Effective date: August 22, 2026.
Audiosen values your privacy. This policy explains the personal data used by the public website enquiry and administration system. The website CRM coordinates requests and is not a clinical-record or hospital-record system.
When you send an enquiry, Audiosen collects the details you choose to provide: name, phone or WhatsApp number, city, age group, requested service, consent record, source page and limited campaign attribution. Email, appointment preference, device context and additional message text are optional. Private repair photos or audiograms are accepted only through the protected upload workflow.
Audiosen uses this information to answer and coordinate your request, send operational confirmations, maintain authorised follow-up records, prevent abuse, protect the service, meet applicable legal duties and understand whether an enquiry progressed. The team should not use this website CRM as a substitute for a clinical patient file.
New enquiry records use Azure Database for PostgreSQL. Sensitive free text is encrypted, private attachments use random paths in non-public Azure Blob Storage and begin in quarantine, and outbound messages are queued in a transactional outbox for Azure Communication Services Email. The previous Azure Table lead source remains read-only only during an audited migration and retention window.
Access to enquiries and private attachments is limited to allowlisted staff using authenticated, role-based administration. Administrative changes and sensitive reads are recorded in an audit trail. Application and security logs are structured to redact names, contact details, narratives, references, upload tokens and credentials.
Optional Google Analytics stays off until you accept it. When enabled, Audiosen sends only fixed event names and identifiers such as page type, CTA location, brand slug or product slug. Query strings, names, phone numbers, emails, cities, age, finder answers, symptoms, hearing-test responses, enquiry references, messages and uploads are excluded. Advertising signals remain disabled.
Audiosen does not sell personal data or use website health enquiries for targeted advertising. Necessary providers may process limited information for Azure hosting and storage, bot protection, authenticated administration, operational email or consented analytics. Information may also be disclosed when required to deliver an authorised service, investigate abuse, comply with applicable law or respond to a valid legal requirement.
Default retention is: suspected spam for 30 days; unconverted website enquiries for 24 months after the last meaningful activity; private attachments for 90 days after closure and no longer than 12 months without documented need; delivered email-outbox bodies for 30 days; and raw Google Business snapshots for no more than 30 days. Legal minimums, active services, transactions, disputes, security investigations and documented holds may require a different period.
For a patient under 18, a parent or lawful guardian must provide consent. A website checkbox is an initial declaration only; Audiosen must complete any legally required age and guardian verification before collecting expanded child information or delivering the applicable service. Do not upload a child's identity or clinical record through a general enquiry.
You may request access, correction, withdrawal of contact consent, deletion, or grievance review for website enquiry data, subject to identity verification and applicable retention duties. Use contactaudiosen@gmail.com from a verifiable contact channel. Withdrawing optional consent does not affect processing already lawfully completed, and Audiosen will stop consent-based contact that is no longer required.
Audiosen applies technical and organisational safeguards, but no internet transmission or storage system can be guaranteed completely secure. Suspected privacy or security incidents should be reported promptly to contactaudiosen@gmail.com.
This implementation is designed for review against India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, including their notified commencement timetable. It is not a substitute for final Indian legal counsel and operational compliance review before production launch.
- Required enquiry data: name, phone or WhatsApp, city, requested help and explicit contact/privacy consent.
- Optional data: email, age group, appointment preferences, device context, additional message text and limited campaign attribution.
- Private files: validated, quarantined, non-public and available only through short-lived authenticated access.
- Analytics: opt-in only, advertising disabled and no contact, health, finder, reference or query-string data.
- Children: parent or lawful-guardian consent and any required verification before expanded processing.
- Rights and grievance contact: contactaudiosen@gmail.com.
- Official framework: https://www.meity.gov.in/documents/act-and-policies/digital-personal-data-protection-rules-2025-gDOxUjMtQWa