Privacy Policy

1. Introduction

Devaki Maternity & Children Hospital ("we," "our," or "Devaki MCH") is committed to protecting the privacy and confidentiality of our patients' personal and medical information. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with applicable healthcare privacy laws and regulations in India.

2. Information We Collect

We collect and maintain various types of information necessary for providing quality healthcare services:

• Personal Identification Information: Name, address, phone number, email address, date of birth, gender, emergency contacts
• Medical Information: Medical history, current symptoms, diagnoses, treatment plans, test results, medications, allergies
• Insurance Information: Insurance provider details, policy numbers, coverage information
• Financial Information: Billing information, payment methods, financial assistance applications
• Website Information: IP address, browser type, pages visited, appointment requests submitted online

3. How We Use Your Information

We use your personal and medical information for the following purposes:

• Medical Treatment: Providing healthcare services, coordinating care among healthcare providers, emergency treatment
• Hospital Operations: Scheduling appointments, patient registration, quality assurance, staff training
• Billing and Payment: Processing insurance claims, billing for services, financial counseling
• Legal Compliance: Meeting legal and regulatory requirements, reporting as required by law
• Communication: Appointment reminders, test results, treatment updates, hospital information
• Quality Improvement: Analyzing care outcomes, improving services, medical research (with proper anonymization)

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

• Healthcare Providers: With doctors, nurses, and other healthcare professionals involved in your care
• Insurance Companies: For processing claims and determining coverage
• Legal Requirements: When required by law, court orders, or government agencies
• Emergency Situations: To protect your health and safety or that of others
• Business Associates: With third-party service providers who help us operate (under strict confidentiality agreements)
• Family Members: With your explicit consent or as permitted by law in emergency situations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Security Measures

We implement comprehensive security measures to protect your information:

• Physical Security: Locked cabinets, restricted access areas, security cameras in sensitive areas
• Technical Security: Encrypted databases, secure servers, regular software updates, firewall protection
• Administrative Security: Staff training on privacy policies, access controls, regular security audits
• Access Controls: Information accessed only by authorized personnel on a need-to-know basis
• Data Backup: Regular secure backups with encryption and secure storage

6. Your Rights and Choices

You have the following rights regarding your personal and medical information:

• Access: Request copies of your medical records and personal information we maintain
• Amendment: Request corrections to inaccurate or incomplete information
• Restriction: Request limits on how we use or share your information
• Confidential Communication: Request to receive communications through alternative means or locations
• Complaint: File a complaint about our privacy practices with hospital administration or regulatory authorities
• Consent Withdrawal: Withdraw consent for certain uses of your information (where legally permissible)

7. Medical Records Retention

We retain medical records and personal information in accordance with Indian healthcare regulations and best practices:

• Adult medical records: Minimum 10 years after last treatment
• Pediatric records: Until age 25 or 10 years after last treatment, whichever is longer
• Maternity records: Minimum 25 years
• Digital records: Maintained with the same retention standards as physical records
• Deceased patient records: Maintained for minimum 10 years after death

8. Website and Digital Privacy

Our website privacy practices include:

• Cookies: We use essential cookies for website functionality; no tracking cookies without consent
• Online Forms: Information submitted through appointment forms is encrypted and securely transmitted
• Email Communication: Patient health information is not sent via unencrypted email
• Third-Party Links: Our website may link to third-party sites with their own privacy policies

9. Special Protections

We provide additional protections for sensitive information:

• Mental Health Information: Extra confidentiality protections as required by law
• Substance Abuse Treatment: Special federal protections apply
• HIV/AIDS Information: Enhanced confidentiality measures
• Genetic Information: Special protections against discrimination
• Minor Patient Information: Additional consent requirements for sharing with parents/guardians

10. Data Breach Response

In the unlikely event of a data breach involving your personal information:

• We will investigate and contain the breach immediately
• Affected patients will be notified within 72 hours when legally required
• We will provide information about what occurred and steps being taken
• Free credit monitoring services may be offered if financial information was involved
• Law enforcement and regulatory authorities will be notified as required

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or applicable laws. When we make material changes:

• We will post the updated policy on our website
• We will notify patients of significant changes during their next visit
• The effective date of the new policy will be clearly indicated
• We will maintain previous versions for our records

12. Contact Information

13. Acknowledgment

By receiving services at Devaki Maternity & Children Hospital, you acknowledge that you have been informed about our privacy practices. If you have questions or concerns about how your information is handled, please contact our Privacy Officer.

This Privacy Policy complies with applicable Indian healthcare privacy laws and international best practices for medical data protection. We are committed to maintaining the highest standards of patient confidentiality and data security.