Privacy Policy

Ashsheefa Hospital & App ("Ashsheefa", "we", "our", or "us") is committed to protecting the privacy and confidentiality of the personal and medical information you share with us through our website (https://ashsheefahospital.com), mobile application ("Ashsheefa Hospital"), and in-person services. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices and rights you have.

Short patient-friendly summary

We collect basic contact and health-related information (name, mobile number, gender, age, lab reports, prescriptions and medical history) to provide medical care, appointment management and related services. We keep your data secure, do not sell your personal health information, and you can contact us to access, correct or request deletion of your data (subject to legal retention requirements).

1. Scope

This Privacy Policy applies to personal data collected when you:

• Use our website: https://ashsheefahospital.com;
• Use our mobile app Ashsheefa Hospital; or
• Receive clinical or related services from Ashsheefa Hospital (in-person or remotely).

This policy covers patients, caregivers, app users, website visitors, and other persons whose data we process.

2. Information We Collect

Personal identifiers

Name, mobile number, date of birth or age, gender, address (when provided), email (if provided), emergency contact.

Health & medical information (sensitive)

Medical history, diagnoses, prescriptions, lab reports, imaging reports and other clinical records you or clinical staff upload or provide.

Account & transaction data

Usernames, passwords and authentication credentials (if you create an account), appointment bookings, billing or insurance details if provided for payment/claims.

Technical & usage data

IP address, device or browser information, app version, log files, timestamps, pages/screens viewed, cookies and analytics data for improving the Services.

Uploaded files & documents

Files you upload via the App or website (for example: lab reports, prescriptions, referral letters).

You should only upload information you are comfortable sharing; please do not upload third-party sensitive data unless you have permission.

3. How We Collect Data

• Directly from you (forms, app uploads, appointment bookings, email/phone communication).
• From healthcare staff during treatment.
• From third parties where necessary for care (diagnostic labs, pharmacies, insurance companies).
• Automatically via cookies, analytics and server logs when you use the website or app.

4. Why We Use Your Data (Purposes)

• Provide and coordinate medical care, share test results and prescriptions, and maintain medical records.
• Schedule and manage appointments and send reminders/notifications.
• Process payments and insurance claims when you provide billing data.
• Improve our services, carry out research and analytics on de-identified data, and personalise user experience.
• Detect, prevent or investigate fraud, abuse or security incidents.
• Comply with legal, regulatory or public health obligations.
• Communicate with you about services, health alerts and (with your consent) promotional offers.

We will not use your health data for unrelated purposes without your explicit consent.

5. Legal Basis & Consent

By using our Services or providing your information, you consent to Ashsheefa collecting and processing your personal and health information for the purposes described in this policy. Where required by law, we will seek explicit consent to process sensitive health data. You may withdraw consent at any time (see Section 12), but withdrawal may limit our ability to provide certain services.

6. Sharing & Disclosure

We may share your information with:

• Doctors, nurses and authorised clinical staff involved in your care.
• Laboratories, diagnostic centres, pharmacies and other healthcare providers as needed for diagnosis, treatment or billing.
• Payment processors and insurance companies to process transactions and claims.
• IT, cloud hosting and analytics service providers under contract and confidentiality obligations.
• Regulators, public health authorities or law enforcement when required by law.
• Professional advisors (auditors, legal advisors) where necessary and bound by confidentiality.
• Potential purchasers or restructuring parties in connection with a business sale or reorganisation (subject to safeguards).

We do not sell your personal or health information.

7. Cross-Border Transfers

Your information may be stored or processed on servers located outside India (for example, by our cloud providers). When we transfer data internationally, we will use contractual safeguards and other measures required by applicable law to protect your data.

8. Data Retention

We retain personal and medical records for the period required by applicable laws and medical practice standards. As a general rule, records will be kept for a minimum of three (3) years from the date of last service unless a longer retention period is required by law or professional guidelines. After the applicable retention period, data will be securely deleted or anonymised.

9. Security

We use reasonable administrative, technical and physical safeguards to protect your data, including:

• Encryption in transit (HTTPS/TLS) and where appropriate at rest;
• Role-based access controls and authentication (including MFA where used);
• Secure servers, firewalls and routine security assessments;
• Staff training and confidentiality obligations for authorised personnel.

No system is completely risk-free. In the event of a data breach, we will follow applicable legal requirements for notification and mitigation.

10. Cookies & Tracking

We use cookies and similar technologies to enable core functionality, remember preferences and analyse usage. You may control or block cookies via your browser or device settings; disabling cookies may reduce website or app functionality.

11. Mobile App Permissions & Uploads

To provide features such as report upload and reminders, the App may request permissions such as:

• Camera (to capture or upload images of reports/prescriptions),
• Storage/Files (to upload reports or documents),
• Notifications (to send appointment reminders).

You can manage these permissions in your device settings. The App only accesses these features to provide the Services and does not read unrelated personal data.

12. Your Rights & Choices

Subject to applicable law and medical record retention rules, you may:

• Request access to and obtain a copy of your personal data.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal data (to the extent permitted by law).
• Withdraw consent for non-essential processing.
• Object to or restrict certain processing.
• Request transfer/portability of your data where technically feasible.

To exercise these rights, contact our Grievance Officer (details below). We may require identity verification and may refuse or limit requests where legally permitted (for example, to comply with medical record retention obligations or to protect public health).

13. Children & Minors

We do not knowingly collect personal data from children without parental or guardian consent. If the patient is a minor, data should be submitted by a parent or legal guardian. If you believe we have collected a child’s information without consent, contact us to request deletion.

14. Emergency & Public Health Disclosures

When required to protect life, public health, or comply with legal obligations (for example, reportable infectious diseases), we may process or disclose health information without prior consent to the extent permitted by law.

15. Third-Party Links & Integrations

Our website or app may link to third-party websites or services (lab portals, payment gateways, external resources). We are not responsible for the privacy practices or content of those third parties. Review their privacy policies before sharing personal information.

16. Complaints & Grievance Redressal

If you have questions, complaints, or requests about this Privacy Policy or our data practices, contact:

Grievance / Privacy Contact
Ashsheefa Hospital
Address: Jagannathpur, Sahararhat, Falta, South 24 Parganas, 743504
Email: ashsheefa.hospital@gmail.com
Phone: 9339732293, 9836001515

We will acknowledge and attempt to resolve grievances promptly. If you remain unsatisfied, you may approach applicable regulatory authorities.

17. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical or business changes. The Effective Date at the top indicates the most recent revision. Continued use of our Services after changes indicates your acceptance of the revised policy.

18. Contact Us

For privacy questions, to exercise your rights, or for other concerns, contact us at:

Ashsheefa Hospital
Website: https://ashsheefahospital.com
Email: ashsheefa.hospital@gmail.com
Phone: 9339732293, 9836001515
Address: Jagannathpur, Sahararhat, Falta, South 24 Parganas, 743504

Acknowledgement

By using our website, app, or by providing personal or medical information to Ashsheefa Hospital, you acknowledge that you have read, understood and agreed to the terms of this Privacy Policy.