Your information, and what happens to it.
A dermatology consultation means sharing photographs of your skin and your medical history. This page says what the clinic collects, why, who else handles it, and how to have it corrected or deleted.
At a glance
- Operated by
- Dr. (Lt Col) Khagendra Varada
- Clinic
- Dr. Varada’s Skin & Hair Center
- khagvarada@drvarada.com
- Phone
- +91 80088 55330
- Last updated
- 28 September 2026
The data fiduciary
Dr. Varada’s Skin & Hair Center is a proprietorship of Dr. (Lt Col) Khagendra Varada (Reg. No. 10461, Hyderabad State Medical Council), practising at Plot No 13D/B, Wellington Rd, Vikrampuri Colony, Karkhana, Secunderabad, Telangana 500009.
This policy covers the website drvarada.com, the clinic’s WhatsApp number, online video consultations and appointments at the clinic. It is written to meet the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and its rules on sensitive personal data, and the Telemedicine Practice Guidelines, 2020.
What the clinic collects
Only what a consultation needs:
- Your name, age, sex, phone number and, if you give it, email address
- Your medical history, current medicines, allergies, previous prescriptions and reports
- Photographs of the affected skin, hair or nails that you send or that are taken at the clinic with your consent
- The doctor’s notes, diagnosis, prescription and treatment plan
- Payment records: amount, date and the reference number from the payment provider
The clinic never receives or stores your card number, UPI PIN or net-banking password. Payments are processed by Razorpay Software Private Limited, which handles that information under its own privacy policy and the Reserve Bank of India’s rules for payment aggregators.
The website itself collects no forms. It uses Google Analytics, through Google Site Kit, to count visits and see which pages are read. That uses cookies and records your approximate location, device and browser, not your name. You can block these cookies in your browser without losing anything on the site.
Photographs are never published without written consent
Before-and-after images on this site appear only with the patient’s written consent, recorded against the case, and with identifying features removed. Consent to treatment is not consent to publication, and you can refuse the second while accepting the first.
How it is used
- To diagnose and treat you, and to keep the medical record the law requires
- To arrange, confirm and remind you of appointments, on WhatsApp or by phone
- To collect fees, issue receipts and process refunds
- To meet legal, tax and medical-council obligations
Your information is not sold, rented or shared for marketing. The clinic does not send promotional messages unless you have asked to receive them.
Who it is shared with
Only the people and services needed to provide your care:
- The doctor and clinic staff involved in your consultation
- WhatsApp (Meta Platforms) and Google, which carry messages, video calls and email
- Razorpay, which processes payments and refunds
- A laboratory or pharmacy, when you are referred to one and only with the details that referral needs
- Authorities, where the law requires disclosure
WhatsApp is the booking channel
Messages and photographs sent on WhatsApp are end-to-end encrypted in transit, but they remain on your phone and on the clinic’s device. If you would rather not send photographs this way, say so and another route will be arranged.
Storage and retention
Medical records are kept for at least three years from the last consultation, as the National Medical Commission’s regulations require, and longer where a condition is under continuing treatment. Payment records are kept for as long as tax law requires. Records are held on access-controlled devices and accounts, and only the clinic’s staff can open them.
Access, correction and deletion
Under the Digital Personal Data Protection Act, 2023 you may:
- Ask for a summary of the personal data the clinic holds about you
- Ask for it to be corrected or completed
- Withdraw consent and ask for data to be erased, except records the clinic is legally required to keep
- Nominate someone to exercise these rights on your behalf
- Raise a grievance, and escalate it to the Data Protection Board of India if it is not resolved
Write to the grievance officer, Dr. (Lt Col) Khagendra Varada, at khagvarada@drvarada.com. Requests are acknowledged within 72 hours and answered within 30 days.
When this policy changes
The date at the top of this page changes whenever the policy does. This version is dated 28 September 2026. Email khagvarada@drvarada.com, WhatsApp or call +91 80088 55330, or write to Plot No 13D/B, Wellington Rd, Vikrampuri Colony, Karkhana, Secunderabad, Telangana 500009. Mon–Sat, 11:30 am – 5:00 pm.
Privacy questions
Does the clinic store my card or UPI details?
No. Payments go through Razorpay, and the clinic sees only the amount, the date and a reference number.
Will my photographs appear on the website?
Only if you give written consent for that specific use, with identifying features removed. Treatment does not depend on it.
How do I get my records deleted?
Email khagvarada@drvarada.com. Anything the clinic is not legally required to keep is erased, and you are told what must be retained and for how long.
Related on this site
The first appointment is a diagnosis.
Not a treatment plan sold on the spot. Message the clinic and bring your history.