Last Updated: June 1, 2025
At Shashi Advanced Health Clinics, we are committed to protecting your privacy and ensuring the security of your personal and medical information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data when you visit our website or use our services.
Information We Collect
We may collect the following types of information:
- Personal Identification Information: Name, phone number, email address, date of birth, and government-issued ID (where required for medical records).
- Medical Information: Health history, symptoms, diagnoses, treatment plans, lab reports, imaging records, and medication details.
- Payment Information: Billing details, insurance information, and transaction records (processed securely through compliant third-party gateways).
- Technical Data: IP address, browser type, device information, cookies, and usage patterns when you interact with our website.
- Communication Data: Records of calls, emails, WhatsApp messages, and consultation notes exchanged with our team.
How We Use Your Information
Your information is used solely for legitimate healthcare and operational purposes, including:
- Providing medical consultations, diagnosis, treatment, and follow-up care.
- Maintaining accurate and confidential medical records as required by Indian healthcare regulations.
- Processing appointment bookings, cancellations, and reminders.
- Communicating with you regarding test results, prescriptions, and health advice.
- Improving our website, services, and patient experience through analytics.
- Complying with legal and regulatory obligations under Indian law.
Data Protection & Security
We implement robust technical and organizational measures to safeguard your data, including:
- Encryption of sensitive data during transmission (SSL/TLS).
- Access controls restricting employee access to patient data on a need-to-know basis.
- Secure storage of physical and electronic medical records.
- Regular security audits and staff training on data privacy.
- Use of HIPAA-compliant practice management software where applicable.
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you of any data breach affecting your information as required by applicable law.
Confidentiality & HIPAA Compliance (Indian Context)
We treat all patient information as strictly confidential, in accordance with:
- The Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002, which mandates doctor-patient confidentiality.
- The Information Technology Act, 2000, and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, governing the handling of sensitive personal data in India.
- The Digital Personal Data Protection Act, 2023 (DPDP Act), which establishes comprehensive data protection standards for all Indian entities handling personal data.
- Industry best practices aligned with HIPAA principles for the protection of health information.
Your medical information will not be disclosed to third parties without your explicit written consent, except where required by law (e.g., court order, public health reporting, or medical emergency).
Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience. These include:
- Essential Cookies: Required for the basic functionality of the website.
- Analytics Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics).
- Functional Cookies: Remember your preferences for a personalized experience.
You may control cookie settings through your browser preferences. Disabling certain cookies may affect website functionality. We do not use cookies to collect personal health information.
Third-Party Services
We may engage trusted third-party service providers for the following purposes:
- Website hosting and maintenance.
- Payment processing (secure, PCI-compliant gateways).
- Email and WhatsApp communication platforms.
- Analytics and search engine services (e.g., Google).
- Cloud-based practice management and electronic health record systems.
These third parties are contractually bound to protect your data and are not permitted to use it for any purpose other than the services they provide to us.
Your Rights
You have the right to:
- Access your personal and medical records held by us.
- Request correction of inaccurate or incomplete information.
- Request deletion of your data, subject to legal retention requirements for medical records.
- Withdraw consent for the use of your data for marketing or non-essential purposes.
- File a complaint with the relevant data protection authority in India.
To exercise any of these rights, please contact us using the details below.
Retention of Data
We retain medical records for the period mandated by Indian law and medical council guidelines. After the retention period, records are securely destroyed or anonymized. Non-medical personal data is retained only as long as necessary for the purpose for which it was collected.
Children's Privacy
Our services are directed to patients of all ages, including minors. For children under 18, we obtain parental or guardian consent before collecting any personal or medical information. Parents and guardians have the right to access and request correction of their child's records.
Changes to This Privacy Policy
We reserve the right to update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Material changes will be communicated to registered patients via email or SMS.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please reach out to us:
Shashi Advanced Health Clinics
HSR Layout: 24th Main Rd, 1st Sector, HSR Layout, Bengaluru 560102
Vijayanagar: 4, 1st Main Rd, Prashant Nagar, Vijayanagar, Bengaluru 560079
Phone: +91-72048 97249
Email: info@shashiadvancedhealth.com
