Privacy policy

Log in

Privacy policy

How Dr. Kabir Mehta collects, uses and protects your personal and health data, and your rights over it.

Effective 1 October 2026

1. Who we are

This policy explains how Dr. Kabir Mehta, trading as Mehta Skin Clinic ("we", "us", "our") collects, uses, shares and protects your personal data when you use this website, book or pay for our services, or receive care from us. Dr. Kabir Mehta is a sole proprietorship with its registered address at 540, 100 Feet Rd, Indiranagar, Bengaluru 560038.

We are the "data fiduciary" for your personal data under the Digital Personal Data Protection Act, 2023, and the body corporate responsible for it under the Information Technology Act, 2000 and its rules. We decide why and how your data is used.

2. Data we collect

Depending on how you use our services, we collect:

  • Identity and contact details: name, mobile number, email, date of birth, gender and address.
  • Details of family members you add to your account, which you confirm you are authorised to share.
  • Health information: reasons for visits, symptoms, medical history, prescriptions, test results, reports and notes from your care. This is sensitive personal data and we treat it with extra care.
  • Booking, membership and payment records. Card, UPI and bank details are entered with our licensed payment aggregator; we do not store your full card details.
  • Messages you send us, feedback and support requests.
  • Technical data needed to run the website securely, such as device and browser type, IP address and essential cookies for login.

3. How we use your data

We use your data only to:

  • provide, schedule and manage your consultations, tests, procedures and membership;
  • maintain your health records and share them with you;
  • take payments and process refunds;
  • send you service messages such as confirmations, reminders, reports and requests for feedback about your visit;
  • respond to your questions and complaints;
  • keep our services safe and secure, prevent fraud and meet our legal and regulatory obligations.

5. Who we share your data with

We do not sell your personal data. We share it only as needed to provide your care and run our services:

  • our doctors, practitioners and staff involved in your care;
  • HoneyHealth, our technology provider, which hosts and operates this website, booking, records and messaging on our behalf as our data processor;
  • our payment aggregator, and SMS, WhatsApp and email providers used to message you;
  • laboratories, hospitals or other providers we refer you to, with your consent;
  • government authorities, courts or regulators where the law requires it.

6. How our processors handle your data

Our processors, including HoneyHealth, may process your data only on our instructions and under written contracts that require confidentiality and reasonable security safeguards. They may not use your personal data for their own purposes. Dr. Kabir Mehta remains responsible to you for your data.

7. Where we store it and for how long

Your data is stored with our technology provider on secured servers, primarily located in India.

We keep your data for as long as you have an account with us and afterwards for as long as medical-record, tax and other laws require. When it is no longer needed, we delete or anonymise it.

8. Security

We use reasonable security practices and procedures, including encryption in transit, access controls and one-time-password login, to protect your data. No system is completely secure; if a personal data breach affects you, we will inform you and the authorities as the law requires.

9. Your rights

Subject to applicable law, you have the right to:

  • obtain a summary of the personal data we hold about you and how we use it;
  • have inaccurate or incomplete data corrected or completed, and have data erased where we are not required to keep it (medical records must often be retained by law);
  • withdraw your consent;
  • nominate a person to exercise your rights if you die or become unable to;
  • have your grievance addressed by our Grievance Officer, and, if you are not satisfied, complain to the Data Protection Board of India.

10. Children

Accounts are for adults. A parent or lawful guardian may book for and manage the data of a child under 18, and by doing so gives consent on the child's behalf.

11. Cookies

We use essential cookies to keep you signed in and secure. We may use analytics to understand how the website is used; analytics never includes your health information.

12. Our technology provider, HoneyHealth

This website, online booking, payments interface, patient account and related software are provided to us by HoneyHealth, a technology provider. HoneyHealth operates this technology on our behalf and on our instructions only.

HoneyHealth is not a healthcare provider. It does not provide medical advice, diagnosis or treatment, does not employ, supervise or choose our practitioners, does not set our fees, does not receive or hold your payments, and is not a party to the agreement between you and Dr. Kabir Mehta.

Dr. Kabir Mehta alone is responsible to you for the healthcare services we provide, our fees, payments, refunds, your personal data and the handling of any request or complaint. Please contact us, not HoneyHealth, about anything to do with your care, bookings, payments or data. HoneyHealth will redirect any such request it receives to us.

13. Changes to this policy

We may update this policy. We will post the new version here with its effective date and, for material changes, notify you.

14. Contact and grievances

For any privacy request or complaint, contact our Grievance Officer, Dr. Kabir Mehta, Proprietor (email care@mehtaskinclinic.in, phone +91 98765 43210). Contact: +91 98765 43210 (Front desk is open Mon–Fri, 10 AM–7 PM.) or our Grievance Officer, Dr. Kabir Mehta, Proprietor (email care@mehtaskinclinic.in, phone +91 98765 43210).