Privacy Policy

At Aasiya Multispeciality Hospital ("we", "our", or "the Hospital"), we respect the sensitivity of medical and personal information. This Privacy Policy details how we collect, store, handle, and protect personal and medical data when you visit our facility, book an appointment through our website, or interact with our outpatient (OPD) and diagnostic services.

Our practices comply with applicable Indian laws, including the Digital Personal Data Protection Act (DPDPA), 2023, the Information Technology Act, 2000, and ethical guidelines prescribed by the National Medical Commission (NMC).

1. Information We Collect

We collect only the minimum information required to register your visit, book consultations, and ensure patient safety:

• Patient Identifiers: Full name, age, gender, guardian/relative name (for minors and elderly patients), phone number, email address, and residential address.
• Appointment Details: Selected doctor, specialty department, requested appointment slot, reason for visit, and consultation preferences.
• Billing & Payment Verification: For online appointment tokens, payment transaction references (UTR / Transaction ID, payment timestamp, and transaction screenshot if submitted). We do not store or process credit/debit card numbers or UPI PINs; all payments occur directly inside your bank or UPI application.
• Clinical Information: Medical history, previous prescriptions, diagnostic records, and doctor case notes created during your physical consultation at our hospital.

2. How We Use Your Information

We use your information strictly for healthcare and hospital administration purposes:

• Reserving your OPD consultation slot and issuing appointment confirmation tokens via SMS or WhatsApp.
• Verifying identity during physical check-in at the hospital reception to prevent misidentification.
• Maintaining medical records as mandated by the Clinical Establishments (Registration and Regulation) Act.
• Contacting you in the event of doctor schedule changes, emergency delays, or critical test result updates.

3. Confidentiality and Non-Disclosure

We never sell, rent, monetize, or trade patient personal or clinical information to third parties or marketing agencies.

Information is accessible only to:

• The treating doctor, duty medical officer, and assigned clinical nursing team.
• Authorized hospital billing and administrative personnel for registration and account reconciliation.
• Government health authorities, judicial bodies, or law enforcement only when strictly mandated by a valid statutory order or court decree under applicable Indian laws.

4. Data Security & Storage

We employ standard administrative, physical, and technical security measures to safeguard patient data against unauthorized access, loss, or misuse:

• All website traffic is encrypted using modern Transport Layer Security (TLS 1.2/1.3) with HTTPS.
• Payment verification files (e.g. UTR screenshots) are stored in restricted-access directories on secure servers with strict authentication protocols.
• Physical clinical files are archived securely inside the hospital's medical records department (MRD) with controlled staff access.

5. Website Cookies & Analytics

Our website uses minimal session cookies essential for site functionality, CSRF security verification, and anonymous traffic measurement through Google Analytics. These cookies do not store clinical records or personally identifiable health data. You can manage or disable cookies through your browser settings.

6. Patient Rights

You have the right to:

• Inspect and request a copy of your personal outpatient/inpatient medical records in accordance with hospital policies and medical board rules.
• Request correction or updating of inaccurate contact or demographic details in your hospital file.
• Opt out of non-essential informational notifications by contacting our administrative desk.

7. Contact & Grievance Officer

If you have questions, concerns, or grievances regarding this Privacy Policy or the handling of your data, you may reach our administrative office directly: