Privacy Policy

Category A: Website & Digital Interaction Data

Data collected when you browse our website, submit non-clinical general inquiries, or interact with digital widgets:

• Contact details: Name, email address, phone number submitted through contact inquiry forms.
• Technical telemetry: IP address, browser type, device operating system, referring URLs, and pages viewed.
• Analytics & Cookies: Aggregated session analytics to measure website speed, navigation performance, and accessibility engagement.
• Communication logs: General customer support inquiries and website feedback.

Category B: Clinical & Medical Information

Data collected when you schedule clinical consultations, submit medical history for appointments, or receive care:

• Patient identification: Full legal name, date of birth, age, gender, emergency contact person details.
• Clinical history: Medical history voluntarily provided during online intake, diabetes logs, geriatric care requirements, current medications, allergy details.
• Diagnostic & Lab records: Pathology lab reports, prescription slips, blood glucose charts uploaded for physician review.
• Consultation & Billing notes: Doctor appointment summaries, visit dates, treatment plans, and invoice records.

Direct Patient Submissions

• Submitting an appointment request form or consultation booking.
• Communicating with our clinic via official WhatsApp, telephone, or email.
• Completing voluntary pre-consultation medical assessment questionnaires.

Automated Digital Collection

• Essential cookies necessary for website security and CSRF protection.
• Anonymized aggregate traffic metrics through privacy-respecting analytics.

Permitted Operational Disclosures

• With certified diagnostic laboratories when you request integrated blood tests or pathology services.
• With technology infrastructure partners hosting our secure booking systems under strict non-disclosure and data processing agreements.
• When mandatory by applicable Indian law, court subpoenas, or authorized statutory public health directives.

Technical & Physical Safeguards

• Encrypted data transmission across the website using modern HTTPS / TLS security protocols.
• Strict role-based access control (RBAC), ensuring only authorized personnel have access to specific categories of data.
• Routine server patching, firewall monitoring, and vulnerability assessments.
• Physical access controls at clinic premises where medical records and diagnostic terminals are situated.

Your Entitlements

• Right to Access: Request a summary of personal information and clinical consultation records maintained by the clinic.
• Right to Correction: Request prompt correction of inaccurate demographic, contact, or clinical background details.
• Right to Revoke Consent: Withdraw consent for non-essential communications (such as clinic health awareness newsletters or seasonal health checkup reminders).
• Right to Grievance Redressal: Lodge queries or concerns directly with our designated Privacy & Grievance Officer.