Privacy Policy
Edappal Hospitals Pvt Ltd is committed to protecting the privacy and confidentiality of your personal data, especially your sensitive personal data and health information. This policy describes how we collect, use, process, and disclose the personal information we receive through our website, hospital services, and electronic communications.
Our Commitment to Privacy
Edappal Hospitals Pvt Ltd is required by law to maintain the privacy of your medical and personal information, to provide you with this written Notice of Privacy Rights and Practices, and to abide by the terms of the Notice currently in effect.
We assure you that we take your privacy seriously and will keep your personal and sensitive data confidential in compliance with all applicable Indian laws, including the Digital Personal Data Protection (DPDP) Act, 2023, and the Information Technology Act, 2000, and its rules.
Information We Collect
We collect information that falls under two main categories:
| Category | Illustrative Examples |
|---|---|
| Personal Data | Name, date of birth, age, gender, address, email address, mobile/telephone number, and other official identification details. |
| Sensitive Personal Data (Health & Financial) | Medical records and history (including prescriptions, test results, diagnosis, and treatment details), physical, physiological and mental health condition, valid financial information (e.g., insurance details, payment information), and biometric data (if collected for identification). |
| Usage Data | Information automatically collected when you visit our website, such as your IP address, browser type, device information, pages viewed, and time spent on the website. |
How We Collect Information
We collect your information through the following means:
- Directly from You: When you register for services, book appointments, complete medical forms, or communicate with us via email or phone.
- From Third Parties: From your insurance providers, other healthcare providers (with your consent), and diagnostic laboratories.
- Automatically: Through our website using cookies, web analytics, and other tracking technologies to enhance user experience (as detailed in our [Link to Cookie Policy/Section]).
Purpose and Use of Collected Information
We collect and process your Personal Data and Sensitive Personal Data for the following lawful purposes:
- Patient Care: To provide quality medical treatment, diagnosis, and healthcare services.
- Administration: For patient registration, managing appointments, maintaining electronic medical records (EMR/EHR), and internal hospital operations.
- Billing & Payment: For processing payments, generating bills, and facilitating health insurance claims.
- Legal Compliance: To comply with legal, regulatory, and statutory obligations (e.g., mandatory reporting to government authorities).
- Communication: To send you essential updates, appointment reminders, laboratory results, or health-related information.
- Website Improvement: To monitor and analyse website usage to improve the content and functionality of our digital platforms.
Consent and Withdrawal
By using our services or submitting your personal information, you provide your free, specific, informed, and unambiguous consent to the collection, storage, processing, and disclosure of your data in accordance with this Privacy Policy.
- You have the right to withdraw your consent at any time by sending a written request to the designated authority at the hospital.
- Please note that the withdrawal of consent may restrict our ability to fulfill the purposes for which the said information was sought, and we may be unable to provide you with certain services.
Disclosure of Information to Third Parties
We shall not intentionally share the contents of any person with any outside authorities or any third party, except under the following circumstances:
- Treatment & Referral: To other healthcare providers, laboratories, or specialists involved in your care.
- Insurance & Payment: To insurance companies, third-party administrators (TPAs), and payment processors for billing and claim purposes.
- Legal Obligation: If required by law, court order, statutory regulation, or government/regulatory authority.
- Service Providers: To third-party service providers who help us with IT, data storage, or administrative functions, under strict non-disclosure agreements.
- Public Interest: Where disclosure is necessary for preventing or investigating a crime, or to protect the life or health of the individual or the public.
Data Security and Confidentiality
- Edappal Hospitals Pvt Ltd implements reasonable security practices and procedures (including physical, technical, and managerial safeguards) to protect your personal data from unauthorised access, loss, misuse, disclosure, alteration, and destruction, in compliance with Indian law.
- Disclaimer on Electronic Communications: We do not guarantee or assure that the electronic communications received from you or contents or records may not be accessible to third parties. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. You send such communications at your own risk.
Data Retention
We will retain your Personal Data only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law (e.g., maintaining medical records for the duration mandated by the Clinical Establishments Rules). After the required period, your data will be securely destroyed or anonymized.
Changes to the Privacy Policy
Edappal Hospitals Pvt Ltd reserves the right to update or modify this Privacy Policy periodically to reflect changes in legal requirements or our operational practices. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy regularly.
Grievance Redressal and Contact Information
If you have any questions, concerns, or grievances regarding the processing of your personal data or this Privacy Policy, please contact us:
Contact Method Detail
- Hospital Email: info@edappalhospitals.org
- Hospital Phone: +91 494 2660 200
- Postal Address: Edappal Hospitals Pvt. Ltd.Edappal, Malappuram, Kerala, India