1. Who we are
This Privacy Policy explains how Moon Aesthetic ("Moon Aesthetic", "we", "us" or "our") collects, uses, shares and protects personal data when you visit moonaesthetic.in, book an appointment, contact us, or receive treatment at our clinics. We act as the Data Fiduciary for your personal data under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and we also follow the Information Technology Act, 2000 and the rules made under it.
2. Personal data we collect
Information you give us
- Booking and enquiry details: name, phone number, email address, preferred treatment, preferred date and time, and any message you send through our website forms, phone, WhatsApp, email or social media.
- Health and treatment information: medical history, skin and hair concerns, allergies, medications, consultation notes, prescriptions, consent forms, and before-and-after photographs taken during your care.
- Payment information: invoices and transaction references. Card and UPI details are processed by banks or payment providers; we do not store full card numbers.
Information collected automatically
- Device and browser type, IP address, approximate location, pages visited, time spent, the website or advert that referred you, and actions such as clicking "Book Appointment" or "Call Now".
- This information is collected through cookies and similar technologies, described in section 4.
3. How we use your personal data
- To schedule, confirm, reschedule and remind you of appointments.
- To provide consultations, treatments and procedures, and to maintain clinical records as required by law and medical practice.
- To respond to your enquiries and provide aftercare support.
- To send you information about our treatments, offers and events, where you have agreed to receive it (see section 5).
- To measure and improve our website and advertising, and to show relevant adverts on other platforms (see section 4).
- To process payments, keep accounts, and comply with legal, tax and regulatory obligations.
- To protect the safety and security of our patients, staff and systems.
We use health information only to provide your care. We do not use your health information, medical records or treatment photographs for advertising. We do not publish before-and-after photographs that identify you without your separate written consent.
4. Cookies, Meta Pixel and Google Analytics
Our website uses cookies and similar technologies, including:
- Essential cookies, which are needed for the website and booking form to work.
- Google Analytics and Google Ads tags (Google LLC), which help us understand how visitors use our website and measure how our Google adverts perform, for example whether an advert led to an appointment request.
- Meta Pixel (Meta Platforms, Inc.), which helps us measure the performance of our adverts on Facebook and Instagram and show our adverts to people who have visited our website or who are similar to our visitors.
These tools may collect information such as your IP address, browser details, pages viewed and actions taken on our website, and may combine it with information those companies already hold about you under their own privacy policies. We do not send your health information or the contents of your booking message to Meta or Google for advertising.
You can control or delete cookies through your browser settings. You can also manage advertising preferences in your Facebook ad preferences and Google My Ad Center, and opt out of Google Analytics with the Google Analytics opt-out add-on. Blocking some cookies may affect how the website works.
5. WhatsApp, SMS, email and calls
When you share your phone number with us, for example through our booking form, WhatsApp, a call or an advert form, we may contact you by phone, SMS, email or WhatsApp to:
- confirm and remind you about appointments and share aftercare instructions (service messages); and
- where you have agreed, send information about treatments, offers, packages and events (promotional messages).
We send WhatsApp messages through the WhatsApp Business Platform (Meta) and may use a business messaging service provider to manage these conversations. Your phone number and message history are processed by these providers to deliver messages.
Opting out: you can stop promotional messages at any time by replying STOP on WhatsApp, by using the unsubscribe option in our emails, or by contacting us using the details in section 11. We may still send you service messages about appointments you have booked.
We follow the TRAI rules on unsolicited commercial communication, and we do not make promotional calls or send promotional messages to numbers registered on the National Do Not Call registry unless you have given us your consent.
6. Legal basis for processing
We process your personal data on the basis of the consent you give us, for example when you submit a booking form, opt in to messages, or accept cookies, and for legitimate uses permitted by the DPDP Act, including providing medical treatment, complying with law, and responding to medical emergencies. You may withdraw your consent at any time (see section 9). Withdrawal does not affect processing that took place before it, or records we must keep by law.
7. Who we share your data with
We do not sell your personal data. We share it only as needed with:
- our doctors, clinical staff and partner hospitals involved in your care, including Sakariya Hospital, HBR Layout, Bengaluru, for surgical and OT procedures;
- diagnostic laboratories and pharmacies, where required for your treatment;
- service providers who help us run our business, such as website hosting, form submission and email services, appointment and customer relationship (CRM) software, WhatsApp Business messaging providers, payment providers, and IT support;
- advertising and analytics partners (Meta and Google), as described in section 4; and
- government, regulatory or law-enforcement authorities, where we are required to do so by law.
Some of these providers may store or process data on servers outside India. Where this happens, we take reasonable steps to make sure your data stays protected and is transferred only as permitted by Indian law.
8. How long we keep your data
We keep medical and treatment records for as long as required by applicable medical regulations and professional guidelines, generally at least three years from your last visit, or longer where the law requires. We keep enquiry and marketing data until you ask us to delete it or withdraw consent, or until it is no longer needed for the purpose it was collected for. We then delete or anonymise it securely.
9. Your rights
Subject to applicable law, you have the right to:
- ask for a summary of the personal data we hold about you and how we use it;
- ask us to correct, complete or update inaccurate data;
- ask us to erase data that we no longer need to keep;
- withdraw your consent, including for marketing messages;
- nominate a person to exercise your rights on your behalf in the event of your death or incapacity; and
- raise a grievance with us, and if you are not satisfied with our response, with the Data Protection Board of India.
To exercise these rights, contact us using the details in section 11. We may need to verify your identity before acting on your request.
10. Security and children
We use reasonable technical and organisational safeguards to protect your personal data, including access controls, secure systems and staff confidentiality obligations. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a personal data breach where the law requires.
Treatment for patients under 18 years of age is provided only with the consent of a parent or lawful guardian, who provides and manages the patient's personal data on their behalf. We do not knowingly target advertising at children.
11. Contact and grievance officer
If you have any questions, requests or complaints about this Privacy Policy or your personal data, please contact our Grievance Officer:
Alisha A, Grievance Officer
Moon Aesthetic, 2nd Floor, Manjaly Edifice, 703, 3rd Cross Road, HRBR Layout 1st Block, Kalyan Nagar, Bengaluru – 560043, Karnataka
Phone: +91 9113869966
Email: info@moonaesthetic.in
We aim to respond to your request within 30 days.
12. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page with its effective date. If we make significant changes, we will let you know through our website or other appropriate means.