Privacy Policy

Effective Date: 14 February, 2025
Last Updated: February 14, 2025

Radhe Krishna Multi-speciality Hospital & Trauma Centre is committed to protecting patient confidentiality and personal data in accordance with Indian healthcare and data protection laws. This Privacy Policy explains how we collect, use, disclose, and protect your personal and medical information when you visit our website www.radhekrishnahospitals.com or avail of our healthcare services.

1. Information We Collect

We collect and process the following categories of personal and medical data as per the IT Act, 2000 & SPDI Rules, 2011:

1.1 Personal & Medical Information Provided by You

• Basic Details: Name, age, gender, contact details (phone, email, address).
• Health Information: Medical history, prescription details, diagnostic reports, and treatment records.
• Sensitive Data: Blood type, allergies, past surgeries, and other health-related details.
• Financial Data: Payment details for billing and hospital services.
• Other Information: Any data provided during consultations, emergency treatments, or online bookings.

1.2 Automatically Collected Information

• Device & Browsing Data: IP address, browser type, and device information for analytics and security.
• Cookies & Tracking Data: Website usage statistics to enhance patient experience.

Note: We only collect medical information with your consent, except in emergency situations where legal or ethical obligations apply.

2. Purpose of Data Collection

We process personal and medical data for the following lawful purposes:

Medical Services: Diagnosis, treatment, medical consultations, and healthcare management.
Appointments & Follow-ups: Booking, rescheduling, reminders, and post-treatment care.
Legal & Regulatory Compliance: Maintaining medical records as required by the Clinical Establishments Act, 2010.
Payment Processing: Managing hospital bills, insurance claims, and secure transactions.
Research & Quality Improvement: Using anonymized data for medical research and service enhancement.
Marketing & Communication: Sending health awareness updates (only with patient consent).

We do not process data for purposes unrelated to healthcare without your consent.

3. How We Protect Your Data

We implement Reasonable Security Practices and Procedures as per the SPDI Rules, 2011:

Data Encryption: Personal and medical data is securely stored and transmitted.
Access Control: Only authorized doctors and staff can access patient records.
Regular Audits: Compliance checks to ensure data protection.
Data Minimization: We only collect necessary information for medical purposes.

Patients have the right to review their medical records, as per the Indian Medical Council (Ethics) Regulations, 2002.

4. Data Sharing & Third-Party Disclosures

We do not sell or trade personal information. Data may be shared only in the following cases:

• With Doctors & Healthcare Professionals for patient treatment.
• With Insurance Providers for claims processing (with patient consent).
• With Legal & Government Authorities if required by law (e.g., court orders, public health emergencies).
• With Third-Party Service Providers (e.g., diagnostic labs, payment gateways) strictly for medical purposes.

We ensure that all third parties comply with Indian data protection regulations.

5. Data Retention Policy

Medical Records: Retained as per the guidelines of the Clinical Establishments Act, 2010 & Medical Council of India (MCI) Regulations.
Billing & Financial Data: Retained for at least 8 years for audit and tax compliance.
Website Usage Data: Retained for 12 months for service improvements.

Upon request, patients can obtain copies of their medical records.

6. Your Rights Under Indian Data Protection Laws

As per the Digital Personal Data Protection Act, 2023, you have the following rights:

Right to Access: Request copies of your medical or personal data.
Right to Correction: Update inaccurate health records or personal details.
Right to Data Portability: Request transfer of medical records to another doctor/hospital.
Right to Restrict Processing: Opt-out of marketing communications.
Right to Withdraw Consent: Withdraw consent for non-essential data processing.

To exercise these rights, email us at: privacy@radhekrishnahospitals.com

7. Cookies & Online Tracking

We use cookies for:

• Session Management: Keeping track of online appointment bookings.
• Analytics & Performance Monitoring: Improving website functionality.

Patients can disable cookies in their browser settings.

8. Compliance with Indian Laws

This Privacy Policy aligns with the following Indian legal frameworks:

IT Act, 2000 & SPDI Rules, 2011 – Governing sensitive personal data.
Digital Personal Data Protection Act, 2023 – Ensuring patient rights and privacy.
Clinical Establishments Act, 2010 – Regulating healthcare providers.
Medical Council of India Regulations, 2002 – Medical ethics & confidentiality.

We adhere to strict medical confidentiality rules as per Indian healthcare laws.

9. Policy Updates & Changes

This Privacy Policy may be updated periodically. Changes will be posted on this page with the "Last Updated" date. Patients are advised to review the policy regularly.

10. Contact Information

For privacy concerns, data access, or complaints, contact us:

Radhe Krishna Multispeciality Hospital & Trauma Centre
Address: Street No. 12, Mangalpur Chowk, Kunjpura Road, Karnal-132001, Haryana
Phone: +91 95184-50517
Email: privacy@radhekrishnahospitals.com
Website: www.radhekrishnahospitals.com

For complaints, patients may also approach the Data Protection Authority of India.