Privacy Policy — Bonbela Cosmoderma Aesthetics (BCA Clinic India)
We respect your privacy. This page explains what data we collect, why we collect it, and how we protect it.
🔒 Data Security
Clinical and personal records are stored securely with restricted access and modern safeguards.
📧 Communication
Calls, emails and form submissions are used only to serve you and are not shared without consent.
⏳ Retention
We retain records only as long as necessary for treatment, legal obligations and quality care.
🌐 Transparency
We never sell personal data. Third-party services used are disclosed and contractually bound to protect data.
1. Information we collect
We may collect personal and medical information when you interact with our clinic (website forms, calls, emails or in-person visits). Typical data includes:
- Contact details: name, phone number, email address, postal address (if provided).
- Medical & treatment data: medical history, photographs for records, treatment plans and notes you share during consultation.
- Payment & billing: transaction references and billing details required to process payments (we do not store full card details on our servers).
- Technical data: IP address, browser and device information collected via cookies and web analytics.
2. How we use your information
We use information to:
- Schedule, manage and deliver appointments and treatments safely.
- Provide personalised medical and aesthetic care, follow-ups and aftercare instructions.
- Respond to enquiries, process payments and handle patient support.
- Improve clinic services, training and quality through anonymised analytics.
- Send clinic updates, appointment reminders or promotional offers only if you opt in.
3. Legal basis & consent
By booking an appointment or submitting information you give us consent to use your data for the purpose of providing medical/aesthetic care. Where required by law, we will seek explicit consent before collecting sensitive health information.
4. Data protection & security
We follow strict technical and organisational measures to protect your data. This includes secure storage, access controls, encrypted communications for digital forms and periodic security reviews. Clinical records and reports are handled with strict confidentiality.
We use US-FDA approved medical devices and reputable software platforms for treatments and record keeping where applicable, and our staff are trained in confidentiality and data handling.
5. Sharing & third-party services
We will not sell your personal data. We may share information only when necessary to provide the service (e.g., with authorised labs, payment processors or specialist consultants) or when required by law.
Third-party providers used by BCA Clinic (appointment platforms, payment gateways, analytics services) are contractually required to maintain confidentiality and follow data protection standards. We recommend reviewing their privacy policies as well.
6. Cookies & website analytics
We use cookies and similar technologies to improve website performance and understand usage patterns (for example, Google Analytics). Cookies help us personalise content and make the site easier to use. You can manage or disable cookies in your browser—however, some features may not work if cookies are disabled.
7. Data retention
We retain personal and medical information for as long as is necessary to provide treatment, meet legal obligations, resolve disputes and for quality assurance. Specific retention periods vary by record type and applicable law; if you need details about retention for a particular record, contact us (details below).
8. Your rights
You have rights regarding your personal data. These may include:
- Request access to the information we hold about you.
- Ask for correction of inaccurate or incomplete data.
- Request deletion of personal data (subject to legal and medical record requirements).
- Withdraw consent for marketing communications at any time.
- Object to certain processing or request restriction in specific situations.
To exercise any of these rights, contact us using the details at the end of this page. We will respond as required by applicable law.
9. Children
Our services are intended for adults. We do not knowingly collect personal data from children under 16 without parental consent. If you believe we have unintentionally collected such data, please contact us to request removal.
10. Changes to this policy
We may update this Privacy Policy occasionally to reflect changes in law, technology or clinic practices. The date at the end of this page shows the last update—please check back periodically for changes.
Contact & data requests
If you have questions about this Privacy Policy or wish to make a data access / deletion request, please contact: