Privacy Policy — Karna Speech & Hearing

Thank you for visiting Karna Speech & Hearing. Your privacy matters to us. This Privacy Policy explains what personal information we collect, how we use and protect it, your rights, and how to contact us. By using our website or services, you accept the practices described in this policy.

1. Who we are

Karna Speech & Hearing is a clinic offering audiology, speech and language therapy, and related services. Our contact details (phone, email, address) are available in our site information and clinic materials. For reference, our contact details appear in the site content. Website content

2. Information we collect

We may collect personal information directly from you, automatically through our website, and from third parties when you authorize them to share it.

a. Information you provide

Name, phone number, email address, postal address.
Health information relevant to treatment (hearing history, medical history, test results, therapy notes) provided during assessments and treatment.
Payment information (billing details), when you pay for services.
Any other information you provide in forms, emails, appointment requests, or correspondence.

b. Information we collect automatically

Usage data from the website (IP address, device type, browser, pages visited, time on site).
Cookies and similar technologies used to improve site performance and user experience.

c. Information from third parties

Referrals from medical professionals, hospitals, or other clinics (with your consent).
Appointment booking platforms or payment processors when used.

3. How we use your information

We use personal data for the following legitimate purposes:

To provide clinical services (assessment, diagnosis, treatment, follow-up).
To schedule and confirm appointments and send reminders.
To process payments, invoices, and insurance claims where applicable.
To communicate with you about care, updates, and administrative matters.
To improve our services, website, and patient experience.
To comply with legal or regulatory obligations (medical records retention, reporting).
Where you have given consent, to send newsletters or marketing material; you can unsubscribe at any time.

Health and clinical information is used only for treatment, care coordination, and record-keeping and is treated as especially sensitive (see Security & Retention).

4. Legal basis for processing (where applicable)

Where required by law, we process personal data on the following bases: your consent, necessity for providing healthcare services and performing a contract (appointment and treatment), and compliance with legal obligations. For clinical data, processing is necessary for medical diagnosis, provision of healthcare, and management of health services.

5. How we share information

We do not sell your personal information.

We may share information with:

Medical professionals or hospitals involved in your care or referrals (with your permission, unless law requires otherwise).
Service providers who assist with appointment scheduling, billing, or IT hosting — they are contractually required to protect your data.
Legal or regulatory authorities when required by law.
Third parties only when you explicitly authorize the disclosure.

When third-party service providers access personal data, we require contractual safeguards, including confidentiality and security measures.

6. Cookies and online tracking

Our website uses cookies and similar technologies to provide essential website functionality, analyze usage, and improve user experience. You can control cookie settings through your browser; blocking cookies may affect site functionality.

7. Security

We implement administrative, technical, and physical safeguards to protect personal and health information from unauthorized access, disclosure, alteration, or destruction. Access to clinical records is restricted to authorised staff and clinicians on a need-to-know basis. While we strive to protect your data, no system is completely secure — if a breach affecting your personal data occurs, we will follow applicable law regarding notification.

8. Data retention

We retain personal and clinical records for as long as necessary to provide care and to meet legal, regulatory, and professional obligations. Retention periods for medical records vary by jurisdiction; on request we will inform you of the typical retention period that applies to your records.

9. Your rights

Subject to applicable laws, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data (subject to legal/medical record retention obligations).
Restrict or object to certain processing.
Request a portable copy of your data in a commonly used format.
Withdraw consent for specific uses (e.g., marketing) at any time.

To exercise these rights, contact us using the details below. We may need to verify your identity and will respond within the time required by law.

10. Children

Our services are intended for patients and caregivers. We do not knowingly collect personal information from children for marketing purposes via the website. For minors receiving clinical services, guardians provide necessary information for care; clinical record handling follows healthcare privacy rules.

11. International transfers

If information is transferred or stored outside your country (for example, by third-party service providers), we will take reasonable steps to ensure that the recipient provides adequate protections consistent with this Policy and applicable law.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Effective date” at the top indicates when this version becomes effective. Material changes will be communicated where required by law (for example, on the website or by email).

13. Contact us

If you have questions, wish to exercise your rights, or want more details about our privacy practices, please contact:

Karna Speech & Hearing — contact details as on our website and clinic information. Website content

You may also contact the clinic by phone, email, or visiting the clinic address listed on our site.

If you’d like, I can (1) produce a shorter “Privacy summary” for display in a website footer, (2) create a cookie banner text, or (3) customise the policy with exact retention periods, data processor names (e.g., your payment processor), and the clinic email/phone/address formatted as legal contact details — tell me which one and I’ll add it now.