Privacy Policy

Effective 26 August 2026 · Last updated 26 August 2026

1. Who we are and what this covers

Mint Health is operated by SKAP Healthcare Private Limited, CIN U86100KA2026PTC221588, registered at No. 6 Grant Road, 302 Embassy Chambers, Vittal Mallya Road, Mahatma Gandhi Road, Bengaluru North, Bengaluru, Karnataka 560001, India (“we”, “us”, “our”).

This policy explains how we handle your personal data when you communicate with us on WhatsApp — messages you send to our WhatsApp Business number, messages we send you, and any chat you start from a WhatsApp link or button on minthealth.co.in. It also covers what happens when you simply visit that website.

The same policy applies at both our clinics — Seshadripuram in Bangalore and Old Survey Road in Dehradun — and to the one WhatsApp number they share.

2. Using our website

You can read every page on minthealth.co.in without telling us anything about yourself. We have no login, no contact form and no newsletter.

• No cookies, no analytics, no ad trackers. We do not set cookies, we run no analytics tool, and there are no advertising or social media pixels anywhere on the site.
• One thing is stored in your browser: the language you pick with the EN / हि / ಕ switch, saved as mint-lang in your browser’s local storage so the site remembers it next time. It stays on your device and is never sent to us. Clearing your browser data removes it.
• Fonts come from Google. Our pages load typefaces from Google Fonts, so your browser makes a request to Google’s servers and Google receives your IP address as part of it. Google’s own privacy policy governs that.
• Hosting. The site runs on Cloudflare, which serves the pages and keeps standard request records — IP address, time, page requested, browser type — for security, abuse prevention and diagnostics. We use these to keep the site up, not to profile you.

Tapping a WhatsApp button on the site opens WhatsApp on your device. Nothing is sent to us until you choose to send the message.

3. What data we process

When you message us on WhatsApp:

• Your contact details — the WhatsApp phone number you message us from, the display name on your WhatsApp profile, and any name, age, email address or address you give us in the chat.
• What you send us — the text, photos, documents, PDFs and voice notes in your messages. This may include health information, such as symptoms, prescriptions, lab reports or images of a medical condition, if you choose to send it.
• What we send you — appointment confirmations, reminders, reports, invoices and replies from our staff, kept as a record of the conversation.
• Message metadata — timestamps, message IDs, delivery and read status, and which message template was used.
• Your consent record — when and how you opted in (a website button, a form at reception, a request in chat), and any opt-out.
• A link to your clinic record — if you are a registered patient, we connect your WhatsApp number to your patient ID so staff can see your chat alongside your appointments.

We do not collect your WhatsApp profile photo, your contact list, your location, or any of your other WhatsApp chats. We do not use your data for advertising and we do not build advertising profiles.

4. Where the data comes from

From you directly, when you message us or fill in a form that starts a WhatsApp chat. Your messages reach us through the WhatsApp Business Platform (Cloud API) operated by Meta, which carries messages between you and us.

5. Why we use it

We process your data on the basis of the consent you give when you opt in, and to meet our legal obligations as a healthcare provider. We use it to:

• book, confirm, reschedule and remind you about appointments;
• send you the reports, prescriptions, invoices and care instructions you asked for;
• answer your questions and provide support before and after a visit;
• send essential service notices, such as a change in clinic timings or a doctor’s unavailability;
• maintain records we are required by law to keep, and resolve disputes or complaints.

We only send you the kinds of messages you opted in to. We do not send promotional messages unless you separately agreed to receive them.

6. Your consent, and how to stop messages

We message you on WhatsApp only after you opt in — by tapping a WhatsApp button on our website, ticking the consent box on a form at the clinic, or asking us in the chat itself.

To stop receiving messages, reply STOP to any message from us. We will stop within 24 hours and keep only a minimal record that you opted out, so we don’t message you again. You can opt back in at any time by messaging us.

Opting out of WhatsApp does not affect your treatment. We will contact you by phone or email instead where needed.

7. Who we share it with

• Meta Platforms, as the operator of the WhatsApp Business Platform. Your messages pass through and are stored on Meta’s servers so they can be delivered, and Meta’s own terms and privacy policy apply to that processing.
• Our doctors and clinic staff involved in your care or in handling your request.
• Service providers under contract — our practice management software, and cloud hosting providers including Cloudflare, who process data only on our instructions and are bound to keep it confidential.
• Authorities or regulators, where we are required by law to disclose information.

We do not sell your personal data, and we do not share it with advertisers, data brokers or any third party for their own marketing.

8. How long we keep it

• Chat conversations: 24 months from your last message, or until you ask us to delete them.
• Clinical information you send that becomes part of your medical record: 3 years from the date of the last entry, in line with the medical record-keeping rules that apply to us.
• Consent and opt-out records: for as long as we may message you, plus 1 year, so we can show that we had your permission.
• On Meta’s side: message content held by the WhatsApp Cloud API is deleted on a rolling basis, within 30 days of delivery, under Meta’s own retention rules.

9. How to have your data deleted

You can ask us to erase the personal data we hold from your WhatsApp conversations at any time. Either:

• send an email to privacy@minthealth.co.in with the subject “Delete my data”, or
• reply with the word DELETE to any message from us on WhatsApp.

Tell us the phone number you used so we can find your records. We may ask one question to confirm it’s you. We will complete the deletion within 30 days and confirm when it’s done, at no charge.

Some information may have to stay: medical records we are legally required to retain, and invoices or payment records needed for tax and accounting. If that applies, we will tell you exactly what we kept and why, and we will delete everything else.

10. Your other rights

Under India’s Digital Personal Data Protection Act, 2023, you can ask us to:

• give you a summary of the personal data we hold about you and who we’ve shared it with;
• correct or update anything that is wrong or incomplete;
• withdraw your consent, which we will honour going forward;
• nominate someone to exercise these rights for you if you die or become incapacitated;
• raise a grievance with us — write to the officer named in section 14, who will respond within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

11. How we protect it

Messages travel over encrypted connections. Chat records are stored on access-controlled systems, and only staff who need the information for your care or your request can see it. Access is logged, and everyone on our team is bound by a confidentiality obligation. If a breach affects your data, we will notify you and the Data Protection Board as the law requires.

One thing worth knowing: a chat with a business is not the same as a private WhatsApp chat. Because we need a record of what you asked and what we told you, your messages to us are stored on our systems and on Meta’s. Treat WhatsApp the way you would treat email, and send only what you are comfortable having on record.

12. Children

If the patient is under 18, a parent or legal guardian must be the one messaging us, and they must give consent on the child’s behalf. We do not knowingly process a child’s data without verifiable consent from a parent or guardian. If you believe we hold a child’s data without it, contact us and we will delete it.

13. Changes to this policy

If we change how we use your data, we will update this page and change the “last updated” date above. If the change is significant, we will tell you on WhatsApp before it takes effect.

14. Contact us

Mint Health is not affiliated with, endorsed by or sponsored by WhatsApp or Meta Platforms, Inc. WhatsApp is a trademark of Meta Platforms, Inc.