1. Introduction
Aevum Health ("Aevum," "we," "us," or "our") is operated under the clinical infrastructure of Kapadia Hospital at Mahatma Gandhi Road, Shri Nagar, Goregaon West, Mumbai 400104, India. We are committed to protecting the privacy of our patients, website visitors and clinic guests.
This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we retain it and the rights you have over it. It is issued in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act 2000 and applicable Indian data-protection law.
By using this website (https://aevumhealthbyvrx.com), submitting an enquiry form, booking a consultation or visiting our clinic, you agree to this Privacy Policy.
2. Information we collect
2.1 Information you provide to us
- Contact details — name, phone number, email address (submitted via the website form, phone, WhatsApp or in-clinic)
- Enquiry details — the specific treatment you are interested in and any message you send with the form
- Health information — medical history, existing conditions, allergies, current medications, pregnancy status, prior treatments — collected only during in-clinic consultation
- Clinical records — physician notes, pre- and post-treatment assessments, consent forms and progress photographs (only with your written consent)
- Payment information — processed through third-party payment gateways; we do not store card numbers on our servers
2.2 Information we collect automatically
- Log data — IP address, browser type and version, pages visited, referrer URL, device type and the date/time of your visit
- Cookies — small files placed on your device to remember preferences, measure site performance and support analytics (see Section 7)
3. How we use your information
We use your information strictly for the purposes below:
- To respond to your enquiry, call you back and schedule a consultation
- To provide the clinical services you book with us and to maintain accurate medical records
- To send appointment reminders, treatment follow-ups and aftercare instructions
- To comply with our legal, regulatory and medical-record-keeping obligations
- To protect our website against spam, fraud and unauthorised access
- To improve the website, measure traffic and understand how visitors use our services
- To send periodic marketing communications only if you have opted in; you may opt out at any time
4. How we share your information
We do not sell, rent or trade your personal information. We share it only in these limited circumstances:
- Within Aevum's clinical team — physicians, nurses and trained clinical staff who need the information to deliver your care
- Kapadia Hospital — where Aevum operates, for shared clinical infrastructure, emergency support and referred diagnostic services
- Service providers — hosting (Hostinger), email delivery (SMTP), payment gateways and appointment-management systems. These providers process data strictly on our instructions.
- Legal authorities — where required by Indian law, court order or to protect the rights, safety or property of Aevum Health, our staff or any other person
- With your explicit consent — e.g. if you authorise us to share your records with another physician or specialist
5. Data retention
We retain your information only as long as necessary for the purposes for which it was collected:
- Website enquiry form submissions — 24 months from the date of submission, unless you become a patient
- Patient clinical records — a minimum of 3 years from the date of last treatment, as required under Indian medical record-keeping norms; longer if required by law or medical necessity
- Consent forms and signed documents — retained for the full duration of treatment plus the mandatory retention period
- Log data and cookies — typically 6–24 months; see your browser's cookie controls
When data is no longer needed, it is securely deleted or anonymised.
6. Your rights under the DPDP Act
As a Data Principal, you have the following rights over your personal information:
- Right to access — request a summary of the personal data we hold about you
- Right to correction and erasure — ask us to correct inaccurate data, complete incomplete data or delete data we are no longer required to keep
- Right to withdraw consent — where we process your data based on your consent, you may withdraw it at any time
- Right to grievance redressal — raise a complaint about how we handle your data
- Right to nominate — nominate another person to exercise these rights on your behalf in case of death or incapacity
To exercise any of these rights, contact our Grievance Officer (Section 11). We will respond within the timelines prescribed by the DPDP Act.
7. Cookies and analytics
Our website uses the following categories of cookies:
- Essential cookies — required for core site functionality (form submission, security). These cannot be disabled.
- Performance and analytics cookies — where enabled, help us understand aggregate visitor behaviour through services such as Google Analytics
- Advertising cookies — where enabled, allow ad platforms (such as Meta) to measure campaign performance
You can control cookies through your browser settings and, where a cookie-consent banner is shown, through its controls. Blocking certain cookies may reduce site functionality.
8. Security
We apply reasonable technical and organisational safeguards to protect your information, including:
- HTTPS encryption across the website and all form submissions
- Sterile clinical protocols and single-use equipment for all treatments
- Access control — patient records are accessed only by authorised clinical staff on a need-to-know basis
- Hospital-grade safeguards via Kapadia Hospital's infrastructure
- Regular backups and secure disposal of outdated records
No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
9. Children's privacy
Our services are not directed at children under 18. We do not knowingly collect personal information from minors without verifiable parental or guardian consent. If you believe we have inadvertently collected a minor's data, please contact us and we will delete it.
10. International data transfers
Your data is primarily stored on servers located in India. Where we use international service providers (e.g. email delivery), data may be transferred outside India. We ensure that any such transfer is subject to adequate safeguards consistent with Indian data-protection law.
11. Grievance Officer
If you have any complaint, question or request regarding your personal information, please contact our Grievance Officer:
- Name: Grievance Officer, Aevum Health
- Email: grievance@aevumhealthbyvrx.com
- Phone: +91 80975 66512
- Address: Aevum Health, Mahatma Gandhi Road, Shri Nagar, Goregaon West, Mumbai 400104, India
We will acknowledge your grievance within 48 hours and respond substantively within the timeframe prescribed by applicable law.
12. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be communicated on this page; in some cases, we may also notify registered patients by email.
13. Contact us
For general questions about this policy or our practices:
Book Now