under the DPDPA, you may withdraw your consent at any time. If you request the deletion of your account, we will immediately trigger our Anonymization Protocols to permanently wipe your recognizable identity from our servers, provided no superseding legal or medical obligations require its temporary retention.

5. Contact the Data Fiduciary

If you have questions regarding your data privacy, or wish to invoke your Right to Erasure, please contact the clinic administrator at our Amayannoor office.