Legal
Privacy Policy
Last updated: October 2026
This policy is written to meet India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and, for health-related information you share with us, the Sensitive Personal Data or Information Rules, 2011 ("SPDI Rules") issued under the Information Technology Act, 2000.
1. Who we are
TraumaCure ("we", "us", "the Data Fiduciary") operates the website at https://www.traumacure-india.com and coordinates on-demand orthopaedic and trauma care in Indore, MP. Under the DPDP Act, we are the Data Fiduciary for the personal data you share through this website, and you are the "Data Principal." This policy is the Notice required under Section 5 of the DPDP Act: it explains what we collect, why, and what rights you have over it.
2. What we collect
When you use the contact form, the partner enquiry form, call, or message us, we may collect:
- Your name, phone number, and email address (if provided).
- The message you submit, which may describe an injury or medical concern. Under the SPDI Rules, information about a "physical, physiological or mental health condition" is sensitive personal data, and we handle it with the additional care described in section 9 below.
- Basic technical data automatically collected by our hosting and analytics providers (e.g. approximate location from IP address, device/browser type, pages visited) for security and to understand site usage — see section 10 on cookies and analytics.
3. Our basis for processing: your consent
We process the personal data described above on the basis of your free, specific, informed, and unambiguous consent, given by the affirmative action of ticking the consent checkbox before submitting a form on this website, or by voluntarily calling or messaging us. You may withdraw your consent at any time by emailing info@traumacure-india.com; withdrawal does not affect the lawfulness of anything we did with your data before you withdrew, and may mean we are unable to continue coordinating an in-progress enquiry.
4. How we use it
- To respond to your enquiry and coordinate the care you've requested.
- To route your request to the right clinical coordinator or provider.
- To maintain the security and reliability of this website.
- To improve the website's content, performance, and usability.
We do not sell your personal information, and we do not use your message content for advertising or marketing purposes. We only use your data for the purpose you gave it to us for.
5. How we share it
We share information only with the clinical coordinators, providers, or partner facilities directly involved in delivering the care you've requested, and with service providers who help us run this website and store this data (e.g. hosting, database, email delivery, analytics), acting as our data processors. We do not share your information with third parties for their own marketing purposes.
6. Where your data is stored
This website is hosted and our form submissions are stored using third-party cloud infrastructure providers, which may process or store data on servers located outside India. Where this happens, we rely on contractual safeguards with those providers to protect your data to a standard consistent with the DPDP Act, regardless of where it is processed.
7. Data retention
We retain contact form and partner enquiry submissions, and related communications, only as long as reasonably necessary to respond to your enquiry, coordinate care, and meet any applicable legal or clinical record-keeping obligations. Once none of those purposes apply, we delete or anonymise the data.
8. Your rights as a Data Principal
Under the DPDP Act, you have the right to:
- Obtain a summary of the personal data we hold about you and how we're using it.
- Ask us to correct, complete, or update inaccurate or outdated personal data.
- Ask us to erase personal data that is no longer necessary for the purpose it was collected for, subject to any legal or clinical obligation that requires us to retain certain records.
- Withdraw your consent at any time (see section 3).
- Register a grievance with us (see section 12) and, if unresolved, approach the Data Protection Board of India.
- Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
To exercise any of these rights, email info@traumacure-india.com with your request; we will respond as soon as reasonably possible and within any timeline prescribed by applicable law.
9. Sensitive personal data: health information
If your message describes an injury or health condition, it is "sensitive personal data or information" under the SPDI Rules. In addition to the rights above, for this category of data we commit to:
- Collecting it only with your explicit, informed consent (the form checkbox).
- Not disclosing it to any third party without your consent, except to the clinical coordinators, providers, or partner facilities needed to deliver the care you requested, or where disclosure is required by law.
- Not publishing it or making it publicly available in any way.
- Giving you the opportunity to review and correct it on request (see section 8).
- Not retaining it for longer than the purpose it was collected for requires.
10. Cookies and analytics
This website uses Vercel Analytics and Vercel Speed Insights to understand site usage and performance. Both are configured to operate without setting tracking cookies on your browser. We do not use third-party advertising cookies or cross-site tracking on this website.
11. Children's data
This website is not directed at children, and we do not knowingly collect personal data from anyone under 18. If a parent or guardian is enquiring on behalf of a minor patient, we process that data on the basis of the parent or guardian's own consent.
12. Grievance redressal
If you have a complaint or concern about how we've handled your personal data, you can reach our Grievance Officer, designated under the DPDP Act and the Information Technology Act, 2000:
Aashish, Founder, TraumaCure
Email: info@traumacure-india.com
Phone: +91 63661 63596
We will acknowledge and work to resolve grievances as soon as reasonably possible and within any timeline prescribed by applicable law. If you remain unsatisfied with our response, you may escalate your complaint to the Data Protection Board of India.
13. Security
We take reasonable technical and organisational measures to protect the information you share with us, including the SPDI Rules' "reasonable security practices" standard for sensitive personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
14. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or in applicable law. We will update the "Last updated" date above when we do.
15. Contact us
Questions about this policy, or requests to exercise your rights under section 8, can be sent to info@traumacure-india.com or +91 63661 63596.