Privacy Policy

The Care Health Service collects information necessary to provide quality healthcare services, manage appointments, and communicate with patients and visitors. We collect information in the following categories:

Personal Identification Information:

• Full name, date of birth, gender
• Contact details: mobile number, email address, residential address
• Government ID details where required for insurance or regulatory purposes
• Emergency contact information

Medical & Health Information:

• Medical history, diagnoses, prescriptions and treatment records
• Lab results, diagnostic reports, imaging and scan reports
• Allergies, medications, surgical history
• Insurance details and policy numbers

Appointment & Communication Data:

• Appointment date, time, department and preferred doctor
• Symptoms or messages submitted through our online booking form
• Call logs and WhatsApp messages when you contact us directly

Website & Technical Data:

• IP address, browser type, device type and operating system
• Pages visited, time spent and navigation patterns via Google Analytics
• Cookie identifiers (see Section 5)

We use the information we collect for the following purposes:

• Appointment Management: Confirming, rescheduling or cancelling appointments; sending reminders via SMS, WhatsApp or email
• Medical Care: Providing accurate diagnosis, treatment and follow-up care by our doctors and medical staff
• Patient Communication: Responding to queries, sending health tips, reports and post-treatment follow-ups
• Billing & Insurance: Processing payments, insurance claims and generating invoices
• Administrative Purposes: Maintaining patient records, complying with legal and regulatory requirements
• Quality Improvement: Analysing service quality, training staff and improving our healthcare delivery
• Marketing (with consent): Sending health camps, awareness programmes and service updates — only when you have opted in

Your medical records are treated with the highest level of confidentiality in compliance with the Digital Information Security in Healthcare Act (DISHA) and applicable Indian healthcare regulations.

• Medical records are only accessible to treating doctors, nurses and authorised medical staff directly involved in your care
• Records are maintained electronically and physically in secured systems with access controls
• You have the right to access, request copies of, and correct your medical records at any time
• Records are retained for a minimum of 7 years as required by Indian medical regulations
• In the event of a life-threatening emergency, information may be shared with emergency responders and family members

We may share your information only in the following limited circumstances:

• Within Our Team: Doctors, nurses, lab technicians and administrative staff involved in your care
• Referral Doctors: When you are referred to a specialist or external consultant with your knowledge
• Insurance Companies & TPAs: For processing cashless claims and reimbursements with your authorisation
• Legal Obligations: When required by courts, government health authorities, or law enforcement under valid legal process
• Public Health Authorities: For mandatory reporting of notifiable diseases as required under Indian law
• Google Services: We use Google Forms/Sheets for appointment management and Google Analytics for website analytics. These services have their own privacy policies.

Our website (hosted on Google Blogger) uses cookies and similar technologies to improve your browsing experience.

• Essential Cookies: Required for basic website functionality such as navigation and the dark mode preference you set
• Analytics Cookies: Google Analytics collects anonymised data on page visits, device types and traffic sources to help us improve the website
• Google Blogger Cookies: Standard cookies set by Google's Blogger platform

You can disable cookies in your browser settings. Note that disabling certain cookies may affect website functionality. Our website does not use advertising cookies or cross-site tracking.

We take the security of your personal and medical data seriously and implement the following measures:

• HTTPS encryption on all website pages and form submissions
• Google Sheets access restricted to authorised staff only using Google account security
• Physical medical records stored in secure, access-controlled areas
• Staff trained on patient confidentiality and data protection obligations
• Regular review of data access permissions

While we take every precaution, no method of transmission over the internet is 100% secure. In the event of a data breach that may affect you, we will notify you promptly as required by law.

• Medical Records: Minimum 7 years from the date of last treatment (as per MCI guidelines)
• Appointment Data: 3 years from the date of appointment
• Billing Records: 8 years as required for tax and audit purposes
• Website Analytics: 26 months (Google Analytics default)
• Marketing Consent Records: Until consent is withdrawn

After the retention period, data is securely deleted or anonymised.

As a patient or website visitor, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal or medical data we hold about you
• Right to Correction: Ask us to correct inaccurate or incomplete data
• Right to Deletion: Request deletion of your data (subject to legal and medical retention requirements)
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time
• Right to Complaint: Lodge a complaint with the relevant Data Protection Authority

To exercise any of these rights, please contact us at info@thecarehealthservices.com or visit us in person at our facility in Kanpur.

We provide medical care to patients of all ages, including children. For patients under the age of 18:

• Consent for treatment is obtained from a parent or legal guardian
• Medical records are released only to the parent or legal guardian, except in emergencies
• Our website does not knowingly collect personal data from children under 13 years of age through online forms without parental consent

Our website may contain links to external websites including social media platforms (Facebook, Instagram, YouTube, LinkedIn). We are not responsible for the privacy practices of these third-party websites. We encourage you to read their respective privacy policies before providing any personal information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a notice on our website homepage for 30 days
• Notify registered patients via email where appropriate

Continued use of our services after changes are posted constitutes acceptance of the updated policy.

For any questions, concerns or requests related to this Privacy Policy or your personal data, please contact us:

• Hospital: The Care Health Service
• Address: 71-J Pardevanpur LalBangla Harjinder Nagar, Kanpur, Uttar Pradesh 208007
• Email: info@thecarehealthservices.com
• Phone: +91 73481 21213
• WhatsApp: +91 6392 495 851