SlimMD Privacy Policy: your information, handled with clinical care
How SlimMD collects, uses, protects and retains the personal and health information you share through the website, the online assessment, consultations and program participation.
01
We collect what a doctor needsIdentity, measurements, health history and the reports you choose to share — nothing gathered for its own sake.
02
Health data is confined to your careOnly authorized clinicians and staff with a care, billing or technical need may access it; it is never used for advertising.
03
Nothing is soldProviders such as laboratories and payment processors receive only what their role requires, under contract.
04
You stay in controlAccess, correct, erase, withdraw consent or complain — one named privacy officer handles every request.
01
Scope of this policy
In plain wordsThis policy covers the SlimMD website, its online assessment, every consultation you attend and every program you join.
This Privacy Policy describes how the operating clinic behind SlimMD (“SlimMD”, “we”, “us”) handles personal information collected through the SlimMD website, the online assessment, enquiry and contact forms, telephone, WhatsApp and email channels, teleconsultations, in-clinic visits and participation in any SlimMD program.
In plain wordsWe collect what a doctor needs to assess you safely — identity, measurements, health history and the reports you choose to share — and the technical data any website records.
Depending on the service you use, we may collect the following categories of information, most of which you provide directly:
Identity and contact details: name, age or date of birth, sex, telephone number, email address and postal address where needed for a service.
Anthropometric information: weight, height, body-mass index, waist and other measurements you enter or we record in clinic.
Health information: relevant medical history, current and past medicines, allergies, previous weight-management treatments, symptoms and the answers you give in the online assessment or a consultation.
Documents you choose to share: laboratory reports, prescriptions, scans or other records supplied to the clinical team.
Program and appointment information: consultation notes, follow-up records, adherence and progress data, and the goals you set with your clinician.
Transaction information: invoices, receipts and payment status. Card and banking details are entered with the payment provider and are governed by that provider’s own policy.
Technical information: IP address, device and browser type, pages visited and, where enabled, analytics and cookie data.
We treat health information as sensitive and apply heightened safeguards to it. We collect it only where it is needed for the assessment, care or administration you have requested.
03
Purposes of processing
In plain wordsYour information is used to answer you, assess you, care for you, keep proper records and run the service — and for nothing that surprises you.
We process personal information for the following purposes:
To respond to enquiries and arrange consultations.
To carry out the online assessment and evaluate whether a SlimMD program is suitable for you.
To provide clinician-guided care, including prescribing where clinically appropriate, monitoring, dose adjustment and follow-up.
To maintain clinical and administrative records as required for good medical practice and by law.
To communicate appointment, program, safety and follow-up information.
To process payments, issue receipts and manage refunds under the enrolment schedule.
To operate, secure and improve the website and our systems.
To comply with legal, regulatory and professional obligations, and to establish or defend legal claims.
An online assessment organizes information for the clinician. It does not by itself diagnose a condition, confirm eligibility for a medicine or issue a prescription.
04
Consent and lawful basis
In plain wordsWe rely on your consent for health information and can rely on other lawful grounds for record-keeping and legal duties; you can withdraw consent, with some consequences.
Where consent is required, we seek clear, informed consent when you complete an assessment, book a consultation or enrol in a program. Certain processing may also be permitted for legitimate uses recognized by applicable law, to provide a service you requested, or to meet legal obligations such as medical-record retention.
You may withdraw consent at any time by contacting the privacy officer identified on this page. Withdrawal does not affect processing that already took place lawfully, and may mean that a service which depends on that information can no longer be provided.
05
How health information is protected
In plain wordsOnly the people involved in your care and its administration can see your health information, and they are bound by confidentiality.
Access to health information is restricted to the treating clinicians, clinical support staff and administrative personnel who reasonably need it for your care, for billing or for technical support, each of whom is bound by professional or contractual confidentiality. Clinical records are maintained in line with the standards expected of registered medical practitioners in India, including the Telemedicine Practice Guidelines, 2020 where care is delivered remotely.
We do not use your health information for advertising, and we do not combine it with data from third-party advertising platforms.
06
Sharing and disclosure
In plain wordsWe share only what a specific provider needs to deliver a service you asked for, and only otherwise where the law requires it.
We do not sell personal information. Where reasonably necessary and permitted, we may share information with:
Treating clinicians and authorized clinic personnel involved in your care.
Diagnostic laboratories and imaging centres you are referred to.
Pharmacies dispensing against a valid prescription, where we arrange dispensing.
Payment processors, hosting, communication and technology providers acting on our instructions under contract.
Professional advisers, regulators, courts or law-enforcement authorities where disclosure is required by law or lawful process.
Each provider receives only the information required for its role and is contractually restricted from using it for any other purpose.
07
Communications
In plain wordsWe will contact you about your care and your program on the channels you chose; marketing is separate and you can opt out.
Based on the channels you select, we may contact you by telephone, SMS, WhatsApp or email about enquiries, appointments, assessment results, program administration, safety information and follow-up. Service communications are part of providing care and are sent while you are a participant.
Marketing or educational communications are sent only with your consent and carry a simple way to opt out. Opting out of marketing does not stop appointment or safety messages.
08
Security safeguards
In plain wordsWe use reasonable technical and organizational safeguards, and we are honest that no online system is perfectly secure.
We apply administrative, technical and organizational safeguards proportionate to the sensitivity of the information we hold, including access controls, encrypted transmission where supported, staff confidentiality obligations and periodic review of our systems and providers.
No internet-based service can be guaranteed completely secure. If we become aware of a personal-data breach affecting you, we will notify you and any authority as required by applicable law.
09
Retention
In plain wordsWe keep clinical records for as long as medical-record rules require, and everything else only as long as its purpose lasts.
Clinical records are retained for the periods required of registered medical practitioners and health establishments under applicable Indian rules, and for any longer period needed to establish or defend a legal claim. Enquiry, marketing and website data are kept only as long as necessary for their purpose and are then deleted or anonymized.
Where you request erasure and no legal retention duty applies, we delete the information or anonymize it so that it no longer identifies you.
10
Your rights and choices
In plain wordsYou can ask what we hold, correct it, have it erased where the law allows, withdraw consent and raise a complaint.
Subject to applicable law and record-retention duties, you have the right to:
Access a summary of the personal information we hold about you and how it is processed.
Correct information that is inaccurate or incomplete, and update information that has changed.
Request erasure of information that is no longer required for the purpose it was collected for.
Withdraw consent for processing that relies on it.
Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
Raise a grievance with our privacy officer and, if unresolved, with the Data Protection Board of India or another competent authority.
We respond to requests within the timelines set by applicable law and may ask you to verify your identity before acting on them.
11
Cookies and website technologies
In plain wordsEssential cookies keep the site working; anything beyond that runs only if you agree.
The website uses essential cookies and similar technologies that are necessary for it to function and remain secure. Where required by applicable law, non-essential analytics, performance or embedded third-party technologies are activated only after you make a choice through the site’s consent controls, and you can change your choice at any time from the same control.
12
Children and young people
In plain wordsSlimMD is not designed for children; any care involving a minor needs a parent or guardian and a clinician’s specific assessment.
SlimMD services are not intended for unsupervised use by anyone under 18. Where a clinician determines that a program may be appropriate for a minor, verifiable consent of a parent or lawful guardian is obtained before any personal information is processed, in line with applicable law, and care follows age-specific clinical requirements.
13
Changes to this policy
In plain wordsWhen the policy changes, this page is updated and the review date at the top changes with it.
We may update this policy when our services, technologies, providers or legal obligations change. The current version and its review date are published on this page. Where a change materially affects how your health information is used, we will tell you directly and, where required, ask for fresh consent.
14
Privacy contact
In plain wordsOne named person handles privacy questions, consent withdrawals and complaints — their verified details must appear below before publication.
Questions about this policy, requests to exercise your rights, consent withdrawals and grievances are handled by the privacy and grievance officer of the operating clinic, whose verified name and contact details must be displayed on this page before publication. We acknowledge every request and respond within the period required by law.
The data ledger
Every category, traced end to end
Clause by clause is how lawyers read a policy. This is how a patient reads one: what you give us, why we need it, who can see it, and what happens to it afterwards.
What you give us
Why we need it
Who can see it
What happens afterwards
Identity & contact
To reply, book, identify you correctly and send appointment and safety messages.
Clinic team; communication and hosting providers under contract.
Kept while you are a participant and for legal record periods, then deleted.
Measurements
To assess suitability, set a baseline and track progress with your clinician.
Treating clinicians and clinical support staff.
Part of your clinical record; retained under medical-record rules.
Health history
To check indications, contraindications and interactions before any treatment is considered.
Treating clinicians and clinical support staff only.
Part of your clinical record; never used for advertising.
Reports you share
To interpret laboratory findings and decide on monitoring or referral.
Treating clinicians; the laboratory that issued them.
Stored with your record; you may ask for copies at any time.
Program & follow-up notes
To keep care continuous between visits and reviews.
Treating clinicians and clinical support staff.
Retained with your clinical record.
Payment records
To take fees, issue receipts and handle refunds under the enrolment schedule.
Accounts staff; the payment provider.
Retained for the accounting and tax periods required by law.
Website & device data
To keep the site working, secure and, if you consent, to understand how it is used.
Hosting and analytics providers.
Kept only for its technical purpose, then deleted or anonymized.
Nothing in this ledger is sold, rented or handed to an advertising platform. Where a row names a provider, that provider works under contract and only for the purpose in its row.
Verification register
Six fields the operator confirms before publication
This privacy policy deliberately does not invent an entity name, address, officer, jurisdiction or refund rule. Each field below must be completed from the clinic’s verified operational records before publication. Keep the confirmed information available on the live page wherever these clauses refer to it.
Operating legal entityThe registered name of the company, LLP, partnership or sole proprietorship that operates the SlimMD program and this website.
Registered clinic addressStreet address of the clinic and the address at which legal notices are served.
Grievance and privacy officerName, designation, email and phone of the person who receives privacy requests and complaints.
Governing law and courtsThe state and city whose courts have jurisdiction over disputes, and any arbitration clause the operator adopts.
Fees, cancellation and refund scheduleThe verified schedule supplied at enrolment, which these pages cross-reference rather than reproduce.
Consultation channelsThe exact telephone, WhatsApp and email endpoints the clinic monitors, with their hours.
