At Keen Sight Optical Chamber, we prioritize the privacy of our website visitors, registered VIP members, and clinical patients. This Privacy Policy outlines the types of information collected, stored, and secured by our platforms and details our compliance frameworks under Indian healthcare and digital privacy regulations.
1. Information We Collect
We collect personal information to provide specialized optical, optometric, and laboratory diagnostics services. This data falls into two categories:
- Personal Identifiers: Name, WhatsApp phone number, age, and email address collected voluntarily when booking physical clinical appointments or registering a VIP portal profile.
- Technical Meta-Data: Device types, browser versions, and anonymized IP addresses collected automatically to safeguard our portals against digital breaches.
2. How We Use Your Information
Your records are processed strictly for clinical and operational purposes, specifically to:
- Generate, securely store, and display your historical optical prescriptions and laboratory blood panel documents inside your private VIP Member panel.
- Send transactional appointment confirmations, schedule notifications, and automated clinic reminders via WhatsApp or SMS to your registered device.
- Deliver non-monetary milestone markers and promotional star systems based on your physical clinical visits.
- Maintain accurate clinical records in total conformity with medical ethics guidelines issued by the National Medical Commission (NMC) and Indian healthcare laws.
- Deliver occasional clinic updates, optical sales, and promotional offers to your registered device, provided you have explicitly opted-in via our granular checkbox agreements. You retain the absolute right to opt-out of promotional marketing communications at any time without affecting your clinical care.
3. Data Protection & Processing Safeguards
As handlers of sensitive healthcare data, Keen Sight Optical Chamber maintains strict physical, technical, and administrative safeguards:
- Access Control: Your medical data and eye parameters are strictly restricted to verified clinical practitioners directly handling your care.
- VIP Verification: VIP portal access requires individual session authentication. Users are strictly prohibited from sharing login access to protect personal health metrics.
- Data Sharing Limits: We do not sell, rent, trade, or share patient identifiers or clinical test outcomes with third-party marketing companies. Data is handled securely within our infrastructure, with the sole exception of integrated laboratory partners who require your identifiers strictly to process your requested blood/pathology panels.
4. Your Data Rights (DPDP Act Compliance)
In accordance with the Digital Personal Data Protection (DPDP) Act of India, users utilizing our Srinagar clinical portals hold absolute rights to:
- Request a summary of personal profile records and diagnostic information currently stored in our active databases.
- Request the correction of inaccurate personal names, ages, or general demographics.
- Primary Identifier & Phone Verification Policy: To prevent medical identity mismatch and maintain clinical integrity across separate diagnostic records, your registered phone number serves as a primary verification key. If your contact number changes, our desk facilitates the secure porting or archival of your existing clinical profile to a newly verified phone identifier upon identity re-authentication.
- Account Deletion & Consent Withdrawal: You may request full closure of your VIP portal profile and digital deletion of active records at any time by calling our clinic desk directly at +91 8082299380, using the in-app support interface, or emailing keensight.in@gmail.com. Upon request, active queues and web accounts are purged via our cryptographic deletion workflow. Note: Finalized clinical histories, billing ledger items, and medical logs must be retained independently as legally required under Indian medical record preservation and taxation laws.
5. Cookies and Tracking Technologies
Our website utilizes baseline browser cookies to preserve member preferences, record session states inside the VIP portal, and optimize site loading speeds. Cookies do not scan your local drive or retrieve private medical histories. You may disable cookies inside your browser settings, though doing so may log you out of your private member area.
6. Third-Party Links & API Integrations
Our website contains direct click links to third-party applications (such as WhatsApp API routing for support). We do not wield administrative command over the backend privacy modules of external software networks and advise checking their respective policies when exiting our domain.
7. Children's Privacy & Minor Protection (DPDP Act 2023)
We strictly enforce children's data safety under Section 9 of the Digital Personal Data Protection Act, 2023:
- No Direct Data Solicitation: Our interactive mascot and virtual assistant, Iris, is programmed never to solicit, record, or process personal data of minors—including school names, exact ages, dates of birth, or student details.
- Parental Consent & Supervision: Digital appointment bookings, contact lens fittings, and diagnostic assessments for patients under 18 years of age must be initiated and accompanied by a parent or legal guardian.
- No Behavioral Tracking: We do not conduct behavioral tracking, targeted advertising, or profiling directed at minors.
8. Mobile Application Disclosures (KeenSight Android APK)
This section applies specifically to users who download and install the KeenSight Android Application (.apk) directly from our official website:
- Distribution & Integrity: The KeenSight APK is officially distributed through links provided exclusively on our verified website (
keensightopticalchamber.in). Users should ensure they only download the package via official prompts originating on our website and avoid untrusted third-party app stores or unofficial mirrors.
- App Permissions & Data Security: The application requires minimal network permissions (
INTERNET and ACCESS_NETWORK_STATE) solely to fetch optical prescriptions, sync physical clinic appointments, and query records over encrypted HTTPS (TLS 1.3) protocols. The application does not access local device storage, contacts, microphone, camera, or background GPS location.
- Account Deletion by Call, App, or Email: Users retain full control over their digital account. You can request immediate profile closure and deletion by calling our support line directly at +91 8082299380, via the app's support flow, or by emailing our Grievance Desk. (Statutory clinical and billing archives are retained as required by healthcare regulations noted in Section 4).
- No Third-Party SDK Trackers: The APK contains no third-party behavioral analytics, advertising libraries, or data-broker SDKs. Communications route directly and exclusively to our secure clinical backend.
9. Virtual AI Assistant ("Iris") & Automated Interactions
Our website features an interactive virtual assistant and digital mascot named Iris to facilitate administrative navigation and appointment inquiries. When you interact with Iris, data is handled under strict privacy standards:
- Voluntary Query Processing & Ephemeral Handling: User messages and inquiries typed into Iris are transmitted over encrypted TLS 1.3 connections directly to our private serverless cloud backend (Cloudflare Workers AI) solely to compute real-time conversational responses. Inquiries are processed ephemerally in volatile memory (RAM) and are not persistently recorded or stored in chat databases. We do not use your chat queries to train public foundational AI models, nor do we sell, monetize, or broker chat interactions.
- No Medical Records Ingestion: Iris is not integrated with your private Electronic Medical Records (EMR), historical optical prescriptions, or pathology laboratory results. Iris cannot access or retrieve sensitive health documents. Visitors are advised not to submit unprompted, highly sensitive personal medical histories or identity numbers into the conversational interface.
- Client-Side Personalization (Local Storage): To recognize returning clinic visitors and active VIP portal patients, Iris reads localized browser storage (
localStorage) strictly within your own device. If a first name is stored from a previous verified portal session, Iris uses it locally to display personalized greetings. This identifier remains isolated on your physical device, is not tracked across external websites, and can be cleared at any time by emptying your browser cache or site data.
10. Bot Protection & Website Security
We use Cloudflare Turnstile ("Turnstile") on our website to protect against spam, automated abuse, and bot attacks. Turnstile works by collecting certain technical and client-side signals (such as IP addresses, browser details, and device fingerprints) to verify that requests are made by humans rather than bots. This data processing is governed by Cloudflare's privacy policies. For more information, please review the Cloudflare Turnstile Privacy Addendum.
11. Contact Our DPDP Grievance Officer
If you have any specific inquiries about your digital health files, or require account deletion or profile updates under Indian data protection acts, please reach out directly to our Grievance Desk in Srinagar:
If a grievance regarding your personal data remains unresolved by our Grievance Desk, you retain the statutory right to lodge a complaint with the Data Protection Board of India.