Privacy Policy
"We," "Us," and "Our" refer to VIMS Hospitals. We are committed to safeguarding the privacy and confidentiality of your personal and health information. This Privacy Policy outlines how we collect, use, process, store, and protect your personal data in accordance with applicable Indian laws, including:
- The Digital Personal Data Protection Act, 2023 (DPDPA)
- The Information Technology Act, 2000 (Section 43A)
- The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011
This policy applies to all personal information collected while providing our healthcare services, both online (via [VIMS Website URL]) and offline. The terms "You" or "Your" refer to patients, caregivers, or users; "We," "Us," and "Our" refer to VIMS Hospitals.
1. Scope and Applicability
This Privacy Policy applies to:
- Personal data collected when you visit our hospital, consult doctors, or interact through our website.
- Information shared during consultations, appointments, diagnostic procedures, feedback, or registration processes.
- Online interactions via our website and communication channels.
2. Information We Collect
- Personal Information: Name, gender, date of birth, address, contact details
- Health Data: Medical history, lab results, prescriptions, consultation notes
- Financial Details: Billing records, insurance details, payment methods
- Technical Data: IP address, device type, browser data, cookies
- Any other data shared voluntarily through forms, feedback, or during service usage
3. Legal Basis for Processing
- DPDPA 2023: Ensuring lawful, fair, and transparent handling of personal and sensitive data with explicit consent
- IT Act Section 43A: Ensuring reasonable security practices to prevent data breaches
- IT Rules 2011: Handling sensitive personal information responsibly and with user consent
4. Purpose of Data Collection
- Providing healthcare services, including diagnosis and treatment
- Managing appointments, registrations, and patient records
- Billing, insurance, and audit compliance
- Improving our services and quality of care
- Communicating updates, reminders, or promotions
- Research and operational analysis using anonymized data
5. Consent for Data Use
- By using our services, you agree to the collection and use of your data as per this Privacy Policy
- The processing of sensitive health data for medical and administrative purposes
- You may withdraw your consent at any time (refer to Section 8)
6. Data Sharing and Disclosures
- With healthcare providers for diagnosis and treatment
- With labs, diagnostic centers, and insurance providers under strict confidentiality
- With legal or government authorities when required by law
- For cross-border services, data will only be shared with countries approved under DPDPA safeguards
7. Data Security Measures
- Encryption of data in transit and at rest
- Role-based access and authentication controls
- Regular data security audits and compliance checks
- Secure servers, firewalls, and backups
- Users are advised to keep login credentials confidential
8. Your Data Rights
- Access: Request a copy of your personal data
- Correction: Ask for rectification of any inaccurate data
- Deletion: Request deletion of data (as permitted by law)
- Portability: Request data in a portable format
- Withdraw Consent: You may revoke your consent at any time
9. Data Retention
- Medical Records: Retained as per healthcare regulations
- Billing/Financial Data: Retained for audits and tax compliance
- Once retention periods lapse, data is securely deleted or anonymized
10. Cookies and Website Tracking
- Improve user experience on our website
- Track usage and traffic patterns for website optimization
- You may disable cookies via your browser settings; however, some features may not function properly
11. Updates to This Policy
This Privacy Policy may be updated periodically. The latest version will always be available on our website. Significant changes will be notified to users via email or website banner.
12. Contact and Grievance Redressal
For questions, feedback, or complaints regarding this policy, contact:
- [email protected]
- +91 70944 61905 / 0427-2200000
- VIMS Hospitals, NH 47, Sankari Main Road, Veerapandi (PO), Salem - 636 308, Tamil Nadu, India
We will address your concerns within a reasonable time frame.