Privacy Policy
- Home
- Our Department
- Privacy Policy
Privacy Policy
Dr.Muthus Hospital DM Healthcare Limited and its subsidiaries (referred to as “we”, us”, “Dr.Muthus Hospital”) is the author and publisher of the internet resource www.muthushospital.com, and its sub domain’s (together referred to as “Websites”) on the world wide web as well as other software and applications provided by Dr.Muthus Hospital, including but not limited to the mobile applications (referred to as “App”, and together with Websites referred to as “Services”). Dr.Muthus Hospital provides the Services in partnership with its agents, affiliates, associates, representatives or other third parties (together referred to as “Partners”).
This privacy policy (“Privacy Policy”) explains how we collect, use, share and protect personal information about the Users of the Services (jointly and severally referred to as “you” or “User” or “Users” in this Privacy Policy). We created this Privacy Policy to demonstrate our commitment to the protection of your privacy and your personal information. Your use of and access to the Services is subject to this Privacy Policy and our Terms of Use. Any capitalized term used but not defined in this Privacy Policy shall have the meaning attributed to it in our Terms of Use.
BY CONFIRMING THAT YOU ARE BOUND BY THIS PRIVACY POLICY (BY THE MEANS PROVIDED ON THIS WEBSITE OR APP), BY USING THE SERVICES OR BY OTHERWISE GIVING US YOUR INFORMATION, YOU AGREE TO THE PRACTICES AND POLICIES OUTLINED IN THIS PRIVACY POLICY AND YOU HEREBY CONSENT TO OUR COLLECTION, USE AND SHARING OF YOUR INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY. WE RESERVE THE RIGHT TO CHANGE, MODIFY, ADD OR DELETE PORTIONS OF THE TERMS OF THIS PRIVACY POLICY, AT OUR SOLE DISCRETION, AT ANY TIME. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY AT ANY TIME, DO NOT USE ANY OF THE SERVICES OR GIVE US ANY OF YOUR INFORMATION. IF YOU USE THE SERVICES ON BEHALF OF SOMEONE ELSE (SUCH AS YOUR CHILD) OR AN ENTITY, YOU REPRESENT THAT YOU ARE AUTHORISED BY SUCH INDIVIDUAL OR ENTITY TO ACCEPT THIS PRIVACY POLICY ON SUCH INDIVIDUAL’S OR ENTITY’S BEHALF.
WHY THIS PRIVACY POLICY?
This Privacy Policy is published in compliance with, inter alia: Section 43A of the Information Technology Act, 2000;
Regulation 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 (the “SPI Rules”); and Regulation 3(1) of the Information Technology (Intermediaries Guidelines) Rules, 2011.
This Privacy Policy states the following
- The type of information collected from the Users, including sensitive personal data or information;
- The purpose, means and modes of usage of such information; and
- How and to whom we will disclose such information.
COLLECTION OF PERSONAL INFORMATION
Generally, some of the Services require us to know who you are so that we can best meet your needs. When you access the Services, we may ask you to voluntarily provide us with certain information that personally identifies you or could be used to personally identify you. Without prejudice to the generality of the above, information collected by us from you may include (but is not limited to) the following:
- Contact data (such as your email address and phone number);
- Demographic data (such as your gender, your date of birth and your pin code);
- Data regarding your usage of the services and history of the appointments and other transactions made by or with you through the use of Services;
- Health or medical data (such as your past medical history and conditions, diagnostic reports, prescriptions and medication history)
- Insurance data (such as your insurance carrier and insurance plan); and
- Other information that you voluntarily choose to provide to us (such as information shared by you with us through emails or letters, your work details, your family details)
The information collected from you by Dr.Muthus Hospital may constitute ‘personal information’ or ‘sensitive personal data or information’ under the SPI Rules. Personal information is defined under the SPI Rules to mean any information that relates to a natural person, which, either directly or indirectly, in combination with other information available or likely to be available with a body corporate, is capable of identifying such person.
The SPI Rules further define “sensitive personal data or information” of a person to mean personal information about that person relating to:
- passwords
- financial information such as bank accounts, credit and debit card details or other payment instrument details
- physical, physiological and mental health condition
- sexual orientation
- medical records and history
- biometric information
- information received by body corporate under lawful contract or otherwise
- visitor details as provided at the time of registration or thereafter; and
- Call data records
Information that is freely available in the public domain or accessible under the Right to Information Act, 2005 or any other law will not be regarded as personal information or sensitive personal data or information.