How Halcyon Pain Management Centre handles the personal and health information you give us — and what this website does and does not collect.
Last updated 22 August 2026
This policy is a working draft written from what the clinic’s own website says about its practice. The highlighted phrases are decisions only Halcyon can make, and the whole document should be checked by a lawyer against the Digital Personal Data Protection Act, 2023 and the medical records rules that apply in Telangana before it is published. Delete this box once it has been.
Halcyon Pain Management Centre is a pain management clinic at 3rd Floor, KKR Commercial Complex, Kukatpally Y Junction, Moosapet Road, Hyderabad, Telangana 500072. In this policy, “we”, “us” and “Halcyon” mean that clinic, and “you” means anyone who contacts us, attends an appointment, or uses this website.
We decide how and why your personal data is handled, which under the Digital Personal Data Protection Act, 2023 makes us the data fiduciary for it.
It covers information you give us when you enquire, book, or attend the clinic, and anything this website collects. It does not cover other websites we link to — Google Maps for directions, for instance — which have their own policies.
Only what you choose to give the assistant when you ask the team to call you back, and — if you agree to it — anonymous statistics about how the site is used.
The assistant. It answers from a fixed list of answers held in the website itself; your questions are not sent to anyone while you chat. If you ask for a call back and press Send to the team, the assistant sends the clinic: the name and mobile number you give, where the pain is and for how long, which scans you have had, the time you would like to be called, the questions you asked in the chat, the page you were on, and how you reached the site (for example, the name of the search or social media advert you clicked). Nothing is sent until you press that button, and you can use WhatsApp or call instead.
Where it goes. The request is saved in the clinic’s own Google Sheet and emailed to the clinic’s own mailbox, using Google Workspace services that act on the clinic’s behalf. It is used only to call you back about your enquiry and to understand which pages and adverts bring people to the clinic. It is not sold or used to advertise to you. Confirm how long call-back requests are kept before they are deleted.
Stored in your own browser. So the conversation is not lost when you move between pages, the assistant keeps it in your browser until you close the tab. It also remembers, for up to 90 days, which page or advert first brought you to the site, so a later call-back request can say so. This stays on your device; clearing your browser’s site data removes it.
Cookies and measurement. When you first arrive, we ask whether we may use cookies to see how the site is used. Nothing is loaded until you press Accept: no cookies are set, and Google Tag Manager — which we use to run our website statistics — is not even downloaded. If you accept, it and the measurement tools it manages may set cookies to count visits, see which pages and adverts bring people to the site, and spot pages that are not working. If you decline, or ignore the notice, the site works exactly the same. You can change your mind at any time: change your cookie choice. Confirm which measurement tools are switched on inside Tag Manager, and list them here.
Our web host may keep standard server logs of requests, including IP addresses, for security and troubleshooting. Confirm what your host logs and for how long.
If advertising pixels, an online booking system or a live chat service are added later — including through Tag Manager — this section must be updated before they go live.
Health information of this kind is sensitive. We ask for it only where it is needed to work out where your pain is coming from and to treat it safely.
We do not sell your information, and we do not use it for advertising. Confirm whether appointment reminders or clinic updates are sent, and how people opt out.
Where we rely on your consent, we ask for it before we take the information, and you may withdraw it at any time by contacting us. Withdrawing consent does not undo anything already done with the information, and there are records we must keep even after you withdraw — a clinical record of a procedure that has been performed, for example.
Some information we handle for reasons the law allows without separate consent, such as providing medical treatment in an emergency or complying with a legal requirement.
We keep clinical records for as long as we are required to, and for as long as they may be needed for your continuing care. Enquiries that do not lead to an appointment are kept for a shorter period and then deleted.
Set the actual retention periods here — for outpatient records, for images, for billing records, and for enquiries — against the medical records rules that apply to you.
Access to records is limited to the people who need it for your care or for running the clinic. Paper records are held securely at the clinic and electronic records are held on describe the systems and their protections — access control, encryption, backups.
If a breach happens that is likely to affect you, we will tell you and the Data Protection Board of India as the Act requires.
Under the Digital Personal Data Protection Act, 2023 you may:
Write to info@halcyonpainfree.com or call +91 77880 91092, and we will respond within state your response time. We may need to confirm who you are before we act on a request.
Where a patient is under 18, we take the information from a parent or guardian and act on their consent. This website is not directed at children and does not knowingly collect anything from them.
If our practices change — particularly if this website starts collecting anything — we will update this page and change the date at the top. Material changes will be brought to your attention rather than left to be discovered.
For anything in this policy, or to exercise a right under it, contact name and email of the person handling data protection grievances — or use the clinic’s general contacts below. The Act requires a grievance to be answered before it can be escalated to the Data Protection Board of India.
If you want to know what we hold, have something corrected, or would rather we deleted an enquiry, the same numbers that book appointments will reach the team.