Privacy Policy

Who we are

Novelle Aesthetics Pvt. Ltd. operates this website and the clinic it describes. For the purposes of data protection law we are the data controller for the information described below.

You can reach our data protection contact at support@novelleaesthetics.in, or by post at our clinic address.

What we collect

We collect only what we need, and we collect it in three distinct contexts.

• Booking enquiries: your name, email address, phone number, country, city, the procedure you are interested in, your preferred consultation format and date, and anything you write in the message field.
• Reviews: your display name, email address, city and country, the procedure you had, your rating and the text of your review.
• General enquiries: your name, email address, optional phone number, subject and message.
• Technical data: your approximate country, derived from your IP address by our hosting provider for abuse prevention and rate limiting. We do not store full IP addresses.

What we do not collect

This website carries no third-party advertising trackers, no social media pixels, no session recording and no behavioural analytics. We do not build advertising profiles, and we have never sold data to anyone.

The site sets no cookies for marketing or analytics. The only cookie set is a session cookie in the administrative area, which is used solely to keep clinic staff signed in.

Why we use it, and on what basis

Booking and general enquiry data is used to respond to you and, where you become a patient, to arrange your care. The lawful basis is your consent and, once treatment begins, the performance of our contract with you.

Review data is used to publish your review and to contact you about it. The lawful basis is your consent, given by ticking the box on the form.

Technical data is used to prevent abuse of the forms on this site. The lawful basis is our legitimate interest in keeping the service usable.

Health information

Anything you write about your health in an enquiry is sensitive personal data and is treated accordingly — restricted access, and never used for any purpose other than your care.

Your clinical record, including consultation notes, photography and operative records, is held separately from this website in our clinical system and is retained as required by Indian medical record-keeping regulations.

Please do not send detailed medical history or clinical images through the contact form. It is not a secure clinical channel. We will arrange a secure route where one is needed.

Where your data is stored

Website form submissions are stored on Cloudflare infrastructure. Data may be processed in data centres outside India, protected by the contractual safeguards Cloudflare provides as a processor.

Clinical records are held within India in line with Indian medical record requirements.

How long we keep it

Booking and contact enquiries that do not become treatment are deleted after 24 months.

Published reviews are kept while they remain published. If you ask for a review to be removed, both the review and the email address attached to it are deleted.

Clinical records are retained for the period required by Indian medical regulations, which is longer than we would otherwise keep them.

Who we share it with

We share your information with clinical staff involved in your care, and with the hospital where your procedure takes place. Beyond that, we share it only where the law requires it.

We use service providers — Cloudflare for hosting, and an email delivery provider for transactional email — who process data on our instructions and cannot use it for their own purposes.

We do not share your information with advertisers, data brokers, or lead-generation services, and we do not sell it.

Your rights

You have the right to ask what we hold about you, to have inaccurate information corrected, to have information deleted where we no longer have a reason to keep it, to withdraw consent at any time, and to object to processing.

Withdrawing consent for a published review means it is unpublished — usually the same working day, and without you needing to give a reason.

To exercise any of these, email support@novelleaesthetics.in. We respond within 30 days. If you are not satisfied with our response, you may complain to the relevant data protection authority in your country.

Security

All traffic to this site is encrypted in transit. Administrative access is protected by hashed credentials and short-lived session tokens, and is restricted to named clinic staff.

No system is perfectly secure. If a breach occurs that is likely to affect your rights, we will notify you and the relevant authority as the law requires.

Changes to this policy

We will update this page when our practices change, and the revision date at the top will change with it. Material changes affecting how we use information you have already given us will be notified to you directly.