Kindly incorporate the same in the privacy policy to remediate the deficiencies:
Please provide the following information to the patient vide a POP-UP on the website:
"Your personal data i.e name, mobile number and e-mail ID will be collected for the purpose of booking an Appointment with the Doctor on the date and the time specified by you.
You consent to provide your data i.e name, mobile number and e-mail ID for the above-mentioned purpose."
[provide a box asking the patient to tick on it- (this is necessary to document the purpose and the consent of the patient to provide personal data)]
[YOU CAN CONTACT YOUR IT VENDOR FOR THIS PURPOSE]
BOOKING APPOINTMENT ONLINE /WHATSAPP VIDEO CALL
Your personal data i.e name, mobile number and e-mail ID will be collected for the purpose of Booking an Appointment with The Doctor on the date and the time specified by you.
Your personal data/information (including medical records and reports) may be transferred to a third party in connection with the merger or sale of Dr. Sandeep Garg, or a portion of our business.
In the event you choose to 'Book Appointment' Online Services are provided through a secured payment gateway. All payment details which are entered through this payment gateway are encrypted when YOU make payment. Communications to and from the service provider's website are encrypted. (Kindly confirm the same with the service provider CC Avenue)
You agree that Internet transmissions are never entirely secure and that any message or information you send to or through the website may intercepted by others, even where a website is stated as being secure. However Garg Orthopaedic Centre shall have no liability for the interception or 'hacking' of data through the website by unauthorised third parties.
