Patient Privacy and Data Protection Policy

Effective from: Since inception

KD Hospital (“we”, “us”, or “our”) respects and values the privacy of every individual who interacts with us. This Privacy Policy outlines how we collect, store, use, disclose, and protect your personal information when you use our website or avail of our services. By accessing our website or providing your information, you agree to the terms of this Privacy Policy.

This policy aligns with applicable Indian laws, including the Information Technology Act of 2000.

1. Scope
This policy applies to all visitors, patients, caregivers, healthcare professionals, and users who interact with us via our website, mobile applications, social media, or in person at our hospital premises.

2. Collection of Personal Information

We collect personal information through various means including, but not limited to:

• Patient registration forms
• Online consultations or appointment bookings
• Interactions with hospital representatives
• Website usage, forms, social media, or cookies

The types of personal information collected may include:

• Name, age, gender
• Contact information: address, phone number, email
• Medical history and health records
• Payment and billing details
• IP address, device and browser data
• Any other information voluntarily provided

3. Use of Information

Your personal information may be used for:

• Delivering quality medical care and related services
• Appointment scheduling and follow-ups
• Health records management
• Billing and financial transactions
• Communicating health updates, reminders, or service-related notifications
• Improving our services, infrastructure, and user experience
• Legal and regulatory compliance

4. Consent

By accessing our services or providing personal data, you consent to the collection, use, and sharing of your information in accordance with this policy. You may withdraw consent at any time by writing to us (see Clause 9), although this may affect our ability to provide services.

5. Data Sharing and Disclosure

We may collect, store, and share your personal information under the following circumstances:

• Internal Use: Your data may be accessed by authorised medical, administrative, and IT personnel for purposes such as treatment, billing, operations, and quality improvement. All internal access is governed by strict role-based permissions.
• Internal Servers: Patient records and other personal data are securely stored on our internal servers located within KD Hospital premises. These servers are protected by multiple layers of security and monitored for unauthorised access.
• Digital Platforms: Information collected through our digital platforms (including our website, mobile apps, online forms, teleconsultation portals, and WhatsApp helplines) is securely stored and integrated with our internal systems, subject to the same privacy and security protocols.
• Third-Party Service Providers: We may share data with trusted third parties such as diagnostic labs, insurance partners, IT support, or cloud service providers solely to facilitate healthcare delivery and operations. These third parties are contractually bound to maintain the confidentiality and security of your data.
• Legal Compliance: Data may be disclosed to regulatory bodies, law enforcement, courts, or other legal entities when required by applicable laws or legal obligations.
• International Data Transfers: In rare cases, if data is transferred outside India (for example, for cloud storage or international medical consultations), it is done with appropriate safeguards in line with prevailing data protection regulations.
• Sharing and Transferring of Personal Information: Once you have voluntarily provided your personal information to us, you authorise KD Hospital to exchange, transfer, share, or disclose all or any part of your information—across borders and from your country of residence to other countries worldwide—with our authorised cloud service providers, affiliates, agents, third-party service providers, partners, banks and financial institutions, or other trusted entities, for the purposes outlined in this Privacy Policy or as may be required under applicable law.

You acknowledge that some countries to which your personal information may be transferred may not have data protection laws that are as comprehensive as those in your own country. However, when such transfers occur, KD Hospital ensures that appropriate contractual safeguards are in place, requiring the recipient to comply with the principles and provisions of this Privacy Policy and to maintain adequate levels of data protection.

We do not sell, rent, or trade your personal data for any commercial gain.

6. Security Measures

We follow industry-standard security practices to protect your personal data, including:

• Encryption
• Access control protocols
• Regular audits and monitoring

Despite our efforts, no system is entirely secure. We urge you to take precautions in safeguarding your information.

7. Cookies and Web Tracking

Our website may use cookies and analytics tools to improve functionality and user experience. You can choose to disable cookies via your browser settings.

8. Retention of Information

Your personal data is retained as long as necessary for the purposes outlined or as mandated by law (usually a minimum of 3 years from last use).

9. Your Rights

You have the right to:

• Access your personal data
• Request correction or deletion of your information
• Withdraw consent for data processing

For such a request, please write to us at: contact@kdhospital.co.in

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their content or privacy practices.

11. Changes to the Policy

We may revise this Privacy Policy from time to time. Please check the “Effective Date” to know when it was last updated.

12. Grievance Redressal

If you have any concerns about your data or this policy, please contact: contact@kdhospital.co.in

Disclaimer for Medical Advice

The content on our website and digital platforms is for informational purposes only and should not be considered a substitute for professional medical advice, diagnosis, or treatment. Always consult a qualified healthcare provider with any questions regarding your medical condition.