Boston Limb · Privacy Policy

Privacy Policy

Effective 10 October 2026 · KHC Pvt. Ltd.

How KHC Pvt. Ltd., which operates Boston Limb and Boston Diabetes, collects and uses the personal data you share through bostonlimb.com, and the rights you have under the Digital Personal Data Protection Act, 2023.

1. Who we are

Boston Limb is the diabetic foot and nerve care service of Boston Diabetes, operated by KHC Pvt. Ltd. ("KHC", "we", "us"), a company registered in India with its clinic at 1st Floor, above Ratnadeep Supermarket, Lumbini Avenue, Gachibowli, Hyderabad, Telangana 500032. For the personal data described in this policy, KHC is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act").

This policy covers bostonlimb.com, the appointment request form on it, and the calls and WhatsApp messages that follow a request. Care you receive at the clinic is covered by the clinic's medical records and patient privacy practices, which are explained at the centre.

2. The personal data we collect

• Appointment request form: your name, mobile number, the concern you select, the fact and time of your consent, the time of the request, the page you sent it from and, where present, the advertising or campaign identifiers in the link you arrived by (for example gclid, fbclid or UTM parameters) and the referring website.
• Calls and WhatsApp: your number and whatever you choose to tell us so that we can arrange and prepare for your visit.
• Website usage: technical data such as IP address, device and browser type and the pages viewed, collected through cookies and similar tools only where they are enabled (see section 7).

We ask you not to type medical details into the form. Health information you share by call, WhatsApp or at the clinic is used only to arrange and provide your care and is handled under the clinic's medical records practices.

3. Why we use it and on what basis

• To call or message you about your enquiry and to arrange, confirm or reschedule an appointment.
• To keep a record of your request and our response.
• To understand which pages and advertisements bring people to us, using aggregated or pseudonymous data only.
• To keep the website secure and to comply with law.

We process form and enquiry data on the basis of the consent you give when you tick the consent box, as section 6 of the DPDP Act requires. You may withdraw that consent at any time (section 5 below); withdrawal does not affect processing that took place before it.

4. Who we share it with

• Service providers who process data for us: the appointment and enquiry management system used by the clinic, our website hosting provider, and telephony and messaging providers (WhatsApp is provided by Meta Platforms, Inc.; a message you send us on WhatsApp is also subject to WhatsApp's own terms and privacy policy). These providers act on our instructions under contract.
• Analytics and advertising platforms (Google and Meta) receive website usage data only where those tools are enabled, and never your name, mobile number or the content of your enquiry. See section 7.
• Authorities where the law requires it.

We do not sell personal data.

5. Your rights

Under the DPDP Act you may: ask for a summary of the personal data we hold about you and how it has been used; ask us to correct, complete or erase it; withdraw consent; nominate a person to exercise these rights on your behalf; and raise a grievance with us. To exercise any of these, contact the Grievance Officer named in section 9 by email, WhatsApp or phone. We will verify that the request comes from you and respond within the time the DPDP Act and its rules allow. If you are not satisfied with our response, you may approach the Data Protection Board of India.

6. How long we keep it

Enquiry and appointment request data is kept for 24 months from our last contact with you, then deleted or anonymised, unless you become a patient of the clinic (in which case clinical records are kept as medical records law requires) or a longer period is required by law or needed to resolve a dispute.

7. Cookies, analytics and advertising measurement

The website is built to work without cookies. Where enabled, we use Google Tag Manager to run Google Analytics, Google Ads conversion measurement and the Meta Pixel. These tools set cookies and record pages viewed, the device used and whether an appointment request was completed; they never receive your name, mobile number or the concern you selected. Where a consent banner is shown, these tools run only after you allow them; you can change your choice by clearing your browser's site data for bostonlimb.com. You can also block or delete cookies through your browser settings.

8. Security

The website is served over HTTPS. Enquiry data is stored in access-controlled systems available only to staff who need it to respond to you. No transmission over the internet is completely secure, so please do not send us more than you need to.

9. Grievance Officer

Name: [RK: Grievance Officer name]
KHC Pvt. Ltd., 1st Floor, above Ratnadeep Supermarket, Lumbini Avenue, Gachibowli, Hyderabad, Telangana 500032
Email: [RK: grievance email]
Phone and WhatsApp: +91 80086 72097

10. Children

The website and form are intended for adults. A parent or lawful guardian may make an appointment request on behalf of a person under 18, and we will treat the request as coming from the guardian.

11. Changes and governing law

We may update this policy; the effective date at the top will change when we do. This policy is governed by the laws of India, and the courts at Hyderabad, Telangana have exclusive jurisdiction over any dispute arising from it.