Last updated 3 November 2026
This policy explains what information Dr Shikha B Aesthetics LLP (“the clinic”, “we”, “us”), the practice of Dr. Shikha Bansal in Sushant Lok 1, Gurgaon, collects about you, why we collect it, who we share it with and the choices you have. It applies to this website, drshikhabansal.com, to our enquiry forms on Meta (Facebook and Instagram) and Google, and to the information you give us when you book or pay for a service.
We handle personal information under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, and medical records under the rules that apply to doctors in India.
What we collect
Information you give us
- Your name, mobile number and email address, when you leave your details in a callback form, book through the booking widget, fill in an enquiry form on Meta or Google, write to us on WhatsApp or email, or call the clinic.
- Photographs, questions and medical details you send us before a consultation, for example on WhatsApp or email.
- At the clinic, and in a video consultation, your medical history, examination findings, consent forms, clinical photographs and treatment records. These are health records and are kept as the law requires.
Payment information
Online payments are processed by Razorpay. When you pay, you enter your card, UPI or bank details on Razorpay’s secure payment page. The clinic never sees or stores your full card number. We receive a payment confirmation with your name, the amount, the payment ID and the last digits of the card, which we keep with your invoice.
Information collected automatically
When you visit this website we use cookies and similar tools to understand how it is used and to measure our advertising:
- Google Tag Manager and Google Analytics, which record the pages you visit, roughly where you are and how you reached us.
- Google Ads, Meta and OpenAI advertising tags, which tell those platforms when a visit from one of their ads led to an enquiry.
- PostHog analytics, which includes session replay: a recording of how pages are scrolled and clicked so we can fix what confuses visitors. Text typed into form fields is masked and is not recorded.
- Our own attribution cookie on drshikhabansal.com, which remembers the campaign or page that brought you to the site, so that when you call, message or fill in a form we know which page helped you decide.
Why we use it
- To answer your enquiry, call you back, book your consultation and remind you of your appointment.
- To give you medical care, keep your health record and follow your recovery.
- To take payment, issue receipts and handle refunds.
- To understand which pages and advertisements bring patients to the clinic, and to improve the website.
- To meet our legal duties, including medical record-keeping, accounting and tax.
We do not sell your information. We do not use your health information for advertising.
Who we share it with
We share information only with the services we need to run the practice, and only what each needs:
- Razorpay, to process your payment and any refund.
- Eka Care, which runs our appointment booking and clinical records.
- Google, Meta and OpenAI, as advertising and analytics providers, for the measurement described above.
- PostHog, for website analytics.
- WhatsApp, when you choose to message us there.
- Our internal patient enquiry system, which the clinic team uses to call you back and keep track of your enquiry.
- Doctors, laboratories, anaesthetists and hospitals involved in your care, when you are treated.
- Government bodies, courts or regulators, where the law requires it.
Some of these providers store data outside India. Where they do, we rely on their contractual commitments to protect it.
Before and after photographs and testimonials
Clinical photographs are part of your medical record. We publish a photograph, video or story on this website or on social media only with your separate written consent, which you can withdraw at any time by writing to us. Faces are blurred unless you ask us otherwise.
How long we keep it
- Medical records are kept for as long as Indian medical record-keeping rules require, and in any case for at least three years after your last treatment.
- Enquiry details for people who do not become patients are kept for up to two years, so we can answer if you come back to us.
- Payment and invoice records are kept for the period required by tax and accounting law.
- Analytics data is kept according to each provider’s retention settings.
Keeping it safe
Your records are kept on access-controlled systems. The website is served over HTTPS. Only the clinic team members who need your information to do their job can see it.
Your choices and rights
You can:
- Ask what personal information we hold about you, and ask us to correct it.
- Ask us to delete information we no longer need to keep by law.
- Withdraw consent to marketing messages, or to the publication of your photographs or story.
- Refuse non-essential cookies in your browser settings. The website still works without them.
- Raise a concern about how your information has been handled.
To do any of these, write to [email protected] with “Privacy” in the subject line, or send a letter to the address below. We reply within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
Children
This website and our services are meant for adults. We treat anyone under 18 only with a parent or legal guardian present and consenting, and we do not knowingly collect information from children online.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.
Contact
Dr Shikha B Aesthetics LLP, B-721, Ground Floor, Sushant Lok 1, Opposite Sushant Arcade Market, Gurgaon, Haryana 122009, India. Email [email protected]. Phone +91 96021 73742.