Privacy Policy

Who we are: Erecto Men's Health Clinic (www.erecto.in) is operated by Abhishek Kumar (sole proprietorship, trading as Erecto). Address: F/A-10/1, Govardhan Apartment, Zarda Bagan, Jyangra, Kolkata, West Bengal 700059, India.

This policy explains what information Erecto Men's Health Clinic collects when you use this website or book a consultation, why we collect it, who it is shared with, how long we keep it, and what you can ask us to do with it. It applies to this website and to our mobile app.

Health information is treated as confidential

Because Erecto Men's Health Clinic provides medical consultations, the details you share about your health are sensitive. What you discuss with the doctor is used only for your consultation, prescription and follow-up. We do not sell your health information, we do not use it for advertising, and orders are shipped in plain packaging that does not reveal the nature of the treatment.

The fact that you booked a consultation, and the speciality you booked it under, is itself health information about you. We treat it that way: it is visible to you, to the doctor you booked with, and to the small number of staff who need it to run the service — and staff access to it is recorded.

What we collect

• When you create an account: your name, e-mail address and mobile number, and a password we never store in readable form.
• When you book: the doctor, the date and time, the consultation mode, the speciality you booked under, and the contact details above. If you book through our mobile app you may also type a short note describing your concern.
• When you pay: the amount, the payment method you chose (UPI), the payment status, and the transaction reference you give us when you tell us you have paid. Payments are verified by our own staff during working hours; card payments and online payment gateways are not available at present, so no third-party payment processor receives your details. We see only what your bank or UPI app shows on our side of the transfer.
• When you contact us or open a support ticket: what you write and any file you attach, plus your name and e-mail address.
• When you use a free health tool: your answers. These are stored without your name or contact details attached.
• When you track a shipment: the mobile number you booked with, which is what we give the courier as a reference.
• Automatically, when you browse: your IP address, browser and device type, the pages you view and how you move through them (see Analytics and session recording below). Our server keeps access logs.

We do not ask for, and do not want, more than this. We do not buy personal information from anyone.

Why we use it, and on what basis

• To provide the consultation you asked for — the booking, the doctor's records, the prescription, the medicine shipment and the receipt. This is the contract between us; without this information we cannot deliver the service.
• To take payment and issue a tax invoice — including the records tax law requires us to keep.
• To answer you when you write to us, and to send you service messages about your own appointment: confirmation, receipt, a reminder of a change you made, a security alert about your account.
• To keep the service safe and working — spam and abuse prevention, error investigation, and a record of who accessed patient information, which exists to protect you.
• To improve the website — see the analytics section below.
• With your consent, and only then — marketing e-mail. See the next section.

Marketing e-mail is opt-in, and you control it

We do not send marketing e-mail unless you have switched it on. Booking a consultation, writing to us or creating an account does not subscribe you to anything. The service messages listed above — your confirmation, your receipt, a password or security alert — are part of the service and are sent whether or not marketing is on.

If you are signed in you can turn marketing e-mail on or off at any time at your notification settings, and every marketing e-mail carries an unsubscribe link. You can also ask us by e-mail at info@erecto.in. We record when consent was given and when it was withdrawn.

Analytics and session recording

We use Google Analytics 4 and Microsoft Clarity to understand how the website is used so we can improve it. Microsoft Clarity also records how pages are used — mouse movement, scrolling and clicks — which we use to find layout and usability problems.

Two things we do to limit what those tools ever receive: advertising signals are switched off permanently, so nothing collected here is used to build an advertising profile or shared with advertisers; and health-related words are removed from page addresses and titles before they are sent, so the analytics account does not record which condition a page was about.

These tools are loaded for every visitor; we do not show a cookie banner. If you would rather not be measured, you can install the Google Analytics opt-out browser add-on, or use your browser's tracking-protection or do-not-track settings.

Cookies

A cookie is a small file stored by your browser. We use them to keep you signed in, to protect forms against cross-site request forgery, to remember display preferences, and for the analytics described above. You can accept or decline cookies in your browser settings; declining the ones we use for sign-in and forms will stop you from booking or signing in.

Who else sees your information

We do not sell, rent or trade your personal information. We share it only with the companies that make the service work, and only with what each of them needs:

• Payments — none. We take payment by UPI, and our own staff verify it; no payment processor receives your data. If we add an online payment gateway in future, it will be listed here first.
• Delhivery — medicine shipment and tracking. Receives the delivery details and the mobile number used as the shipment reference.
• Google — analytics, sign-in if you use it, reCAPTCHA and maps.
• Meta (WhatsApp, Facebook) — when you book, we verify your mobile number by sending a one-time code to it on WhatsApp; Meta receives your number and the code, never what you are booking for. Facebook sign-in, if you use it, shares your name and e-mail with us.
• Microsoft — Clarity, as described above.
• Our e-mail provider — sends the messages we send you.
• Our hosting provider — runs the server the website and database sit on.
• Your doctor — the clinician you booked with, who sees what a doctor needs to treat you.

We also disclose information if the law requires it, or to establish or defend a legal claim.

Where your information is kept

Your information is stored on a server in India and is sent between your browser and us over an encrypted connection. Some of the companies listed above are based outside India and may process information outside India as part of providing their service.

How long we keep it

• Your account and your consultation records: for as long as you have an account with us, and after that for as long as medical-record and tax rules require us to keep them. When you ask us to delete your account we anonymise it: your name, e-mail, mobile and anything you wrote are removed, and only the minimum record of the consultation and the payment is kept, with nothing left that identifies you.
• Payments and invoices: for the period tax law requires.
• Support tickets and anything you attach to them: while your query is open and for a period afterwards so we can follow up.
• Our internal delivery and security records (which e-mails were sent, who accessed patient information): a limited period, after which they are deleted automatically.
• Free health tool answers: kept without your identity attached.
• A data export you request: the download expires and the file is deleted automatically.

Your rights, and how to use them

If you have an account, the Privacy Centre in your account is the fastest way to exercise these — no e-mail, no waiting for someone to act:

• See and correct what we hold about you, from your account profile.
• Get a copy of your information in a portable file. We e-mail you a link to confirm it is really you, then prepare a download only you can open.
• Ask us to delete your account. We confirm it is you, a person reviews the request, and then your account is anonymised as described above. We will tell you what has to be kept and why.
• Withdraw consent to marketing at any time, at your notification settings.
• Ask us anything else about your information — including restricting or objecting to a particular use — by writing to the contact below. We handle those individually.

If you do not have an account, write to us at info@erecto.in and we will verify who you are before acting.

Security

Traffic to this website is encrypted. Passwords are stored in hashed form and never in plain text. Access to patient information is restricted by role, staff accounts require a second factor to sign in, and staff access to patient records is logged. Invoices, support attachments and data exports are not publicly reachable — they are served only to the person they belong to. No system is perfectly secure, but if something happens that affects your information we will act on it and tell you what we are required to tell you.

Children

This service is intended for adults aged 18 and over. We do not knowingly collect information from children. If you believe a child has given us information, write to us and we will remove it.

Grievances and contact

If you think information we hold about you is wrong or incomplete, or you are unhappy with how we have handled your information, contact our Grievance Officer. We will acknowledge you and respond as quickly as we can.

Grievance Officer: Dr Abhishek Kumar, Chief Executive Officer, Erecto Men's Health Clinic.

• By e-mail: info@erecto.in, or the Grievance Officer directly at drabhishekbabu@gmail.com

• By phone: +919681833766

• By post: F/A-10/1, Govardhan Apartment, Zarda Bagan, Jyangra, Kolkata, West Bengal 700059, India

Changes to this policy

We may update this policy. The date it was last updated is shown at the top of this page. If a change affects what you agreed to, we will ask you to review it the next time you sign in.