Privacy Policy

Categories of Information Collected

Patients and Attendants

• Full name, gender, date of birth, current whereabouts, mobile number, email address, emergency contact information, and relevant identification information.
• Past medical history, current symptoms, diagnosis, consultation notes, medication prescribed, diagnosis and laboratory reports, imaging results, treatment record, rehabilitation record and medical procedure information.
• Billing record, insurance information, payment-related information, reimbursement information, and other financial information of healthcare services.

Vendors and Service Providers

• Company name, email, postal address, telephone, registration information, and authorised representatives' information.
• Bank account data, payment history, invoices, taxation information and other transactions.
• Information about products and services, contracts, business correspondence, contract conditions and service documentation.

Employees and Job Applicants

• Name, home address, date of birth, contact information, identification documents and relevant personal details.
• Educational credentials, professional certifications, experience, previous workplaces, role in the organisation, recommendations, registrations and other work-related details.
• Salary details, bank information, tax details, benefits, payment history and payroll data.
• Performance, attendance, leave, training, development and disciplinary data where needed.

Personal Information: Categories and Examples

Personal

Your personal information can include your name, age, date of birth, gender, physical address, mobile phone, e-mail address, nationality, emergency contact, and other information regarding you or your representative.

Work-related Information

Work-related information may include the department and workplace where you work, job title and date of employment, employment history, educational background, professional registration, management structure, remuneration and benefits, performance record, attendance and leave records.

Images and/or Videos

Photos, video recordings, security videos, or other images through which you may be identified are collected for security purposes, operational reasons, healthcare needs, or other legitimate reasons.

Online Identifiers

Information about IP address, cookies, browser, device identification data, activity on websites, access logs, language settings, and other information related to your interaction with our site.

Financial

Bank account information, payment details, billing information, insurance details, and other information about transactions may be required.

Health

Medical records and other medical data, including prescriptions, diagnosis tests, scans, consultations, treatments, physiotherapy records, operations, etc.

Official Identifier

Aadhaar, PAN Card, Passport, Voter ID, Driving Licence, or other government-issued identification information may be required for registration, verification and billing.

Professional

Professional data includes qualifications, registrations, certifications, work experience and references of medical professionals, employees or service providers.

Sensitive Information

It is important for us to handle information related to diseases, disabilities, rehabilitation requirements and other sensitive matters when needed for providing health services or meeting legal and administrative obligations.

How Purple Heron Hospitals Uses Your Information

We make use of personal data in connection with our activities in health care, patient administration, communication, security, employment, business administration, and legal compliance.

Patients and Relatives

To offer health care services, keep records of health care processes, create appointments, arrange the treatment process and rehabilitation, make payments and solve problems related to insurance.

Employees and Job Seekers

To perform activities such as hiring, maintaining employee records, preparing payroll and payments.

Sellers and Service Providers

To conduct business with respect to vendor relations, contracts, payments, delivery and related activities.

Delivery of Healthcare Services

Personal credentials may be used for consultancy, assessment, diagnosis, therapy, pain management, rehabilitation, study, imaging, medication management, and subsequent management of a patient's health.

Enquiries, Feedback, and Patient Support

Personal details may be used to answer queries, comments, issues, requests for appointments and other communications. This may include notifications, reminders, follow-up communication and patient support.

Patient Enrolment and Appointment Scheduling

Information can be utilised to establish and maintain patient records, organise appointments, reply to enquiries, handle enrolments, provide appointment notifications, manage billing details and offer patient assistance.

Information submitted through the appointment form remains protected and will be utilised for the purpose of appointment booking.

Health and Safety Protection

• Using suitable methods for security.
• Controlling access to systems and sensitive data.
• Tracking and protecting systems and data used.
• Employing closed-circuit TV surveillance as required.
• Enquiring into security threats, illegal access, deception or abuse.

Healthcare Quality and Improvement

As adhered to the law, information may be evaluated and reviewed for clinical improvement, operational planning, quality assurance and enhancement of patient experiences and healthcare services.

Legal and Regulatory Requirements

In accordance with relevant laws, regulations, court orders, authorities, professional responsibilities and other legitimate obligations, personal data can be processed or revealed. Information may also be used to investigate suspected unlawful acts, comply with legal processes, safeguard rights or meet regulatory requirements.

Operational Management and Governance

Personal information can be used for internal communication, planning, resource management, finance, auditing, continual record keeping, business continuity, operational plans and other lawful purposes of the organisation.

We can use aggregated or properly protected information to analyse service needs, operational trends and possibilities for improving healthcare services.

Financial Transactions and Payment Processing

Information may be processed to facilitate payments received from or made to patients, employees, vendors, service providers and other authorised parties. It may also be used for billing, insurance processing, accounting, reconciliation, financial reporting and other legitimate financial administration.

Human Resource Management

Applicant and employee information can be used for background verification, recruitment, workforce planning, payroll, performance assessment, employee administration, benefits, attendance and employment administration.

Legal Claims and Dispute Management

Personal details may be used for enforcement of legal claims, compliance with legal requirements, investigation of complaints or events, and safeguarding the rights and interests of Purple Heron Hospitals and other parties.

Privacy Rights

To know about your rights regarding how Purple Heron Hospitals manages your information, you need to consult the applicable jurisdiction law.

• Access: To know what information regarding you is stored with us.
• Rectification: To ask to correct any mistake in your information being processed.
• Deletion: To request the deletion of your information if allowed by applicable law.
• Withdrawal: If information is processed based on consent, you can withdraw that consent under the restrictions mentioned in applicable law.
• Redressal of grievances: For registering a complaint against the usage of your information.

To exercise these applicable rights, please contact us using the details provided below. We may request appropriate information to verify your identity before processing certain requests.

Data Security and Confidentiality

We take technical, organisational and administrative measures for protecting personal information from loss, destruction, misuse, unauthorised access and disclosure.

Access to patient data and other sensitive information should only be given to those who have a valid healthcare, professional, administrative, legal or operational reason for seeking the information.

Despite efforts to maintain protection, there are no guarantees that any electronic means of communication or storage will be completely secure.

Updates and Revisions to This Privacy Policy

This privacy policy may be updated from time to time depending on changes in applicable laws or regulations, healthcare practices, technology, services or internal procedures.

Any revised version of the policy shall be released on our website along with the updated effective date.