Effective Date: 31 October 2026
Last Updated: 31 October 2026
Applies to: IAA Website, Official Mobile Application and Associated Digital Services
Website: https://indianarthroplastyassociation.com/
The Indian Arthroplasty Association ("IAA", "Association", "we", "our" or "us") is committed to protecting the privacy, confidentiality and personal information of its members, prospective members, medical professionals, researchers, delegates, authors, students, website visitors and other individuals who interact with the Association.
This Privacy Policy explains how IAA collects, receives, uses, processes, stores, shares and protects personal information through its website, official mobile application and other digital platforms and services operated or administered by IAA.
These services include, but are not limited to:
IAA does not maintain a public or member-searchable online membership directory. Membership information is used for authorised Association administration and related activities.
By accessing or using IAA's digital services, you acknowledge that you have had an opportunity to read this Privacy Policy. Where applicable law requires consent for a particular activity, IAA will obtain that consent separately. Accessing the website or using a service does not automatically constitute consent to every form of data processing described in this Policy.
The Indian Arthroplasty Association is the organisation responsible for determining the purposes and means of processing personal information collected through its digital services.
For the purposes of applicable Indian data protection legislation, IAA acts as the Data Fiduciary. Where GDPR or similar legislation applies, IAA may act as the Data Controller.
Organisation: Indian Arthroplasty Association
Website: https://indianarthroplastyassociation.com/
Privacy and Grievance Contact: secretaryiaa2427@gmail.com
Office Email: office@indianarthroplastyassociation.com
Postal Address:
Dr. Debabrata Padhy
Secretary, Indian Arthroplasty Association
Top Bone and Joint Clinic
96/2451, Phase 7, Sailashree Vihar
Bhubaneswar, Odisha – 751021, India
IAA may engage authorised third-party service providers to process personal information on its behalf. Such service providers are expected to handle information in accordance with applicable contractual, confidentiality and data protection requirements.
IAA collects only information reasonably necessary for its activities, administration, academic programmes, membership services and legitimate organisational purposes.
The categories of information collected may include the following.
As a professional medical association, IAA may collect:
For membership administration, we may collect:
Membership information is maintained for authorised Association purposes and is not made available through a public or member-searchable directory.
When you make payments through IAA's digital platforms, we may collect or receive:
IAA uses Razorpay for online payment processing.
IAA does not intend to collect or store complete card numbers, card security codes, UPI PINs, banking passwords or other payment authentication credentials on its own servers. Such information is handled through the payment gateway and its authorised banking and payment partners.
Please refer to Razorpay's own privacy notice for information about its independent processing activities.
For conferences, workshops, webinars, fellowship programmes and other academic activities, we may collect:
We may collect information submitted through:
When you access our website or mobile application, certain technical information may be collected automatically, including:
This information helps us maintain website security, troubleshoot technical issues and improve our digital services.
Depending on the features you use and permissions you grant, the IAA mobile application may collect or access:
The application will request device permissions only where required for a particular feature.
IAA's website, mobile application and associated digital platforms are not intended for the collection, storage or processing of identifiable patient medical information.
Users must not upload, submit or share through IAA's digital platforms:
Clinical material submitted for academic presentations, journal publications, research, educational activities or scientific discussions must be appropriately and irreversibly de-identified. Removing only a patient's name may not be sufficient if the individual can still be identified from other details.
Authors, presenters and contributors are responsible for ensuring that patient consent, institutional ethics approval and other permissions are obtained wherever required by applicable law, professional standards and institutional policies.
IAA reserves the right to reject, remove or restrict access to material that may compromise patient confidentiality or violate applicable requirements.
If identifiable patient information is inadvertently submitted, please notify IAA promptly using the contact details in this Policy. IAA will take reasonable steps to assess and address the matter.
IAA uses personal information for legitimate Association-related activities, including:
IAA will not use personal information for purposes materially different from those disclosed at the time of collection without providing appropriate notice and obtaining consent where required.
Depending on the applicable jurisdiction, IAA processes personal information on one or more of the following grounds:
Under India's Digital Personal Data Protection (DPDP) framework, processing will be based on valid consent or other permitted grounds recognised by the Act, as applicable and as its provisions come into force.
Where consent is required, it must be free, specific, informed, unconditional and unambiguous, with a clear affirmative action.
Individuals may withdraw consent subject to applicable law. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.
IAA respects the confidentiality of its members and website users.
IAA does not sell personal information to third parties.
However, personal information may be shared in the following circumstances where necessary and legally permitted.
Payment-related information may be shared with Razorpay, banks and authorised payment service providers to facilitate transactions, refunds, payment verification and fraud prevention.
Razorpay processes information in accordance with its own applicable privacy policies and contractual obligations.
For conferences, workshops and academic events, relevant information may be shared with authorised organising committees, local organising teams and event management partners.
This may include:
Only information reasonably necessary for organising and administering the relevant event should be shared.
IAA may share relevant information with universities, hospitals, educational institutions, fellowship partners, academic collaborators and professional organisations for legitimate academic and administrative purposes.
Such sharing will be limited to the requirements of the relevant activity. Information will not be shared beyond the scope reasonably necessary for that activity.
IAA may engage third-party service providers for:
These providers may process personal information on behalf of IAA to deliver their contracted services.
IAA may disclose personal information where required:
IAA may make selected information publicly available when necessary for Association activities, such as:
IAA does not maintain a public or member-searchable membership directory. Membership records and private member contact information will not be made publicly accessible merely because an individual has applied for or obtained membership.
Where individuals are specifically featured or identified in material intended for public publication, IAA will provide appropriate information and obtain consent or rely on another applicable lawful basis, as required.
Submitting information for membership or registration does not automatically grant permission for unrestricted public publication.
IAA regularly documents its academic activities, conferences, meetings, workshops and other Association events.
Photographs, video recordings and audio recordings may be taken during these activities.
Such material may be used for:
Where individuals are specifically featured, interviewed or presented in promotional material, IAA will seek appropriate permission where required.
Attendance at an event does not automatically imply consent to every possible use of an individual's image or recording.
If you do not wish to be prominently featured in published material, you may contact IAA using the privacy contact details provided in this Policy. IAA will consider reasonable requests for removal or restriction, subject to legal obligations, legitimate archival requirements, publication constraints and the nature of the material.
IAA does not operate a public or member-searchable online membership directory.
Membership information is used for authorised Association administration. Selected professional information, such as names, photographs, qualifications, designations, institutional affiliations and academic achievements, may nevertheless be published in connection with specific Association activities, awards, faculty appointments, conference programmes, academic contributions or official announcements.
Where appropriate, IAA will provide information about the intended publication and obtain consent or rely on another applicable lawful basis.
Members may contact IAA to request correction of inaccurate published information or removal of eligible material, subject to applicable legal and archival requirements.
Information submitted for scientific presentations, journal publications, abstracts and academic programmes may be published or distributed as part of the relevant academic activity.
Authors and contributors are responsible for ensuring that they have the necessary rights, permissions, patient consent and institutional approvals for material they submit.
Identifiable patient information must not be submitted through IAA platforms. The requirements in Section 3.9 apply to all academic and scientific material.
IAA's website may use cookies, pixels, tags and similar technologies.
These technologies help the website function properly and improve the visitor experience.
Essential Cookies
Required for website functionality, security, login sessions and other essential services.
Analytics Cookies
Used to understand website traffic, visitor behaviour and website performance.
Preference Cookies
Used to remember user preferences and improve website usability.
Marketing and Third-Party Cookies
May be used where third-party integrations or promotional services require them.
IAA uses Google Analytics and Google Tag Manager or associated Google technologies to monitor website performance and understand visitor interactions.
These technologies may collect technical information such as IP address, browser details, device information, pages visited and interaction data, depending on the configuration.
Information may be processed by Google in accordance with Google's applicable terms and privacy policies.
Where required by applicable law, non-essential cookies and tracking technologies will be activated only after obtaining appropriate consent.
Users may manage cookie preferences through the website's cookie settings, where available, or through their browser settings.
Disabling certain cookies may affect website functionality.
IAA will endeavour to provide appropriate information about the cookies and third-party technologies used on its website.
IAA's website and application may contain links or integrations with external websites and services, including:
These third-party services operate under their own privacy policies and terms of use.
IAA does not control the privacy practices, security standards or content of independent third-party websites.
Users are encouraged to review the privacy policies of external services before submitting personal information.
IAA may communicate with users through email, SMS, WhatsApp, push notifications and other authorised communication channels.
Communications may include:
Certain communications are necessary for providing requested services and managing membership accounts. These may include application updates, payment confirmations, event registration information, security alerts and important administrative notices.
Such communications may continue even if an individual unsubscribes from optional promotional communications, where they are necessary for the requested service or permitted by applicable law.
Users may unsubscribe from optional newsletters and promotional communications through the available unsubscribe mechanism or by contacting IAA.
IAA may occasionally facilitate industry-sponsored educational communications or promotional messages.
Members' personal contact information will not be shared with industry partners for their independent marketing activities without separate, voluntary consent or another lawful basis.
Participation in industry-sponsored or promotional communications is optional and will not affect membership, eligibility for Association activities or access to IAA services.
Where a communication is sponsored by an industry partner, its sponsored nature should be made clear wherever appropriate.
Essential administrative, transactional and security-related communications will remain separate from optional industry-sponsored and promotional communications.
IAA accepts membership applications and registrations from individuals in India and other countries.
Some technology and communication providers engaged by IAA may process or store personal information on servers located outside India.
Where personal information is transferred internationally, IAA will take reasonable steps to ensure that such transfers comply with applicable Indian and international data protection requirements.
Where GDPR applies, international transfers will be carried out using an appropriate transfer mechanism or safeguard recognised by applicable law.
IAA will also comply with applicable restrictions imposed by the Government of India concerning transfers of personal data to specified countries or territories, where relevant.
IAA retains personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Different categories of information may be retained for different periods.
Examples include:
| Information Category | Retention Purpose |
|---|---|
| Membership records | Membership administration and historical records |
| Professional documents | Verification and membership eligibility |
| Financial records | Accounting, taxation and legal compliance |
| Conference records | Academic and administrative records |
| Communication records | Enquiries, support and dispute resolution |
| Website logs | Security, troubleshooting and analytics |
| Application data | Account management and service delivery |
| Photographs and videos | Academic, archival and communication purposes |
When personal information is no longer required, IAA will take reasonable steps to delete, anonymise or securely dispose of it, subject to applicable legal and archival requirements.
IAA may retain certain information even after an account is closed where required for legal compliance, financial audits, dispute resolution or legitimate historical Association records.
IAA does not apply a single blanket retention period to all categories of information. Financial, accounting, statutory and other records will be retained for the periods required by the applicable laws and regulations.
IAA takes reasonable technical and organisational measures to protect personal information against:
Depending on the nature of the information and the services involved, safeguards may include:
Access to personal information is restricted to individuals who require it for legitimate Association-related duties.
While IAA endeavours to maintain appropriate safeguards, no internet transmission or electronic storage system can be guaranteed to be completely secure.
Users are responsible for maintaining the confidentiality of their login credentials and should not share their passwords or authentication codes with others.
In the event of a personal data breach, IAA will take reasonable steps to:
Where the Indian DPDP Act and Rules require notification to the Data Protection Board of India or affected individuals, IAA will comply with the applicable reporting requirements and timelines.
IAA will also comply with applicable cybersecurity incident reporting and log-retention directions issued by CERT-In, including the six-hour reporting requirement for specified categories of cybersecurity incidents and applicable 180-day log-retention requirements, where relevant.
The six-hour CERT-In reporting requirement applies to the incident categories covered by the applicable directions; it should not be interpreted as a universal reporting deadline for every personal data breach.
Subject to applicable law and the nature of the processing, individuals may have the following rights.
You may request information about the personal data processed by IAA and the purposes for which it is processed.
You may request correction of inaccurate or incomplete personal information.
You may request completion of personal information that is incomplete, where applicable.
You may request deletion of personal information where it is no longer necessary or where applicable law grants such a right.
IAA may retain information where retention is required by law or necessary for legitimate legal, accounting or archival purposes.
Where processing is based on consent, you may withdraw your consent.
Withdrawal will not affect the lawfulness of processing carried out before withdrawal.
You may raise concerns regarding the collection, use, processing or protection of your personal information.
Where provided under applicable Indian law, you may nominate another individual to exercise your privacy rights in the event of death or incapacity.
Where GDPR or UK GDPR applies, additional rights may include:
Where the CCPA/CPRA applies to IAA's processing activities, eligible California residents may have rights including:
IAA does not sell personal information for monetary consideration.
Individuals may submit privacy requests through the contact details provided in this Policy.
To submit a privacy-related request, please contact:
Primary Email: secretaryiaa2427@gmail.com
Office Email: office@indianarthroplastyassociation.com
Please include:
IAA may request reasonable information to verify your identity before processing a request.
IAA will acknowledge and address requests within the timelines prescribed by applicable law. Where a request cannot be fulfilled, IAA will provide an appropriate explanation, subject to legal restrictions.
IAA is committed to addressing privacy-related complaints and concerns in a transparent and timely manner.
Individuals may contact IAA regarding:
Designated Grievance Officer:
Secretary, Indian Arthroplasty Association
Primary Email: secretaryiaa2427@gmail.com
Office Email: office@indianarthroplastyassociation.com
Postal Address:
Dr. Debabrata Padhy
Secretary, Indian Arthroplasty Association
Top Bone and Joint Clinic
96/2451, Phase 7, Sailashree Vihar
Bhubaneswar, Odisha – 751021, India
IAA aims to:
These are IAA's voluntary service targets and do not replace or override any statutory timeline. Where applicable law prescribes a different or shorter period, the statutory requirement will prevail. Where a complaint requires additional investigation or information, IAA will communicate the expected next steps.
Where the Indian DPDP framework applies, individuals may exercise their rights and seek remedies through the mechanisms prescribed under that legislation, including approaching the Data Protection Board of India where legally available.
Where GDPR or another applicable international law applies, individuals may also have the right to approach the relevant data protection supervisory authority.
IAA's services are primarily intended for medical professionals, researchers, students and other individuals engaged in medical education and professional activities.
IAA does not knowingly collect personal information directly from children for independent membership or general account creation.
Where applicable law requires parental or guardian consent for processing a child's personal information, IAA will implement the necessary safeguards.
If IAA becomes aware that a child's personal information has been collected inappropriately, it will take reasonable steps to address the situation.
IAA does not intend to make decisions concerning membership eligibility, fellowship selection or other significant individual matters solely through automated processing without appropriate human oversight.
Automated systems may be used for routine administrative activities such as:
Where applicable law provides rights concerning automated decision-making, individuals may exercise those rights through the privacy contact provided in this Policy.
Members and registered users are responsible for:
IAA reserves the right to restrict or suspend accounts where necessary to protect the security and integrity of its digital services, subject to applicable law and relevant Association rules.
IAA may publish information relating to professional achievements, academic contributions, awards, conference participation, faculty appointments and other Association activities.
Such information may appear on the website, in newsletters, publications, conference material and other official communication channels.
Individuals submitting information for publication are responsible for ensuring that they have the necessary permissions and rights to submit that material.
IAA will take reasonable steps to address requests for correction of inaccurate published personal information, subject to the nature of the publication and applicable legal and archival requirements.
The publication of professional or academic information does not create or imply a public membership directory.
Patient-identifiable information must not be included in submitted academic or scientific material. The requirements in Section 3.9 apply.
IAA may engage service providers to support its digital infrastructure and administrative activities.
These may include providers of:
IAA expects such providers to implement appropriate safeguards and process information only for authorised purposes under applicable contractual arrangements.
Some providers may independently determine how they process certain information under their own privacy policies. In such cases, their respective privacy notices will also apply.
IAA may update this Privacy Policy periodically to reflect:
The updated version will be published on the official IAA website with a revised Last Updated date.
Where required by applicable law, IAA will provide appropriate notice and seek fresh consent for material changes in processing purposes.
Users are encouraged to review this Policy periodically.
For questions, requests or concerns relating to this Privacy Policy or the handling of personal information, please contact:
Indian Arthroplasty Association (IAA)
Official Website: https://indianarthroplastyassociation.com/
IAA Secretariat:
Dr. Debabrata Padhy
Secretary, Indian Arthroplasty Association
Top Bone and Joint Clinic
96/2451, Phase 7, Sailashree Vihar
Bhubaneswar, Odisha – 751021, India
Email: secretaryiaa2427@gmail.com
Office Email: office@indianarthroplastyassociation.com
This Privacy Policy shall be interpreted in accordance with the applicable laws of India, including relevant data protection and information technology legislation.
Nothing in this Policy is intended to exclude, restrict or override mandatory rights available to individuals under applicable foreign data protection legislation, including GDPR, UK GDPR and California privacy laws, where such legislation applies.
Any disputes shall be subject to the jurisdiction of competent courts in India, subject to mandatory legal rights and jurisdictional requirements under applicable law.
END OF PRIVACY POLICY
This Privacy Policy is intended to describe IAA's data-handling practices and provide information about individuals' privacy rights. It should be read together with the applicable terms and conditions of IAA's website, mobile application and associated services.