Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you use our website or book an appointment. This may include:

Personal identification information — your full name, mobile number, and email address (where provided) submitted through our appointment booking or contact forms.
Health-related information — your reason for visit (e.g., uncontrolled diabetes, high blood sugar) selected from the appointment form.
Usage data — pages visited, time spent on site, browser type, device type, and IP address, collected automatically via analytics tools.
Communication data — any messages or enquiries you send us via phone, WhatsApp, or other channels.

2. How We Use Your Information

We use the information we collect for the following purposes:

To contact you and confirm your consultation appointment at our clinic.
To match you with an appropriate specialist based on your stated reason for visit.
To send appointment reminders or follow-up messages via SMS or WhatsApp.
To improve our website content, user experience, and services based on analytics.
To comply with legal obligations and maintain internal records.

We will never use your personal information for unsolicited marketing or sell it to third parties for advertising purposes.

3. Sharing of Information

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following limited circumstances:

Service providers — we use a CRM platform (Minno) to manage appointment data securely on our behalf. They are bound by confidentiality obligations.
Analytics partners — aggregated, anonymised usage data may be shared with Google Analytics, Google Tag Manager, or Meta (Facebook Pixel) for website performance insights.
Legal requirements — we may disclose information if required to do so by law or in response to valid legal process.
With your consent — in any other case, only with your explicit prior permission.

4. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience and gather analytics. These include:

Google Analytics

Tracks page visits and user behaviour anonymously.

Google Tag Manager

Manages marketing and analytics scripts on the site.

Meta Pixel

Tracks conversions from Facebook and Instagram ads.

You can control or disable cookies through your browser settings. Note that disabling cookies may affect certain features of the website.

5. Data Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These include:

Secure HTTPS data transmission between your browser and our servers.
Restricting access to personal data to authorised clinic staff only.
Use of trusted, reputable third-party platforms with their own security standards.

While we strive to protect your information, no method of transmission over the internet is completely secure. We encourage you to contact us immediately if you suspect any unauthorised use of your data.

6. Your Rights

You have the following rights with respect to your personal data held by Boston Diabetes:

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Ask us to correct inaccurate or incomplete information.

Right to Erasure

Request deletion of your personal data, subject to legal obligations.

Right to Object

Object to the processing of your data for certain purposes.

To exercise any of these rights, please contact us at the details provided in the Contact section below.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Appointment and contact data is retained for the duration of your patient relationship with Boston Diabetes and up to 7 years thereafter as required for medical and legal records.
Website analytics data is retained in anonymised form as per the default retention settings of the respective analytics platform.
You may request deletion of your data at any time by contacting us directly.

Contents