Last updated: 12 May 2026
Prayaas Multispeciality Hospital ("we", "our", or "us"), located at Gandhi Road, Darpan Colony, Gwalior, Madhya Pradesh 474002, is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
Information We Collect
We may collect the following types of personal information:
- Identity Data: Full name, date of birth, gender.
- Contact Data: Phone number, email address, postal address.
- Health Data: Medical history, diagnostic reports, prescriptions, and treatment records (collected only when you use our clinical services).
- Technical Data: IP address, browser type, and usage data collected automatically via cookies.
How We Use Your Information
- To schedule and manage your medical appointments.
- To communicate with you regarding your healthcare needs.
- To provide medical treatment and share diagnostic reports.
- To improve our website and patient services.
- To comply with legal and regulatory obligations.
Consent & Data Processing
By submitting your information through our appointment forms, contact forms, or WhatsApp channels, you provide explicit consent for us to process your personal data for the stated purposes. You may withdraw your consent at any time by contacting us.
Compliance with Indian Data Protection Laws
We are committed to complying with the Digital Personal Data Protection (DPDP) Act, 2023 of India. In accordance with the Act:
- We collect personal data only for lawful purposes with your informed consent.
- We process your data solely for the specific purposes communicated to you at the time of collection.
- We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws.
- You have the right to access, correct, and request erasure of your personal data by contacting our Data Protection Officer.
- We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.
- In the event of a data breach that is likely to cause harm, we will notify the Data Protection Board of India and affected individuals as required by the Act.
Health Data & Clinical Records
Medical records and health data are handled in compliance with the Clinical Establishments (Registration and Regulation) Act and applicable guidelines of the Medical Council of India. Patient health records are stored securely and are accessible only to authorised medical personnel.
Data Security
We implement industry-standard security measures including encryption (HTTPS/TLS), access controls, and secure database storage to protect your personal information. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to continuous improvement of our data protection practices.
Third-Party Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your data with:
- Healthcare professionals involved in your treatment.
- Insurance companies (only with your consent for claim processing).
- Government authorities when required by law or court order.
Your Rights
Under the DPDP Act, 2023, you have the following rights:
- Right to Access: Request a summary of your personal data and processing activities.
- Right to Correction: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
- Right to Grievance Redressal: File a complaint with our Data Protection Officer or the Data Protection Board of India.
- Right to Nominate: Nominate another individual to exercise your data rights in case of death or incapacity.
Cookies
Our website uses essential cookies for functionality and analytics cookies (Google Analytics) to understand usage patterns. You may disable cookies in your browser settings, though this may affect website functionality.
Children's Privacy
For patients under 18 years of age, we obtain consent from a parent or legal guardian before collecting any personal or health data, in accordance with the DPDP Act.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact our Data Protection Officer:
- Email: info@prayaashospitalgwalior.com
- Phone: 98930 15056
- Address: Prayaas Multispeciality Hospital, Gandhi Road, Near Balwant Nagar, Darpan Colony, Gwalior, MP 474002
