01 Introduction and scope
Shri Manmukund Hospital (“we”, “us”, “our”, or “the hospital”) is a specialist proctology and integrated Ayurvedic surgical hospital located at Plot No. 7, Bapatwadi, Vivekanand Colony to Radient Hospital Road, Amravati 444604, Maharashtra, India. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal and medical information when you visit our facility, use our website, or interact with us through any other means.
We take your privacy seriously, particularly given the sensitive nature of medical information. This policy has been prepared in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and applicable rules governing the storage and processing of medical records in India.
By accessing our website, booking a consultation, or receiving care at our hospital, you consent to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.
02 Definitions
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
03 Information we collect
3.1 Personal information you provide
When you book a consultation, register at the hospital, or submit an enquiry through our website, we collect information you voluntarily provide, including:
- Full name, age, gender, and date of birth
- Contact details including phone number, email address, and residential address
- Identity proof (Aadhaar number, PAN, or other government ID) for hospital registration
- Emergency contact details of a family member or guardian
- Insurance details, if you wish to avail cashless treatment through partner insurers
- Preferred consulting doctor and reason for visit
3.2 Medical information
In the course of providing medical care, we collect and record:
- Chief complaints, symptoms, and history of present illness
- Past medical, surgical, and family history
- Physical examination findings
- Laboratory reports, imaging (X-ray, ultrasound, MRI, CT scans), and other diagnostic results
- Diagnosis, treatment plan, procedure notes, and prescriptions
- Follow-up records, recovery notes, and outcome documentation
- Photographs or videos of clinical findings, taken only with your explicit written consent
3.3 Automatically collected information
When you visit our website, we automatically collect certain technical information, including:
- IP address and approximate geographic location
- Browser type and version, device type, and operating system
- Pages you visit, time spent on each page, and referring URLs
- Cookies and similar tracking technologies (see Section 08)
04 How we use your information
We use your personal and medical information for the following purposes:
Providing medical care
Consultation, diagnosis, treatment planning, procedure delivery, post-procedure follow-up, and coordination with visiting specialists or referring physicians.
Communication with you
Appointment confirmations, reminders, follow-up scheduling, sharing of reports and prescriptions, and responding to your enquiries.
Hospital administration
Registration, billing, insurance processing, medical record maintenance, and internal quality improvement.
Legal and regulatory compliance
Meeting our obligations under the Clinical Establishments Act, National Medical Commission regulations, ASCI guidelines, DMR Act, ROHINI system requirements, and other applicable laws.
Research and clinical audit
With your explicit consent, anonymised clinical data may be used for research, case series documentation, teaching, and quality improvement. No individually identifiable information is disclosed in such use.
05 How we share your information
We do not sell, rent, or trade your personal or medical information. We share your information only in the following circumstances:
5.1 With your explicit consent
When you request or authorise sharing of records with another doctor, hospital, family member, or insurance provider, we release the requested information as specified by you in writing.
5.2 With healthcare partners
- Visiting specialists at our hospital who participate in your care (for example, laparoscopic surgeons for gall bladder or hernia procedures)
- Referring physicians who sent you to us, in the form of consultation notes and treatment summaries
- Diagnostic laboratories for processing blood tests, biopsies, or imaging
- Insurance providers for cashless treatment processing, only with your consent
5.3 Legal and regulatory requirements
We may disclose your information when required by law, including:
- Court orders, subpoenas, or lawful government requests
- Notifiable disease reporting under public health law
- Medico-legal cases where such reporting is mandatory
- Investigation of insurance fraud or other regulatory enquiries
Doctor-patient confidentiality is a cornerstone of medical practice. We treat all information you share with us as strictly confidential and will not disclose it to any party without a lawful basis or your explicit consent. This applies equally to Dr. Vipin Tongale, Dr. Swati Tongale, and every member of our clinical, administrative, and support staff.
06 Data security and retention
6.1 Security measures
We implement reasonable technical, physical, and administrative safeguards to protect your data, including:
- Access-controlled electronic medical record systems
- Physical security of paper records in locked storage
- Staff training on confidentiality and data protection
- Encryption of data during transmission where technically feasible
- Regular backups to prevent data loss
Despite our best efforts, no method of transmission over the internet or method of electronic storage is 100 percent secure. We cannot guarantee absolute security, but we work to keep our practices aligned with prevailing standards for Indian medical institutions.
6.2 How long we keep your data
We retain your medical records for the periods required by law, which for most records is a minimum of five years from the date of last consultation or procedure. Some records, particularly those relating to surgical procedures or ongoing conditions, are retained for longer periods as prescribed by medical record regulations.
Personal information collected through our website is retained only for as long as necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by law.
07 Your rights under the DPDP Act
Under the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:
- Right to access: You can request a summary of the personal data we hold about you and how it has been processed.
- Right to correction: You can request correction of any inaccurate or incomplete personal data.
- Right to erasure: You can request deletion of your personal data, subject to legal retention requirements for medical records.
- Right to withdraw consent: You can withdraw your consent to the processing of your data at any time, though this may affect our ability to continue providing care.
- Right to grievance redressal: You can raise concerns about how your data is handled with our Grievance Officer (see Section 12).
- Right to nominate: You may nominate another individual to exercise your rights in the event of your death or incapacity.
To exercise any of these rights, please contact us at the details provided in Section 12. We will respond to your request within the timeframes required by applicable law.
08 Cookies and tracking
Our website uses cookies and similar technologies to improve your browsing experience, analyse website performance, and understand how visitors use our content. We use:
- Essential cookies that are necessary for the website to function properly
- Analytics cookies to understand traffic patterns and improve our content
- Preference cookies to remember your language or display settings
You can control or disable cookies through your browser settings. Please note that disabling essential cookies may prevent some features of the website from working. For more detail, see our Cookie Policy.
09 Children's privacy
Our website is not directed at children under the age of 18, and we do not knowingly collect personal information from minors through the website. Medical care for children is delivered in the presence of a parent or legal guardian, who provides all necessary consents for the child's registration and treatment.
10 Third party links and services
Our website may contain links to third-party websites (for example, insurance providers, government health portals, or professional bodies). We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policies of any third-party website you visit.
If we use third-party services on our website (such as Google Maps for location, or analytics providers), those services may collect information in accordance with their own privacy policies. We select such providers with reasonable care.
11 Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:
- Update the “Last Updated” date at the top of this policy
- Post a notice on our website homepage for at least 30 days
- Notify patients directly, where practical, if the change materially affects how their medical information is handled
We encourage you to review this policy periodically to stay informed about how we protect your information.
12 Contact and grievance officer
If you have any questions, concerns, or complaints about this Privacy Policy or the way we handle your personal information, please contact us using the details below. We will respond as quickly as possible, and always within 30 days of receiving your enquiry.