Privacy Policy

1Introduction

Sudheer Hospital ("Hospital", "we", "us", "our") is committed to protecting the privacy of patients, visitors, and users of our website located at sudheerhospital.com ("Website") and our associated patient services. This Privacy Policy explains how we collect, use, store, share, and protect personal information, including health-related information, in accordance with applicable Indian laws, including the Information Technology Act, 2000 and the rules made thereunder, the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and applicable clinical establishment and medical record-keeping regulations.

By accessing our Website, registering for services, visiting the Hospital, or otherwise providing us with your personal information, you consent to the practices described in this Privacy Policy.

2Information We Collect

We may collect the following categories of information:

• Identity & Contact Information: Name, age, gender, date of birth, address, phone number, email address, and government-issued identification (e.g., Aadhaar, PAN) where required for billing, insurance, or regulatory purposes.
• Health & Medical Information: Medical history, diagnosis, treatment records, prescriptions, lab and diagnostic reports, allergies, insurance details, and other information generated during consultation, admission, or treatment.
• Appointment & Communication Data: Details submitted through appointment forms, WhatsApp, phone calls, email, or in-person registration.
• Billing & Payment Information: Billing address, payment method details, and insurance/TPA information (payment card details are processed by our authorised payment gateway partners and are not stored by us).
• Technical & Usage Data: IP address, browser type, device information, pages visited, and time spent on the Website, collected automatically via cookies and similar technologies.

3How We Use Your Information

We use the information collected for purposes including:

• Providing medical consultation, diagnosis, treatment, and continuity of care;
• Scheduling and managing appointments and OPD/emergency visits;
• Processing billing, insurance claims, and TPA reimbursements;
• Complying with statutory and regulatory record-keeping obligations under Indian healthcare laws;
• Communicating appointment reminders, reports, and relevant health information;
• Improving our Website, services, and patient experience; and
• Responding to queries, feedback, and grievances.

4Sensitive Personal Data & Health Records

Health and medical records are treated as Sensitive Personal Data under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and as digital personal data under the DPDP Act, 2023. We apply enhanced safeguards to such data and limit access strictly to treating physicians, authorised clinical staff, and administrative personnel who require it to perform their duties.

Medical records are maintained in accordance with applicable retention requirements under Indian medical record-keeping norms and the Hospital's internal record retention policy.

5Legal Basis & Consent

We collect and process personal data based on:

• Consent provided by you at the time of registration, appointment booking, or admission;
• Performance of medical services requested by you;
• Compliance with legal obligations, such as statutory reporting requirements; and
• Legitimate medical interest, including emergency treatment where consent cannot be obtained in time.

You may withdraw consent for non-essential uses (such as marketing communication) at any time by contacting us using the details in Section 13.

6Sharing & Disclosure of Information

We do not sell or rent personal information. We may share information with:

• Treating doctors, specialists, and diagnostic/lab partners involved in your care, including referrals;
• Insurance companies and Third-Party Administrators (TPAs) for claim processing, where applicable;
• Government and regulatory authorities where required by law (e.g., notifiable disease reporting, court orders);
• IT and hosting service providers who process data on our behalf under confidentiality obligations; and
• Family members or authorised representatives, where reasonably necessary for treatment coordination.

7Data Storage, Security & Retention

We implement reasonable technical and organisational security measures, including access controls, encryption of data in transit, and restricted staff access, to protect personal and health information against unauthorised access, alteration, disclosure, or destruction.

Personal and medical data is retained for the period required to provide ongoing care and to meet statutory retention obligations, after which it is securely archived or disposed of in accordance with our data retention procedures.

8Cookies & Website Analytics

Our Website may use cookies and similar tracking technologies to improve functionality and understand visitor behaviour. You can control or disable cookies through your browser settings; however, some Website features may not function properly if cookies are disabled.

9Your Rights

Subject to applicable law, you have the right to:

• Access a copy of your medical records, subject to the Hospital's standard record-request procedure;
• Request correction of inaccurate or incomplete personal information;
• Withdraw consent for non-treatment-related processing (e.g., promotional communication);
• Raise a grievance regarding the handling of your personal data (see Section 11).

10Minors' Data

Where treatment or services involve a minor, we collect and process personal data with the consent of the minor's parent or legal guardian, in accordance with applicable law.

11Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, and the DPDP Act, 2023, the Grievance Officer for Sudheer Hospital can be contacted for any questions, concerns, or complaints regarding this Privacy Policy or the handling of your personal data.

12Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when this Policy was last revised. We encourage you to review this page periodically.

13Contact Us

If you have any questions about this Privacy Policy or how your information is handled, please contact us: