Privacy Policy

Privacy Policy — Promedics Healthcare Pvt. Ltd.

1. Introduction & Scope
Promedics Healthcare Pvt. Ltd. (“Promedics”, “we”, “us”, or “our”) is committed to protecting the privacy of visitors and patients who use our websites, clinic services, doctor-staffing services, and related digital platforms (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal data when you access or use our Services in India and worldwide.

Key legal context: Promedics processes digital personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act). Where relevant, our practices are also aligned with international norms such as the GDPR to respect the rights of users in other jurisdictions.

2. Definitions

• •“Personal Data” — any information that identifies or can reasonably identify an individual (e.g., name, contact details, health information).
• •“Sensitive Personal Data” — health records and medical history; special categories of personal data that require heightened protection.
• •“Data Fiduciary” — Promedics, when it determines the purpose and means of processing personal data.
• •“You / User / Patient” — any individual whose personal data is processed by Promedics.

3. Categories of Data We Collect
a. Identity & Contact: name, date of birth, gender, phone, email, postal address.
b. Health & Clinical: medical complaints, diagnostic reports, prescriptions, treatment history, admissions, vitals — collected only when you use our clinical services. (Classified as Sensitive Personal Data.)
c. Appointment & Administrative: booking preferences, appointment dates/times, billing and invoicing details.
d. Payment & Financial: payment instrument details (partial tokens, transaction IDs) required for billing. We do not store full card details on our servers — payments are processed by secure payment gateways.
e. Technical & Usage: device identifiers, IP address, browser type, cookies, analytics (to improve Services).
f. Communications: messages, emails, call recordings (where consented or notified) for quality assurance and coordination.

4. How We Collect Data

• •Directly from you (appointments, registrations, forms).
• •From healthcare partners/hospitals where you receive services through our staffing program.
• •Automatically (cookies, logs) when you visit our website or use digital apps.
• •From third parties (payment processors, identity verification vendors) — only as necessary.

5. Legal Basis & Purposes for Processing
We use personal data to:

• •Provide clinical services, coordination with hospitals, and doctor staffing.
• •Schedule and manage appointments and payments.
• •Comply with legal obligations (medical recordkeeping, audits).
• •Improve Services, perform analytics, and prevent fraud.
• •Communicate appointment reminders, test results, and operational notices.

For Sensitive Personal Data (health information), processing is carried out only with explicit consent or as required for the provision of medical care and regulatory compliance.

6. Cookies & Tracking
We use cookies, web beacons, and similar technologies for session management, analytics, and performance. You can control cookie settings through your browser; however, disabling cookies may limit site functionality.

7. Sharing & Disclosure
We may share personal data with:

• •Hospitals and clinical partners (for continuity of care).
• •Authorized doctors and medical staff engaged via our staffing services.
• •Third-party service providers: payment gateways, analytics providers, hosting & backup (e.g., cloud providers), verification agencies. (We require contractual safeguards and only share the minimum data necessary.)
• •Law enforcement, courts, or regulators when required by applicable law or for legal protection.

Intermediary/hosting protections: when we act as an online intermediary for third-party content, applicable sections of the IT Act and intermediary rules provide limited liability provided due diligence is followed.

8. Cross-Border Transfers
If personal data is transferred outside India (e.g., cloud hosting, analytics), Promedics will ensure appropriate safeguards are in place and will comply with applicable regulations.

9. Data Retention
We retain personal data only as long as necessary to fulfill the purpose of collection, to comply with legal and regulatory obligations (medical records retention per applicable laws and medical board guidelines), and to resolve disputes or enforce agreements. Specific retention periods: clinical records — retained per health records rules; appointment/admin data — retained for a minimum of XXX years. (Replace with client’s chosen periods.)

10. Your Rights
Subject to applicable law, you have rights to: access, correct, port, erase (where lawful), restrict processing, and object to processing. For children’s data we will obtain verifiable parental consent where required. For processing that relies on consent, you may withdraw consent (without affecting prior lawful processing).

11. Security Measures
We use administrative, technical, and physical safeguards to secure personal data (access controls, encryption, secure backups). While we aim to protect data, no system can be 100% secure — we will notify affected individuals and authorities where required by law in the event of a data breach.

12. Data Protection Officer (DPO) / Contact
For queries, complaints, or exercising your rights, contact:

• •Email: [email protected] (replace with official email)
• •Postal: Promedics Healthcare Pvt. Ltd., OfficeAddressOffice AddressOfficeAddress, Hyderabad, Telangana, India

13. Children
We do not knowingly collect personal data of children under 18 without parental consent. If you believe we hold a child’s data without appropriate consent, contact us.

14. Third-Party Links & Embedded Content
Our Services may link to third-party websites (e.g., hospital partners). We aren’t responsible for their privacy practices. Review their privacy policies separately. Sample hospital policies are available publicly and we encourage users to check them.

15. Changes to This Policy
We may update this Policy to reflect legal or operational changes. Substantial changes will be notified on the website and via email where feasible.

16. Governing Law & Remedies
This Policy is governed by Indian law. For privacy disputes, users may contact our DPO or pursue remedies at competent forums, including consumer courts. Consumer protection laws may render certain unfair contract terms unenforceable.