AV Scan Diagnostics ("we," "our," "us") respects your privacy and is committed to protecting your personal and medical information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data under applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Information We Collect
- Personal information: Name, contact details (phone, email, address), age, gender.
- Medical information: Test results, imaging scans, doctor's notes, prescriptions, medical history.
- Technical information: Website cookies and browser/device data, used for site functionality and for the analytics and advertising measurement described in section 9.
2. Purpose of Processing
We process your data for:
- Providing diagnostic, imaging, and pathology services.
- Appointment booking and report delivery.
- Communicating with you (including over WhatsApp, with your explicit consent).
- Regulatory and legal compliance.
- Improving our services and ensuring patient safety.
3. Consent
- By using our services, you consent to our processing of your personal and medical information.
- Sharing of medical reports over WhatsApp or email will only occur with your prior explicit consent.
- You may withdraw your consent at any time by emailing us at info@avscan.in.
AV Scan Diagnostics uses patient mobile numbers for appointment and report notifications via WhatsApp Business. By providing your number, you consent to this communication.
4. Data Retention
- Medical records are retained as per Indian law (currently a minimum of 3 years for diagnostic records, or longer if required for clinical care).
- Non-medical enquiry data (e.g., website contact forms) is retained for up to 12 months.
5. Data Sharing
We do not sell your data. We may share data only with:
- Treating physicians and authorised representatives (with your consent).
- Accredited partner laboratories.
- IT, hosting and secure messaging providers (e.g., WATI for WhatsApp integration), who process data under strict contractual safeguards.
- Formspree, Inc. (United States), which receives what you type into the enquiry forms on this website and delivers it to our team by email.
- WATI, our WhatsApp provider. When you send an enquiry form, our website passes your name, mobile number, the test you asked about and your preferred date or time to WATI, which sends them to our front desk as a short WhatsApp alert so that we can call you back sooner. What you type in the message box is not included.
- Regulators, insurers, or courts if legally required.
- Google LLC, which receives website analytics and advertising measurement data as described in section 9. Our website’s own code does not send Google your name, contact details or anything from your reports.
6. Your Rights
You have the right to:
- Access and request a copy of your personal data.
- Request correction or deletion of inaccurate information.
- Withdraw consent to certain processing.
- Raise a grievance with us, using the contact details below.
7. Security
We use access controls to protect your medical data from unauthorised access, alteration, disclosure or destruction, and we keep reviewing how we protect your records. This website is served over an encrypted (HTTPS) connection.
8. Emergency Disclaimer
WhatsApp and our website contact forms are not monitored for medical emergencies. In case of a medical emergency, please call local emergency services (108) or go directly to the nearest hospital emergency department.
9. Cookies, Analytics and Advertising
This website uses two Google measurement services. Google Analytics 4 (measurement ID G-KCWN3HC6LD) runs across this website so we can see how many people visit and which pages help them. The Google Ads tag (ID AW-16451102778) runs only on our booking, contact and visit pages, so we can tell which adverts lead to genuine enquiries. Both are operated by Google LLC and work through the same Google tag software, which your browser loads from Google. Our pages also load their typefaces from Google Fonts, and some of our general pages show an embedded map from Google Maps; we do not use either of these to measure visits.
What is sent: your internet (IP) address, from which Google works out the approximate area you are in, general information about your device and browser, identifiers that Google’s tags store in your browser (for example in cookies), the website that linked you to us (if your browser shares it), which page you viewed, and what you did there, such as tapping a call, WhatsApp or email button or sending an enquiry form. On our general pages, such as the home, Visit Us, booking, contact, pricing, FAQ and About pages, Google receives the page’s real address and may also receive its title. When the link you followed to one of these general pages carries an advert’s click reference, the number that Google adds to links from its adverts for the kind of advert, or one of a few general labels for the source and type of the visit (for example “Google advert”, “Google Business Profile” or “Bing”), our website also sends these to Google Analytics, so that we can count the visits our adverts and listings bring. Our website sends Google Analytics nothing else from that link, such as a campaign name, the number that Google adds for the advert campaign or the words you searched for. On scan, service and health-information pages, what our website sends to Google Analytics carries a short page code and the words “Service page” in place of the page’s address and title (explained below).
What we remove from links: a link to one of our pages can carry extra text after a “?” in its address, added by whoever made the link, such as an advert’s campaign name or the words that were searched for. As one of our pages starts to load, before the Google tag software or GoDaddy’s script described below starts, our website’s code removes that extra text from the address in your browser.
On our general pages it keeps only an advert’s click reference, two numbers that Google adds to links from its adverts (one for the kind of advert and one for the advert campaign) and the general source and type labels described above; on scan, service and health-information pages it keeps none of it. It does not change the rest of the address, such as a “#” section that points to a part of the page. This happens in your browser after the page has been requested, so the web server of our hosting provider still receives the full address that your browser asks for.
On our Visit Us page, just before that text is removed, our website’s code also reads the advert-group number that our advert links carry, if there is one, and uses it only to choose the heading, the line under it and the photo at the top of that page. Our code uses it once while the page loads, does not store it, and does not send it anywhere; as explained above, our hosting provider’s server receives the full address, including this number, when your browser requests the page.
Advert conversions: as Google designs it, the Google Ads tag on our booking, contact and visit pages receives the address of that page and the page’s title. Because of the step described above, the only things that this address can carry after a “?” are an advert’s click reference, the two numbers that Google adds to its advert links and the general source and type labels; a campaign name or the words you searched for have already been removed. The addresses and titles of these three pages do not name any particular scan, condition or body part. The tag tells Google Ads when you tap a call or WhatsApp button or successfully send an enquiry form on these pages, so that Google Ads can count it as an advert conversion.
Google Analytics and Google Ads: Google Analytics is not linked to our Google Ads account, so it does not pass the visits, taps and other activity it records on this website to our Google Ads account or report them to Google Ads as advert conversions.
What our website never sends: our website’s own code never sends Google your name, mobile number, email address or date of birth, anything you type into our forms, or anything from your reports or medical records. Google’s tag software also has optional features of its own that can look for contact details, such as an email address or phone number, on a web page; Google calls this “user-provided data”. Whether those features run is decided by settings in our Google accounts, not by our website’s code. We switched off the user-provided data features of our Google Ads account on 1 September 2026, and Google Analytics shows user-provided data collection as not available for websites in our industry category. The Google tag that Google Analytics uses on our pages has a separate setting of its own for detecting such details automatically; while that setting is on, Google’s tag software may look for such details on our pages.
Advertising features switched off: our Google Analytics and Google Ads tags are both set to switch off ad-personalisation signals, which asks Google not to use your visits to this website to personalise the adverts you see. Google’s tag software includes this instruction in most of the requests it sends from our pages, but not in every one: in our checks, some requests did not carry it, for example requests to one Google Ads address (ad.doubleclick.net). Google signals, a Google Analytics feature that associates visits with people who are signed in to a Google account, is switched off in our Google Analytics settings, and our tags are also set to keep it off.
Call, WhatsApp and email buttons: when you tap one of these buttons, our website itself sends Google only the kind of button (call, WhatsApp or email) and the page it was on, as described above, never the link itself or what your message says. When you tap a WhatsApp link, Google Analytics may also record the link you followed; a Google Analytics setting that we have switched on removes the pre-filled WhatsApp message text from that link before it is sent to Google.
Where an enquiry came from: our home, About, FAQ, pricing, Quality and Safety, booking, contact and Visit Us pages carry a small piece of our own code that notes how you first arrived. These are all general pages, and their addresses do not name any scan. If the link you followed to one of these pages carries an advert click reference or one of a few general source or type labels (such as those on links from our adverts, our Google Business Profile or our Bing listing), this code saves a short note of the first such visit in your own browser, if your browser allows it. The note is not a cookie. Apart from when you arrived and on which of these pages, the note holds only the click reference codes from that link (such as Google’s advert click ID) and its general source and type labels (for example Google advert, Google Business Profile or Bing). When making the note, our code does not keep or use the words you searched for or a campaign name from the link, and it adds nothing about your scan or your health to it. We set the note to expire after 30 days: these pages ignore and delete an expired note the next time one of them is opened in your browser. The note stays on your own device, and our code never sends it anywhere by itself. Apart from the short WhatsApp code described next, how you first arrived (the page you arrived on, the click reference codes and the source and type labels in the note) reaches our team only if you choose to submit an enquiry form on our booking, contact or Visit Us page, or the enquiry form on our home page: it is then sent with that form, which reaches us through Formspree, so that we can see which adverts lead to genuine enquiries. On our Visit Us page, if the note, or the link you followed to that page, shows that your visit came from a Google advert or from a link labelled as Google, the pre-filled text of a WhatsApp message you start from that page also includes a short code beginning “Ref G”, which tells our team only that your visit came from a Google advert or a link labelled as Google. You can clear the note at any time by clearing this website’s data in your browser.
Pages about a particular scan: on our scan, service and health-information pages, what our website itself sends to Google Analytics replaces the page’s address with a short page code (for example /s/s07/ for the CT scan page) and the page’s title with the words “Service page”, and includes nothing from the link you followed, such as an advert’s click reference or campaign details. Our website’s code also removes from these pages’ address everything that the link you followed added after a “?” (see “What we remove from links”), but the address itself, which names the scan, can still be read by Google’s tag software and GoDaddy’s script, as described in this section. The codes are not secret: the list that matches each code to its page is part of our website’s publicly readable code, so anyone who reads it, including Google, can match a code to its page. What the codes do is keep the page’s address and title out of what our website itself sends to Google Analytics. The Google Ads tag does not run on these pages, and a tap on a call, WhatsApp or email button there is recorded in Google Analytics, under the page code, as an ordinary event that is not reported to Google Ads as an advert conversion.
Google’s tag diagnostics: on some visits, Google’s tag software also sends Google a technical diagnostics report about how its tags are working. This report can be sent from any of our pages, including scan pages, and it includes the address of the page being viewed. It comes from Google’s software, not from our website’s own code, so the page-code safeguard described above does not apply to it, and our website’s code does not control when it is sent or what it contains.
Maps, fonts and links to other websites: our pages tell your browser not to include the address of the page you are on when it fetches something from another website or opens a link to one. The embedded Google Maps on our general pages carries the same instruction, so Google Maps does not receive the address of the page the map appears on, and our typefaces load from Google Fonts without the address of the page you are reading. This instruction covers only what your browser adds by itself; it does not stop the Google tag software or GoDaddy’s script described in this section from reading the page’s address themselves.
Our hosting provider: GoDaddy, which hosts this website, adds its own script (tccl.min.js, loaded from img1.wsimg.com) to the web pages it serves for this website. GoDaddy’s note next to that script says that it monitors performance to make the website faster, and that a website owner who wants to opt out can contact GoDaddy’s hosting support. The script runs after our website has removed the extra text from the page’s address, as described above, and sends GoDaddy the address of the page you are viewing (on scan pages this address names the scan; on our general pages it can include the click reference, numbers and labels that are kept), the website that linked you to us (if your browser shares it), technical details of your browser and screen, how quickly the page loaded, and an identifier for your browser. We did not add that script, and we do not receive data from it.
How to opt out: Google provides a browser add-on that stops Google Analytics from receiving information about your visits, at tools.google.com/dlpage/gaoptout; it works only in desktop browsers, and it covers only Google Analytics, not the Google Ads tag or GoDaddy’s script. Blocking cookies in your browser settings does not stop these tags from sending the page information described above, because they can send it without cookies. A content blocker in your browser, or switching off JavaScript for this website, can stop the scripts from running. Whichever of these you choose, you can still call or message us to book, and we do not require cookies to provide any service.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.
For any questions regarding this policy, contact us at info@avscan.in or call +91 98200 51511.