Privacy Policy

Privacy Policy –  Effective: 1 January 2026

Fillr by Dr. F (“we”, “our”, “us”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law.

By using our website (fillrbydrf.com), booking an appointment, or contacting us, you agree to the practices described in this policy.

1. Who We Are

Fillr by Dr. F is an aesthetic medical clinic operated by Dr. Fauziya Raj, located at:

2nd Floor, HM Square, Kamaraj Ave 1st St, Adyar, Chennai – 600020, Tamil Nadu, India

Email: info@fillrbydrf.com

Phone: +91 99407 77904

Dr. Fauziya Raj is the Data Fiduciary responsible for your personal data as defined under the DPDP Act, 2023.

2. Information We Collect

2.1 Information you provide directly

  • Full name
  • Email address
  • Phone number
  • Concern or procedure you are enquiring about (submitted via appointment or contact form)
  • Any additional information you share voluntarily in the ‘How we can help?’ field

2.2 Health-related information

When you visit our clinic in person or book a consultation, we may collect health and treatment-related information necessary to provide medical aesthetic services. This is collected only with your explicit consent and is handled with the highest level of confidentiality.

2.3 Information collected automatically

  • IP address and approximate location
  • Browser type and device information
  • Pages visited, time spent, and navigation behaviour on our website
  • Referring URL

This data is collected via Google Analytics and Google Tag Manager using cookies.

3. How We Use Your Information

We use your personal data for the following purposes:

  • To respond to appointment requests and enquiries
  • To confirm, schedule, or reschedule clinic appointments
  • To provide aesthetic medical treatments and related aftercare advice
  • To send appointment reminders or follow-up communications
  • To improve our website and services based on usage data
  • To comply with applicable medical and legal obligations

We do not use your personal data for automated decision-making or profiling.

4. Who we share your data with

We process your personal data on the following grounds under the DPDP Act, 2023:

  • Consent – you have given explicit consent when submitting a form or booking an appointment
  • Legitimate interest – to operate and improve our clinic services
  • Legal obligation – where processing is required by applicable law

You may withdraw your consent at any time by contacting us (see Section 9). Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

5. Sharing Your Information

We do not sell, rent, or trade your personal data. We may share it only in the following circumstances:

  • With trusted service providers (e.g. appointment booking platforms, email/SMS services) who process data on our behalf under strict data processing agreements
  • With Google (Analytics, Tag Manager) for website performance analysis – governed by Google’s Privacy Policy
  • Where required by law, court order, or a regulatory authority

All third-party processors are required to handle your data securely and only for the stated purpose.

6. Cookies

Our website uses cookies to improve your browsing experience and to analyse website traffic. Specifically:

  • Google Analytics cookies – to understand how visitors interact with our site (anonymised)
  • Google Tag Manager – to manage and deploy analytics and tracking scripts

You can control or disable cookies through your browser settings. Note that disabling cookies may affect some website functionality.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes stated in this policy:

  • Appointment and contact form data – retained for up to 3 years or as required by medical record-keeping obligations
  • Website analytics data – retained as per Google Analytics default retention settings (up to 26 months)
  • In-clinic treatment records – retained as required under applicable Indian medical law

Once data is no longer required, it is securely deleted or anonymised.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

  • HTTPS encryption across our entire website
  • Restricted access to personal data within our team on a need-to-know basis
  • Secure storage of in-clinic patient records

However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Your Rights

Under the Digital Personal Data Protection Act, 2023 and applicable law, you have the following rights:

  • Right to access – request a copy of the personal data we hold about you
  • Right to correction – request correction of inaccurate or incomplete data
  • Right to erasure – request deletion of your data where there is no lawful reason for continued processing
  • Right to withdraw consent – withdraw consent for data processing at any time
  • Right to grievance redressal – raise a complaint with us or with the Data Protection Board of India

To exercise any of these rights, please contact us at: info@fillrbydrf.com or +91 99407 77904. We will respond within 30 days of receiving your request.

10. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from minors without verifiable parental consent. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

11. Links to Third-Party Websites

Our website may contain links to third-party platforms (e.g. Google Maps, Instagram, Facebook). This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the ‘Effective Date’ at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact:

Fillr by Dr. F

2nd Floor, HM Square, Kamaraj Ave 1st St, Adyar, Chennai – 600020, Tamil Nadu, India

Email: info@fillrbydrf.com

Phone: +91 99407 77904

We aim to respond to all privacy-related queries within 30 days.