Dr. Uterus

Privacy Policy

Effective Date: July 2026 | Last Updated: July 2026

This policy governs how Dr. Uterus collects, uses, stores, and protects personal data of all website visitors and customers in accordance with the Information Technology Act, 2000 and the IT (Amendment) Act, 2008.

1. Who We Are

Dr. Uterus is the online health education and consultation platform of Dr. Mitali Rathod (MS. Consultant Obstetrician and Cosmetic Gynaecologist), operating under the domain druterus.com. References to 'we', 'us', or 'our' in this policy refer to Dr. Uterus.

2. Data We Collect

We collect the following categories of personal data:

  • Identity Data: Full name, email address, phone number
  • Health Data: Menstrual history, symptoms, medical conditions, and information voluntarily submitted via consultation forms, assessments, or WhatsApp communication
  • Transaction Data: Payment method type, billing details, transaction ID (we do not store card numbers)
  • Technical Data: IP address, browser type, device type, pages visited, time on site, referral source
  • Communications Data: Emails, messages, and form submissions sent to us

3. How We Collect Data

  • Directly from you when you register, purchase a course, book a consultation, complete the health assessment, or contact us
  • Automatically via cookies and analytics tools when you browse druterus.com (see Cookie Policy)
  • Via third-party platforms including Razorpay (payments), Google Analytics, and WhatsApp Business

4. How We Use Your Data

  • To process and fulfil course enrolments and consultation bookings
  • To deliver your personalised health protocol and follow-up documents
  • To communicate appointment reminders, updates, and support responses
  • To send educational newsletters and health content (only with your explicit consent)
  • To improve our platform, content, and services through aggregated analytics
  • To comply with applicable legal obligations

We do not use your data for automated profiling that produces legal or similarly significant effects without your knowledge.

5. Health Data — Special Category

Health and medical information you share with us is treated as sensitive personal data under Indian law. It is used exclusively for the purpose of delivering your consultation or course — never for marketing, advertising, or sharing with third parties without your explicit consent.

6. Data Sharing

We do not sell your personal data. We share data only with:

  • Payment processors (Razorpay) — for secure transaction processing
  • Scheduling tools — for booking management
  • Email delivery platforms — for sending communications you have consented to
  • Legal authorities — where required by applicable law or court order

All third-party processors are bound by data processing agreements that restrict them from using your data for any purpose other than providing their service to us.

7. Data Retention

  • Account and course data: retained for the duration of your account plus 3 years
  • Consultation and health records: retained for 7 years (in line with medical record standards)
  • Transaction records: retained for 7 years (GST and financial compliance)
  • Marketing consent records: retained until you withdraw consent

You may request deletion of your personal data at any time, subject to our legal retention obligations.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data (subject to legal retention requirements)
  • Withdraw consent to marketing communications at any time
  • Lodge a complaint with the relevant authority

To exercise any of these rights, email Contact@druterus.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include SSL encryption, access controls, and secure payment processing. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Children's Privacy

Our services are intended for individuals aged 10 and above. We do not knowingly collect personal data from anyone under 10. If you believe a minor has submitted data to us, please contact Contact@druterus.com immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy periodically. The updated version will be published on this page with a revised effective date. Continued use of our platform after changes constitutes acceptance of the updated policy.

12. Contact

For queries related to this policy, contact: Contact@druterus.com