Legal — Privacy

Privacy Policy

This policy explains what personal data ARS Digital collects, why we collect it, who we share it with, and the choices you have — including for conversations with us on WhatsApp.

01Who we are

ARS Digital (“ARS Digital”, “we”, “us”, “our”) is a digital marketing agency for doctors and private clinics, based in Delhi NCR (Dadri, Uttar Pradesh), India. We operate the website arsdigital.co.in and communicate with prospective and existing clients by email, phone and WhatsApp.

For the personal data described in this policy, ARS Digital is the data fiduciary (India, Digital Personal Data Protection Act, 2023) and the data controller (UK/EU GDPR).

This policy covers our website, our WhatsApp Business account and our other sales and support channels. It does not cover third-party websites we link to.

02Data we collect

Data you give us

• Contact details — name, email address, phone / WhatsApp number, clinic or practice name, specialty, city and country.
• Enquiry and business details — information you share in forms, audit requests, calls, emails or messages, such as your website, marketing goals and budget.
• Communications — the content of messages you send us and our replies.
• Billing details — for clients, invoicing and payment information (card payments are handled by the payment provider; we do not store full card numbers).

Data collected automatically

• Device and usage data — IP address, browser type, device type, pages visited, referring URL and time spent, collected through cookies and similar technologies (see Section 12).

Data from other sources

• Publicly available business information — such as a clinic’s name, address, phone number and website listed in public directories, Google Business Profiles or medical registers, which we may use to contact practices about our services.
• Advertising platforms — lead-form submissions from platforms such as Meta or Google when you respond to our ads.

We do not ask for, and ask you not to send us, patient health information through our website or WhatsApp.

03WhatsApp messaging

We use the WhatsApp Business Platform, provided by Meta Platforms, Inc. and WhatsApp LLC (and, for users in the European Region, WhatsApp Ireland Limited), to send and receive messages.

What we process

• Your WhatsApp phone number and WhatsApp profile name
• Messages, documents, images and voice notes you send us, and our replies
• Message metadata such as timestamps and delivery / read status
• Your opt-in and opt-out status

How we use it

• To answer your enquiries and provide customer support
• To schedule audit calls, consultations and meetings, and send reminders
• To send service updates, reports and account notifications to clients
• To send marketing or promotional messages — only where you have opted in to receive them

Consent and opting out

We message you on WhatsApp only after you have given us your number and agreed to be contacted there, or after you have messaged us first. You can stop receiving messages at any time by replying STOP, by blocking our number in WhatsApp, or by emailing support@arsdigital.co.in. We will honour your request promptly and record the opt-out.

Meta’s role

Messages are transmitted through Meta’s infrastructure. Meta processes this data on our behalf to deliver the service and also under its own terms. Please read the WhatsApp Privacy Policy and Meta Privacy Policy for how they handle data.

We do not sell WhatsApp data, and we do not use the content of your messages to build advertising profiles.

04How we use data

• Responding to enquiries and providing the services you request
• Running free audit calls and preparing proposals
• Managing client accounts, delivering campaigns and sending reports
• Invoicing, payments and record-keeping
• Sending relevant business communications about our services, with an easy way to opt out
• Measuring and improving our website, content and advertising
• Protecting our systems, preventing fraud and meeting legal obligations

05Legal basis

We process personal data on the following grounds, as applicable:

• Consent — for example, WhatsApp marketing messages and non-essential cookies. You can withdraw consent at any time.
• Contract — to provide services to clients and take steps at your request before entering a contract.
• Legitimate uses / legitimate interests — to respond to enquiries, contact businesses about relevant services, secure our systems and improve our services, balanced against your rights.
• Legal obligation — to keep tax and accounting records and respond to lawful requests.

06Sharing & processors

We do not sell or rent personal data. We share it only with service providers that help us run our business, under contracts requiring them to protect it:

We may also disclose data where required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of the business (with notice to you).

07International transfers

Some of our service providers store or process data outside India, including in the United States and the European Union. Where we transfer personal data internationally, we rely on providers that apply appropriate safeguards (such as standard contractual clauses) and we comply with any transfer restrictions notified under Indian law.

08Retention

• Enquiries and leads that do not become clients — up to 24 months from our last contact, then deleted or anonymised.
• WhatsApp conversations — up to 24 months from the last message, unless part of an active client relationship.
• Client records — for the duration of the engagement and up to 8 years afterwards for tax, accounting and legal purposes.
• Opt-out records — kept as long as needed to make sure we do not contact you again.

We delete data sooner if you ask us to and no legal obligation requires us to keep it.

09Security

We use reasonable technical and organisational safeguards, including encrypted connections (HTTPS), access controls, two-factor authentication on business accounts and limiting access to people who need it. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authority of a personal data breach where the law requires.

10Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and get a summary of how it is processed
• Correct, complete or update inaccurate data
• Erase your data
• Withdraw consent at any time (this does not affect processing already carried out)
• Object to or restrict certain processing, including direct marketing
• Receive your data in a portable format (UK/EU)
• Nominate another person to exercise your rights in case of death or incapacity (India)
• Raise a grievance with us and, if unresolved, complain to the Data Protection Board of India, the UK Information Commissioner’s Office or your local EU supervisory authority
• Know what categories of personal information we collect and opt out of any “sale” or “sharing” (California residents — we do not sell personal information)

To exercise any right, email support@arsdigital.co.in. We may need to verify your identity. We respond within 30 days.

11Data deletion

12Cookies & analytics

Our website uses cookies and similar technologies:

• Essential — needed for the site to work and stay secure.
• Analytics — such as Google Analytics, to understand how visitors use the site.
• Advertising — such as the Meta Pixel and Google Ads tags, to measure ad performance and show relevant ads.

Where required, we ask for your consent before setting non-essential cookies. You can also block or delete cookies in your browser settings, opt out of Google Analytics using the Google Analytics opt-out add-on, and manage ad preferences in your Google and Meta account settings.

13Client & patient data

When we deliver services to a clinic, the clinic remains responsible for its own patients’ data. We act only on the clinic’s documented instructions, process only what is needed for the engagement, and do not use patient-identifiable information in advertising. Where required, we sign a data processing agreement (or, for US clients, a Business Associate Agreement) before handling such data.

14Children

Our services are for businesses and healthcare professionals. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

15Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. For significant changes, we will give notice on this page and, where appropriate, by email or WhatsApp.

16Contact & grievances

We acknowledge grievances within 72 hours and aim to resolve them within 30 days.