How we keep your clinic and your patients safe

1. Who we are and how to contact us

ARS Digital is a Delhi NCR-based agency that sets up and runs AI WhatsApp and voice assistants for private clinics. For any question about this policy, or to exercise any right described below, write to us at the email address shown in the footer of this site.

2. What data we collect from website visitors

When you submit a form on this site we collect the details you choose to give us: your name, clinic name, specialty, city, WhatsApp number, email address, clinic phone number and anything you write in the message field.

When you use the assistant on this site, we process the questions you type in order to answer them. Please do not enter patient details or medical information there.

We also collect standard, aggregated analytics about how the site is used — pages viewed, approximate region, device type and referring source. This is not used to identify you.

3. What data we process on behalf of clinics

When we run an assistant for a clinic, we process patient contact and appointment details on that clinic's behalf: name, phone number, appointment date and time, the treatment or service booked, and the messages exchanged with the assistant.

We do not ask for, and the assistant is instructed never to collect, clinical notes, diagnoses, test results or other health records.

4. Our role: clinics own the data, we process it on their instructions

The clinic is the owner of its patient data. ARS Digital processes that data only on the clinic's instructions and only to run the service agreed with them. We do not use it for our own purposes, and we never sell it.

5. Legal basis and consent under India's DPDP Act, 2023

For patients in India, processing is based on the consent the patient gives to the clinic, and on the legitimate uses permitted under the Digital Personal Data Protection Act, 2023 for providing a service the person has asked for.

Messages sent to patients relate only to their own appointments and care. Every patient can withdraw consent at any time by replying STOP, and that preference is honoured immediately.

6. Where data is stored and how long it is kept

Data is stored with reputable cloud and messaging providers, protected by encryption in transit and at rest and by access controls limited to the people who need it.

Website enquiry details are kept for up to 24 months. Clinic and patient data is kept for the duration of the engagement, and deleted after handover when a clinic leaves, except where we are required to keep records for tax or accounting purposes.

7. Sharing with service providers

We share data only with the providers needed to run the service — messaging platforms, hosting, email delivery and calendar systems — and only to the extent needed. They act on our instructions and may not use the data for their own purposes.

8. Your rights

You can ask us what personal data we hold about you, ask us to correct it, ask us to delete it, or withdraw consent you have previously given. Patients of a clinic we work with can make the same requests through the clinic or directly to us.

We action requests within a reasonable period and confirm when it is done.

9. Clinics outside India

For clinics in the UK and EU we follow UK and EU GDPR expectations, and for other markets the applicable local rules. Data terms are agreed in writing before any work begins.

We do not currently take on clinics in the United States that require HIPAA compliance. We will do so only once a compliant setup and business associate agreements are in place.

10. Cookies and analytics

This site does not use advertising or cross-site tracking cookies. Any cookies set are strictly necessary for the site to work, or are first-party analytics used in aggregate.

11. Changes to this policy

If this policy changes we update the date shown at the top of this page. Material changes affecting clinics we work with are communicated directly.