Legal Document · Indian Law

Privacy Policy

Effective: June 2025 · Last Updated: June 2025 · Amatrons Technologies Pvt Ltd

Your privacy matters to us.

This Privacy Policy describes how Amatrons Technologies Pvt Ltd collects, uses, and protects your personal information. It is prepared in accordance with the Information Technology Act, 2000, the IT (Amendment) Act, 2008, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Consumer Protection Act, 2019.

01Introduction

This Privacy Policy ("Policy") explains how Amatrons Technologies Pvt Ltd ("Company", "We", "Us", or "Our") collects, uses, stores, shares, and protects personal information when you:

  • Visit our website at www.amatrons.com
  • Engage with us for our clinic patient acquisition and digital marketing services
  • Contact us via email, phone, WhatsApp, or any other communication channel
  • Use any system, dashboard, or platform set up by us on your behalf

By using our website or services, you consent to the collection and use of your information as described in this Policy. If you do not agree with this Policy, please do not use our website or services.

02Who We Are

Amatrons Technologies Pvt Ltd is a private limited company incorporated under the Companies Act, 2013, providing patient acquisition, digital marketing, and booking system services to private skin and hair clinics in the Delhi NCR region.

Company NameAmatrons Technologies Pvt Ltd
Service AreaDelhi NCR — Delhi, Noida, Gurgaon, Ghaziabad & Faridabad
Privacy Enquiriessupport@amatrons.com
Websitewww.amatrons.com

03Information We Collect

We collect the following categories of personal information:

3.1 Information from Clinic Owners & Business Contacts

  • Full name and professional designation
  • Clinic or business name and address
  • Email address and phone number (including WhatsApp number)
  • Business registration details where applicable
  • GST number and billing information
  • Login credentials for dashboards and platforms we set up
  • Communication records (emails, WhatsApp messages, call logs)

3.2 Patient Data (Processed on Behalf of Clinics)

  • Patient name and contact number as shared by the client clinic
  • Appointment and inquiry details entered into our booking systems
  • WhatsApp message exchanges via automated follow-up systems

Important: We process patient data only as a data processor on behalf of the client clinic. The clinic is the data controller responsible for obtaining valid patient consent before sharing patient data with us.

3.3 Website Visitor Information

  • IP address and approximate geographic location
  • Browser type, device type, and operating system
  • Pages visited, time spent, and navigation path on our website
  • Referring website or source
  • Form submissions (contact forms, enquiry forms)
  • Cookie data and similar tracking technologies

04How We Collect Information

We collect personal information through the following methods:

  • Directly from you — when you fill out a contact or enquiry form on our website, call us, message us on WhatsApp, or engage our services
  • During service delivery — information shared by you while we set up systems, dashboards, and campaigns for your clinic
  • Automatically via our website — through cookies, Google Analytics, and similar tracking tools when you browse our website
  • Through third-party platforms — such as Google Ads reports, WhatsApp Business API logs, and website hosting logs relevant to our service delivery
  • From client-shared databases — patient contact details shared by clinic clients for system setup and campaign targeting

05How We Use Your Information

We use the personal information we collect for the following purposes:

5.1 Service Delivery

  • To set up and manage your clinic's patient acquisition system, website, and booking flow
  • To configure and operate WhatsApp automation, AI assistant, and lead tracking tools
  • To manage and optimise your Google Ads campaigns
  • To provide monthly performance reports and system improvements

5.2 Communication

  • To respond to your enquiries and support requests
  • To send service updates, invoices, and project-related communications
  • To notify you of changes to our Terms, this Policy, or our services

5.3 Business Operations

  • To manage billing, invoicing, and payment records
  • To comply with legal and regulatory obligations under Indian law
  • To maintain records required under the Companies Act and GST regulations
  • To protect our legal rights and enforce our Terms and Conditions

5.4 Website Improvement

  • To analyse website traffic patterns and improve user experience
  • To measure the effectiveness of our online presence and content

06Legal Basis for Processing

Under applicable Indian law, we process personal information on the following legal bases:

Contractual Necessity

Processing required to fulfil our service agreement with you

Legal Obligation

Processing required to comply with applicable Indian laws and regulations

Legitimate Interests

Processing necessary for our legitimate business operations and service improvement

Consent

Where you have given explicit consent to specific processing activities

07Sharing of Information

We do not sell, rent, or trade your personal information to any third party. We may share your information only in the following limited circumstances:

  • Service Providers — We may share information with trusted technology vendors (e.g., website hosting providers, WhatsApp Business API providers, Google Ads) strictly to provide our services. These parties are contractually bound to protect your data
  • Legal Requirements — We may disclose information when required by law, court order, or a competent government authority under Indian law
  • Business Transfers — In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, with prior notice provided where feasible
  • Professional Advisors — We may share information with our lawyers, accountants, and auditors strictly as necessary and subject to professional confidentiality obligations
  • With Your Consent — We may share information for any other purpose with your explicit prior written consent

We will never share your personal information with other clinics, advertising networks (other than for your own campaigns), or any unrelated third parties without your explicit consent.

08Data Retention

We retain personal information for as long as necessary to fulfil the purposes outlined in this Policy, and in accordance with applicable Indian law:

Client Business Records7 years after end of engagement (as required under Indian tax and company law)
Communication Records3 years from the date of last communication
Patient Data (on behalf of clinics)As directed by the client clinic, subject to a maximum of 3 years unless legally required otherwise
Website Analytics Data26 months (Google Analytics default)
Marketing Enquiry Data12 months from last contact, unless you request earlier deletion

After the applicable retention period, we securely delete or anonymise personal information unless retention is required by law.

09Data Security

Amatrons Technologies Pvt Ltd implements reasonable technical and organisational security measures to protect personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

  • SSL/TLS encryption for all data transmitted via our website
  • Password-protected access to client dashboards with role-based permissions
  • Regular security reviews of systems and platforms we manage
  • Access controls limiting personal data access to authorised personnel only
  • Secure deletion of data upon end of retention period

We comply with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 in maintaining security standards.

However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you as required under applicable Indian law.

10Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect analytics data. The types of cookies we use include:

Essential CookiesRequired for the website to function. Cannot be disabled.
Analytics CookiesGoogle Analytics — helps us understand how visitors use our site (anonymised where possible)
Marketing CookiesGoogle Ads remarketing tags — used to show relevant ads to previous visitors
Preference CookiesRemember your settings and preferences for future visits

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website. By continuing to use our website, you consent to our use of cookies as described above.

11Third-Party Links

Our website may contain links to third-party websites, including Google, WhatsApp, and social media platforms. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of any third-party websites. We encourage you to read the privacy policy of every website you visit.

12Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a person under 18, please contact us immediately at support@amatrons.com and we will take prompt steps to delete that information.

13Your Rights

Under applicable Indian law, including the Information Technology Act, 2000 and associated rules, you have the following rights with respect to your personal information:

Right to Access

Request a copy of the personal information we hold about you

Right to Correction

Request correction of inaccurate or incomplete personal information

Right to Deletion

Request deletion of your personal information, subject to legal retention obligations

Right to Portability

Request your data in a structured, commonly used format

Right to Withdraw Consent

Withdraw consent for processing activities based on consent, at any time

Right to Object

Object to processing of your information for direct marketing purposes

To exercise any of these rights, please contact us at support@amatrons.com. We will respond within 30 days of receiving your request. We may ask you to verify your identity before processing your request.

14Patient Data Handled on Behalf of Clinics

When we operate systems on behalf of our client clinics (such as booking systems and WhatsApp automation), we process patient data as a data processor, acting on the instructions of the client clinic as the data controller.

In this capacity:

  • We process patient data only for the purposes instructed by the client clinic
  • We do not use patient data for our own marketing or commercial purposes
  • We maintain confidentiality of all patient data and restrict access to authorised personnel only
  • We delete or return patient data to the client clinic upon termination of our engagement
  • We assist client clinics in responding to patient data requests under applicable law

Patients of our client clinics should direct any privacy requests or complaints to the clinic directly. The clinic is responsible for managing the patient relationship and ensuring valid consent has been obtained.

15WhatsApp & Messaging Communications

Our services include WhatsApp automation for patient inquiry follow-up on behalf of client clinics. When we use WhatsApp Business API:

  • Messages are sent only to individuals who have expressed interest in or inquired about the clinic's services
  • Recipients have the ability to opt out by replying "STOP" or equivalent at any time
  • We comply with WhatsApp's Business Policy and applicable Indian telecom regulations
  • Message content is configured by us in collaboration with the client clinic and is clinic-specific
  • We do not use WhatsApp messaging for unsolicited bulk communications

For enquiries or complaints about WhatsApp messages sent on behalf of a clinic, please contact support@amatrons.com with the clinic's name and a screenshot of the message.

16Google Ads & Analytics

We use Google Ads and Google Analytics as part of our service delivery for client clinics and for our own website. These tools collect and process data in accordance with Google's Privacy Policy.

  • Google Analytics — We use this to understand website traffic. Data is collected in an anonymised or pseudonymised form where possible. You can opt out using the Google Analytics Opt-out Browser Add-on
  • Google Ads Remarketing — We may use remarketing tags to display ads to previous website visitors. These use cookies. You can opt out through Google Ad Settings
  • Client Campaign Data — Campaign performance data for client clinics is accessible only to that clinic and our authorised team members

17Cross-Border Data Transfers

Some of the third-party platforms we use (such as Google, Meta, and WhatsApp) may store and process data on servers located outside India. Where such transfers occur, we ensure they are made in compliance with applicable Indian data protection laws.

We take appropriate contractual and technical measures to ensure that personal information transferred outside India receives a level of protection comparable to that required under Indian law.

18Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Post the revised Policy on our website
  • Notify active clients by email where the changes materially affect how we handle their personal data

Your continued use of our website or services after any changes to this Policy constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.

19Grievance Officer

In accordance with the Information Technology Act, 2000 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have designated a Grievance Officer to address concerns related to privacy and data handling.

Designated Grievance Officer
Organisation Amatrons Technologies Pvt Ltd
Response Time Within 30 days of receiving a complaint

If you are dissatisfied with our response, you may approach the relevant adjudicating authority under the Information Technology Act, 2000, or the appropriate consumer forum under the Consumer Protection Act, 2019.

20Contact Us

For any questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us:

Amatrons Technologies Pvt Ltd
Business Enquiries business@amatrons.com
Support & Privacy support@amatrons.com
Website www.amatrons.com