Privacy Policy

The entity responsible for your personal data is:

We collect only what we need for the purpose you approached us for. This is the itemised notice required under Section 5 of the DPDP Act.

Clinical records created during your treatment at the hospital — case sheets, prescriptions, investigation reports and similar — are not collected through this website. They are maintained separately in our hospital records under applicable medical record-keeping requirements, and are handled by our clinical staff, not by this website.

This website does not use advertising cookies, tracking pixels, or third-party analytics profiling. We do not sell your data, and we do not use it for behavioural advertising.

Some pages embed a Google Map so you can find the hospital. Loading that map means Google may receive your IP address and set its own cookies, governed by Google’s privacy policy rather than ours. If you would rather not load it, you can reach us using the address and phone numbers printed on the Contact page.

Your data is used only for the purposes listed above. We share it only where necessary, and never for anyone else’s marketing:

• With our own doctors and staff — so your appointment can be scheduled and attended.
• With our technology providers (Data Processors) — this website and its database run on Google Firebase, and appointment notifications are delivered by email and, where you have opted in, WhatsApp. These providers process data only on our instructions.
• Where the law requires it — for example in response to a lawful order from a court, regulator or government authority.

Some of these providers may store or process data on servers outside India. Where that happens, it is done in accordance with Section 16 of the DPDP Act and any restrictions notified by the Central Government.

We keep appointment and enquiry records only for as long as they serve the purpose you gave them for, plus any period we are required to retain them by law. When you withdraw consent, or when it is reasonable to assume the purpose is no longer being served, we erase the data — except where retention is required under any law in force.

Clinical records made during treatment are retained for the periods prescribed by applicable medical record-keeping requirements, which are longer than the periods above.

We apply reasonable security safeguards to prevent a personal data breach, including:

• Encryption of data in transit between your device and our servers (HTTPS)
• Database access rules that make appointment and enquiry records unreadable to the public, and writable only through validated submissions
• Access to the hospital's administration panel restricted to authorised staff accounts, each individually granted
• Regular review of who holds access, and prompt removal when a staff member no longer needs it

In the event of a personal data breach, we will notify you and the Data Protection Board of India as required under the DPDP Act.

As a Data Principal under the DPDP Act, you have the following rights. There is no charge for exercising them.

• Right to access — to obtain a summary of the personal data we hold about you, how we are processing it, and who we have shared it with.
• Right to correction and erasure — to have inaccurate or misleading data corrected, incomplete data completed, data updated, and data erased where it is no longer needed for the purpose it was collected for.
• Right to withdraw consent — you may withdraw your consent at any time, and doing so will be as easy as it was to give it. Withdrawal does not affect processing already carried out lawfully before you withdrew.
• Right to grievance redressal — to have a complaint about our handling of your data addressed by us, before approaching the Data Protection Board.
• Right to nominate — to nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these, contact our Grievance Officer using the details in section 10. Please tell us enough to identify your record — for example the reference number shown when you submitted an appointment request, or the mobile number you used.

You also have duties under Section 15 of the DPDP Act, including not impersonating another person when providing data and not filing false or frivolous complaints.

This website is not directed at children. Where an appointment is being requested for a person under 18 years of age, or for a person with a disability who has a lawful guardian, the request must be submitted by the parent or lawful guardian, who thereby gives consent on that person’s behalf.

We do not carry out tracking, behavioural monitoring or targeted advertising directed at children, and we do not knowingly process a child’s personal data in any way likely to cause harm.

We may update this policy as our services or the law change. The revised version will be published on this page with a new “last updated” date. Where a change materially affects how we use data you have already given us, we will seek fresh consent where the law requires it.

If you have a question or complaint about how we handle your personal data, contact our Grievance Officer:

We aim to acknowledge every grievance promptly and resolve it within a reasonable period. If you are not satisfied with our response, you may complain to the Data Protection Board of India in the manner prescribed under the DPDP Act.