Who we are and what this policy covers
SOHI MEDICAL CENTRE is a medical clinic located at Main Road, opposite PNB Bank, Mullanpur Garibdass, Punjab 140901, India. This policy applies to this website and to the clinic's internal LinkedIn automation application used by its authorized account owner to schedule and publish posts to a personal LinkedIn account.
Information handled through the website
When you complete the “Book a visit” form, the details you enter—such as your name, mobile number, preferred doctor, preferred date and reason for visiting—are prepared in your browser and opened in WhatsApp for you to review. They are not submitted to or stored in a clinic website database before you choose to send the WhatsApp message.
If you contact the clinic by telephone, WhatsApp or another external service, that service and the clinic will handle the information you provide under their respective practices and applicable law. Please do not send urgent or highly sensitive medical information through the website form.
The website also contains a Google Maps embed and links to external services including LinkedIn, Facebook, Instagram, YouTube, Google Business Profile, Google Maps and WhatsApp. Those providers may receive ordinary technical information when their content is loaded or when you follow a link.
LinkedIn OAuth and posting automation
The LinkedIn automation is intended for the clinic's authorized personal-account owner, not for general public use. With the owner's explicit authorization through LinkedIn OAuth, the application may handle:
- the LinkedIn member identifier and limited basic profile information returned during authorization;
- the OAuth access token and authorization details needed to connect the account;
- post text, links, images or other content supplied for scheduling and publishing;
- publication status, timestamps, error messages and limited security or operational logs.
We use this information only to authenticate the authorized account, prepare and publish posts requested by the account owner, maintain the scheduled workflow, prevent misuse and troubleshoot failures. The application does not seek access to private messages, contacts, connection lists, passwords or unrelated LinkedIn activity.
Consent and control
LinkedIn access begins only after the account owner completes LinkedIn's authorization process and grants the requested permission. Authorization may be withdrawn at any time by disconnecting the application in LinkedIn settings or contacting the clinic. Withdrawal does not affect processing already completed before access was withdrawn.
The account owner controls the content submitted for publishing and is responsible for reviewing it. We do not use LinkedIn information for advertising profiles, unrelated marketing, credit decisions or sale to third parties.
Service providers and disclosures
Information may be processed by LinkedIn and by service providers that host this website or securely operate the automation workflow on our behalf. These providers receive only the information reasonably necessary to perform their services and are expected to protect it. We may also disclose information when required by applicable law, to protect rights and safety, or to investigate abuse.
Some providers may process information outside India. Where applicable, we use available contractual, technical and organizational safeguards for such processing.
Retention and deletion
OAuth access tokens are kept only while the LinkedIn connection is active and are deleted or rendered unusable after revocation, expiry, account closure or termination of the application. Scheduled content is retained only as needed to publish it and manage the workflow. Limited operational and security logs may be retained for up to 90 days unless a longer period is required by law or necessary to investigate misuse.
Upon a valid deletion request, we will delete LinkedIn API data associated with the requester as soon as reasonably practicable and ordinarily within 30 days, unless retention is legally required. We will also delete stored LinkedIn data if the automation is discontinued. Residual copies in protected backups, if any, are removed through normal backup cycles and are not used for other purposes.
Security
We use reasonable administrative and technical safeguards appropriate to the information handled, including restricted access to the automation and secure handling of credentials and OAuth tokens. No internet transmission or storage system can be guaranteed completely secure.
Your choices and requests
Subject to applicable law, you may ask whether we hold personal information about you, request access or correction, withdraw consent, object to unnecessary processing, or request deletion. The connected LinkedIn account owner may also revoke the application through LinkedIn's permitted-services settings.
To make a privacy or deletion request, contact Dr. Gurdeep Singh Sohi by telephone or WhatsApp at +91 62803 28005. We may need to verify the request before acting on it. You may also write to the clinic at the postal address listed above.
Children, updates and questions
The LinkedIn automation is not directed to children. We may revise this policy when the website, automation or legal requirements change. The current version and effective date will always appear on this page. Questions may be directed to the contact details in Section 8.