Who we are
Trinity Cures Hospital (Shivranjani Cross Road, Satellite, Ahmedabad) operates this website. You can contact us at trinitycures91570@gmail.com or +91 9157057091.

This notice describes only the data this website actually collects. We do not run a public patient login, newsletter list, or visitor file-upload form.

Appointment requests
When you use /appointment/, we store the information you type: full name, email address, phone number, requested date and time, and your message. We also generate an internal record ID/slug and the time of submission so staff can review the request in the hospital dashboard.

Contact and enquiry messages
When you use /contact/, we store: full name, email address, phone number, subject, and message, plus the time of submission. The contact form is sent by your browser to our server (AJAX). We do not email this content automatically from the website code; staff read it in the dashboard.

What we do not collect from public forms
We do not collect date of birth, gender, medical history files, payment card details, or a chosen doctor field on these forms. Home-page and some inner-page HTML appointment boxes that are not connected to /appointment/ do not save data.

Visitor analytics
On public pages, the site records your IP address, browser user-agent, the page path you opened, and the time of the visit. Repeat hits to the same path from the same IP within 30 minutes are not stored again. Dashboard, admin, static files, and health-check URLs are not tracked this way.

Form abuse protection
Appointment and contact posts are limited by IP address in a short-lived cache (about 10 submissions per hour). That IP is used only for rate limiting, not stored on the appointment or contact record.

Cookies
The site uses:
- trinitycures_sessionid — keeps the site working (including staff login sessions)
- trinitycures_csrftoken — protects forms against forgery
- cookieConsentAccepted — remembers whether you accepted or rejected the cookie banner

Rejecting the banner stores cookieConsentAccepted=rejected. Essential session and CSRF cookies may still be set so forms and the dashboard can work. Visitor analytics currently continue on public page views even if you reject the banner.

Staff accounts
Hospital staff who sign in at /dashboard/login/ have username and password checked against staff accounts. Login history for staff may include login/logout time, IP address, and browser user-agent. This is not used for public visitors.

Photos and files
Images on About, doctor profile, blog, and reviews are uploaded by staff in the dashboard, not by website visitors.

Third-party tools in the interface
Public pages may load fonts and scripts from CDNs (for example Google Fonts and Bootstrap) and an embedded Google Map on the contact page. Those providers may process connection data under their own policies. We do not use Google Analytics or a Facebook advertising pixel in this codebase.

How long we keep data
Appointment and contact records stay until staff delete them from the dashboard. Visitor records stay until staff remove them. Cookie consent is stored in your browser for up to 365 days.

Your requests
To ask about access or deletion of an appointment or contact message you submitted, email trinitycures91570@gmail.com with the email and phone you used on the form.