ReCure Privacy Policy

1. Introduction

   Welcome to ReCure! This policy explains how we collect, use, safeguard, and manage your Personal Data and Health Data across all our clinics and digital platforms in India.

2. Who We Are

   Our website address: We are a network of physiotherapy and rehabilitation centres operating under the ReCure brand.

3. Information We Collect
   1. Personal & Health Data
      • Identifiers: name, DOB, gender, address, phone, email
      • Health details: medical history, diagnosis, treatment records
      • Appointment and billing info
      • Media: clinical photos/videos (with express consent)
      • Payment/insurance details
      • Clinic feedback, forms, or online inquiries
   2. Usage & Technical Data
      • IP address, browser type, device type and OS
      • Website activity, visit duration, form interactions — collected via cookies
4. Collection Methods
   • Directly from you (forms, in-clinic admission)
   • Automatically via cookies or analytics
   • From third-party health providers/labs (with consent)
   • Referrals or guardian submission (for minors)
5. Cookies & Tracking

   We use session and persistent cookies for:

   • Security and session management
   • Remembering form info (name/email)
   • Website performance & analytics

   No third-party marketing cookies are used unless you opt in.

6. Purpose of Use

   We process your data to:

   • Provide physiotherapy, track progress
   • Schedule appointments and send reminders
   • Process payments and insurance claims
   • Improve our services
   • Conduct annonymized clinical research (only with consent)
   • Respond to queries and provide updates
7. Legal Basis & Consent

   We process data based on your consent — obtained digitally or in writing — as per India’s DPDP Act, WHO patient rights, and IAP standards

   You may withdraw consent at any time (may affect service delivery).

8. Data Sharing & Disclosure

   We only share your personal and health information with:

   • ReCure healthcare staff directly involved in your care
   • Labs, diagnostic centres, or insurers (with consent)
   • Legal authorities, if mandated
   • Approved third-party vendors under Data Protection Agreements

   We do not sell or trade your data under any circumstances.

9. Data Storage & Security
   • All data is stored on encrypted systems in India, compliant with NDHM and IT Act 2011 standards
   • Website secured by SSL (HTTPS)
   • Access restricted via role-based authentication
   • Periodic security audits and firewalls in place
10. How Long We Retain Data
    • Clinical records: retained indefinitely per medical regulations
    • Cookies & usage data: retained per session or until consent changes
    • Personal data: retained as needed for treatment, legal compliance, or until you request deletion
11. Your Rights

    You have the right to:

    • Request access to your data
    • Correct inaccurate information
    • Withdraw consent anytime
    • Request erasure of personal data (except when legally required to retain)
    • Be informed of any data breach impacting your information
12. Children & Minors

    Data for individuals under 18 is only collected with parental or guardian consent, in full compliance with Indian and WHO child privacy standards

13. Embedded Content & Third-Party Sites

    Our site may include embedded content (videos, social feeds). These may set their own cookies or collect data. We encourage you to review their respective privacy policies

14. Links to Other Websites

    We are not responsible for external sites’ privacy practices. Please review their policies when following outside links.

15. Policy Updates

    Any changes will be posted here with the updated date. Significant changes may be communicated directly via email, website notice, or upon your next appointment.

16. Contact Our Data Protection Officer (DPO)