Privacy Policy

How we handle your information.

Last updated: 1 June 2026

This Privacy Policy explains how Bono Orthopedics ("we", "us", "our"), operated by Dr. Nikhil Shanthappa at #38, Rajarajeshwari Nagar, Bengaluru, Karnataka 560098, India, collects, uses, discloses and protects personal information when you visit bonoortho.com or interact with our clinic. We comply with the Digital Personal Data Protection Act, 2023 ("DPDP Act") of India and other applicable privacy laws.

1. Information we collect

We collect personal information in three ways:

  • Information you give us — name, phone number, email, preferred date and time, concern category, and any message you submit through the booking form on our website. If you message us on WhatsApp, your phone number, display name, and message content.
  • Information collected automatically — IP address, browser type, device information, pages visited, referring URL, and aggregate usage data via Google Analytics 4 (with IP anonymisation enabled).
  • Information you provide as a patient — at the clinic we collect clinical history, examination findings, imaging, prescriptions, surgical and procedural notes ("Protected Health Information" or PHI). PHI is held under strict confidentiality and is never published or processed for marketing.

2. How we use your information

  • To confirm and manage your appointment
  • To send WhatsApp or email reminders about your booking
  • To answer questions you ask via the website, phone, or WhatsApp
  • To improve the website and our content (in aggregate, never identifying individuals)
  • To meet legal, accounting and tax obligations in India

We do not sell your personal data. We do not share your data with third parties for their direct marketing.

3. Cookies and analytics

The website uses essential cookies needed for it to function and, optionally, Google Analytics 4 to understand usage patterns. Analytics cookies do not identify you individually and IP anonymisation is enabled. You can block cookies in your browser settings; the site will still function.

4. Third-party processors we rely on

The website and clinic operations use the following service providers, each of which processes data on our behalf under their own privacy and security commitments:

  • Google Firebase & Google Cloud (Authentication, Firestore database, file storage, App Hosting) — operated by Google LLC under their data processing terms.
  • Google Calendar API — used only to create and manage appointment events on the doctor’s calendar.
  • Google Analytics 4 — anonymised usage analytics.
  • Meta WhatsApp Business Platform (Cloud API) — for clinic WhatsApp messaging, when you initiate a conversation with us.

We do not transfer personal data to any other third party without your consent, except where required by law.

5. How we protect your information

We use industry-standard technical and organisational safeguards including TLS encryption in transit, encryption at rest in Google Cloud, access controls, role-based permissions, and audit logging on our backend systems. Access to PHI is restricted to authorised clinic staff on a need-to-know basis.

6. Data retention

We retain booking and contact information for as long as needed to provide the service and to meet legal obligations. Clinical records are retained in accordance with applicable Indian medical record-keeping requirements (typically a minimum of three years from the last patient visit, longer for major surgical records).

7. Your rights

Under the DPDP Act and applicable privacy laws, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure of your data where applicable
  • Withdraw consent for processing
  • Lodge a complaint with the Data Protection Board of India

To exercise any of these rights, contact us at drnikhil@bonoortho.com or call +91 63614 14288.

8. Children’s privacy

The booking form is intended for adults. When booking on behalf of a child, the adult guardian provides the information and is the data principal under the DPDP Act. Clinical records of minors are handled in accordance with applicable law.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page shows the most recent change. Substantial changes will be highlighted on the website.

10. Contact

For any privacy-related questions or requests, please contact:

Bono Orthopedics
#38, Rajarajeshwari Nagar, Bengaluru, Karnataka 560098
Email: drnikhil@bonoortho.com
Phone: +91 63614 14288

Read our Terms of Use →