Privacy Policy at Aditya Birla Memorial Hospital

1. Introduction

Aditya Birla Memorial Hospital ("ABMH") is committed to protecting the personal data and privacy of patients, visitors, caregivers, and users of its digital platforms. This Privacy Policy is issued in accordance with the Digital Personal Data Protection Act, 2023 and all other applicable laws and regulations. By using ABMH's services or digital platforms, you acknowledge and accept the practices described in this Policy.

2. Information We Collect

Personal Information

• Full name
• Mobile number
• Email address
• Date of birth
• Gender
• Residential and correspondence address

Health & Clinical Information

• Medical history and clinical records
• Prescriptions and treatment plans
• Laboratory and diagnostic reports
• Insurance details and coordination records

Digital & Technical Information

• Device information and browser details
• IP address and geolocation data
• Cookies and usage analytics

3. Purpose of Collection and Use

ABMH collects and processes information solely for legitimate healthcare, operational, and regulatory purposes, including:

• Appointment scheduling and management
• Patient identification and clinical care delivery
• Teleconsultation services
• Billing, payment processing, and insurance coordination
• Compliance with applicable regulatory and statutory requirements
• Continuous service improvement and patient communication

4. Consent

By using ABMH's digital platforms, you expressly consent to the collection, storage, and processing of your information for the purposes described in this Policy. Where required by law, ABMH will seek explicit, informed consent before processing sensitive personal or health data.

You may withdraw consent at any time by contacting the Privacy Officer, subject to applicable legal or contractual obligations that may require continued retention of certain data.

5. Data Sharing

ABMH may share your information only for legitimate business, healthcare, and legal purposes with:

• Treating physicians, consultants, and clinical teams
• Diagnostic partners and laboratory service providers
• Insurance providers and third-party payers
• Regulatory and statutory authorities as required by law
• Technology and infrastructure service providers under strict confidentiality obligations

ABMH does not sell, trade, or rent personal information to any third party for commercial purposes.

6. Data Security

ABMH implements reasonable and appropriate administrative, technical, and physical safeguards to protect your information against unauthorised access, disclosure, alteration, or destruction, including:

• Data encryption in transit and at rest
• Role-based access controls and two/multi-factor authentication
• Audit logging and security monitoring
• Periodic security assessments and staff training

7. Patient Rights

Subject to applicable law, patients and data principals have the right to:

• Access personal data held by ABMH
• Request correction of inaccurate or incomplete information
• Withdraw consent where processing is based solely on consent
• Raise a grievance and seek review by the designated Privacy Officer

8. Data Retention

ABMH retains personal and health data for such periods as are necessary to fulfil the purposes described in this Policy and as required under applicable healthcare, legal, taxation, and regulatory obligations. Data no longer required will be securely deleted or anonymised in accordance with applicable guidelines.

9. Cookies and Analytics

ABMH's website and digital platforms may use cookies and analytics technologies to improve user experience, analyse usage patterns, and optimise services. Users may manage or disable cookie preferences through their browser settings; however, certain functionalities may be limited if cookies are disabled.

10. Children's Privacy

For patients who are minors (under 18 years of age), ABMH shall obtain consent from their parents or legal guardians wherever required under applicable law. ABMH does not knowingly collect personal data from minors without appropriate parental or guardian consent.

11. Grievance Officer

For any privacy-related concerns, requests, or complaints, please contact:

Privacy Officer

Aditya Birla Memorial Hospital Chinchwad, Pune, Maharashtra

Email: ITSecurity@adityabirlahospital.com

Response Time: Within 15 working days of receipt of the grievance.

12. Policy Updates

ABMH reserves the right to revise this Privacy Policy from time to time to reflect changes in law, technology, or business operations. The updated Policy shall be published on the ABMH website and mobile application with the revised effective date. Continued use of ABMH services after such updates constitutes acceptance of the revised Policy.