Privacy Policy

We collect the following information when you register and use our platform:

Personal Information:

• Full name, date of birth, gender
• Contact details: mobile number, email address
• Location: city, state
• Profile photograph (optional)

Medical Information:

• Medical history, symptoms, and chief complaints
• Diagnoses, prescriptions, and treatment records
• Vital signs, lab reports, and uploaded medical documents
• Blood group, known allergies

Technical Information:

• Device type, browser, IP address (for security purposes only)
• Appointment and login history

• To facilitate online video consultations with our specialist doctors
• To maintain your medical records and prescription history
• To send appointment reminders, confirmations, and medical notifications via SMS and email
• To improve our services and ensure continuity of care
• To comply with legal and regulatory obligations under Indian law
• To verify your identity and prevent fraudulent use of the platform

We do not sell, rent, or trade your personal or medical information to any third party.

Your information may be shared only in these limited circumstances:

• Treating doctors: Your medical information is shared with the doctor handling your consultation for treatment purposes.
• Legal requirements: If required by law, court order, or government authority under Indian law.
• Emergency situations: If disclosure is necessary to protect your life or the life of another person.
• Service providers: Trusted technology partners (SMS, email) who assist in delivering notifications — bound by strict confidentiality obligations.

• All data is transmitted over HTTPS encrypted connections.
• Passwords are stored using industry-standard bcrypt hashing — never in plain text.
• Medical records and documents are stored on secure servers with restricted access.
• Video consultations are conducted over encrypted WebRTC channels.
• Access to patient data is strictly limited to authorised medical staff only.
• We regularly review our security practices to protect your information.

Our primary service is paediatric cardiac care for children. We understand the sensitivity of children's health data.

• Children's accounts must be registered and managed by a parent or legal guardian (18 years or older).
• We collect children's medical information solely for the purpose of providing medical care.
• Children's data is treated with the highest level of confidentiality.
• Parents/guardians may request access to, correction of, or deletion of their child's data at any time.

Under the Digital Personal Data Protection Act, 2023 (India), you have the right to:

• Access: Request a copy of your personal data we hold.
• Correction: Update or correct inaccurate personal information via your profile settings.
• Deletion: Request deletion of your account and associated data (subject to legal retention requirements).
• Nomination: Nominate another person to exercise your data rights in case of death or incapacity.
• Grievance: File a complaint with our Data Protection Officer or the Data Protection Board of India.

• Medical records are retained for a minimum of 7 years as required by the Indian Medical Council regulations.
• If you request account deletion, your non-medical personal data will be removed within 30 days.
• Medical records may be retained longer if required by law or for ongoing medical care.
• Anonymised data may be used for medical research and quality improvement purposes.

• We use session cookies to maintain your login state. These are deleted when you close your browser or log out.
• We do not use tracking cookies or third-party advertising cookies.
• Technical cookies are essential for the platform to function and cannot be disabled.

We may update this Privacy Policy periodically. We will notify registered users of significant changes via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

For privacy concerns, data requests, or complaints, contact our Data Protection Officer:

Sri Sathya Sai Sanjeevani Hospitals
Email: info@srisathyasaisanjeevani.org
Phone: +91 8010119000
We will respond to all data requests within 30 days.