Legal
Privacy policy
Written to be read, not to be survived. If anything here is unclear, email us and we'll explain it in plain words.
PING Health is a healthcare digital marketing and automation agency based in Mumbai, India, founded by Afzal Khan. This policy explains what we do with your data when you visit this site, contact us, or work with us.
What we collect
When you contact us: your name, email, phone or WhatsApp number, your practice name, and whatever you write in the message. You choose what to tell us.
When you request a growth audit: your name, practice or hospital name, website, email, phone or WhatsApp number, how you would like the report delivered, and anything you add in the note.
When you browse: standard analytics data such as pages viewed, approximate location (city level), device and browser type, and the source that brought you here. This is collected through Google Analytics 4.
When you call or message: if you reach us through a tracked number or WhatsApp link, we record which campaign or page sent you. We measure attribution, not the content of clinical conversations.
Why we collect it
To reply to you. If you ask us a question, we need a way to answer it.
To prepare and deliver your audit, and to do the work if you become a client.
To understand which marketing actually works, so we spend our own budget sensibly — the same discipline we apply to client accounts.
To meet legal, tax and accounting obligations.
We do not sell your data. We do not add you to a mailing list because you filled in a contact form. There is no drip sequence waiting for you.
Your consent, and how to withdraw it
Under the Digital Personal Data Protection Act, 2023, we process your personal data on the basis of the consent you give when you contact us, or where processing is necessary for a legitimate use such as responding to a request you initiated.
You can withdraw consent at any time by emailing us. Withdrawing it is as easy as giving it, and we will stop processing except where we are legally required to retain something.
Who else touches your data
Google (Analytics, Ads, Business Profile): website analytics and advertising measurement.
Meta: advertising measurement, where social campaigns are running.
FormSubmit, our form provider: to deliver the messages and audit requests you send through this site.
WhatsApp (Meta): if you choose to message us there, that conversation is governed by their terms as well as this policy.
Our email and cloud providers: normal business infrastructure.
Each of these processes data under its own terms. We share the minimum required and nothing more.
Patient data, if you are a client
This is important, and separate from everything above.
When we build automation for a practice — appointment booking, reminders, follow-ups, review requests — that system handles data belonging to your patients. In that relationship, the practice is the data fiduciary and PING Health acts as a processor on your instructions.
We do not use patient data for our own purposes, we do not use it to market anything, and we do not retain it beyond what the engagement requires. The specifics — scope, security, retention, deletion, breach notification — are set out in the written agreement we sign with each practice, not in this page.
If you are a patient of one of our clients and want your data removed, contact the practice directly. They control it; we only act on their instruction.
How long we keep it
Enquiries: up to two years from our last contact, unless you ask us to delete them sooner. Clinics often come back a year later, and it is useful to remember the conversation.
Client records: for the duration of the engagement plus the period our tax and legal obligations require.
Analytics: per the retention window configured in Google Analytics.
Your rights
You can ask us what personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, and withdraw consent for future processing.
Email us and we will action it. We will not ask you to justify the request.
Security
We use reputable providers, limit access to what is needed, and do not keep data we have no reason to hold. No system is perfect, and anyone who tells you otherwise is selling something. If something goes wrong that affects you, we will tell you.
Contact & grievances
For anything in this policy — questions, corrections, deletions, or a complaint about how we've handled your data — write to us:
We respond to every privacy request. If you're not satisfied with how we handle it, you may escalate to the Data Protection Board of India.
We may update this policy as the business changes. The date at the top always reflects the current version.