Privacy Policy

1. Access To Personal Information

We gather your Personal Information directly from you, from third-parties, and automatically through our Website and App. This information may encompass details like the type of device you use, your IP address, and other specifics outlined in Clause 5 below. You can access and modify your shared Personal Information by contacting us via the email provided in Clause 15.

2. Consent

By opting in on the Website or App and subsequently providing us with your personal information or utilizing our services, you consent to the collection, storage, processing, and disclosure of your Personal Information in line with this Privacy Policy and any future amendments. You acknowledge providing your information voluntarily and with an understanding of its intended use. Additionally, we will not be liable for any losses resulting from incorrect Personal Information provided by you. We will only share personal information outside of the Asian Heart Institute with your explicit consent, especially sensitive personal information.

3. Control Over Your Personal Information

You reserve the right to withdraw your consent at any time by notifying us in writing via email at dataprivacy@ahirc.com

4. Changes To The Privacy Policy

We retain the right to update this Privacy Policy. Your rights under this Policy will not be reduced without your explicit consent. Changes will be clearly indicated with the date of revision provided. Significant alterations will be notified prominently, possibly through email notifications for certain services.

5. Personal Information Collected

• Patient/Caregiver/Doctor/Health Care Professional Name
• Date of Birth/Age
• Gender
• Address (including country and pin/postal code)
• Phone number/Mobile number
• Email address
• Physical, physiological, and mental health conditions
• Personal medical records and history
• Financial information during product/service purchase or online payments
• Login ID, password, and user details
• Interaction records with Asian Heart Institute representatives
• Usage details such as time, frequency, and duration of use
• Any other willingly shared information (collectively referred to as “Personal Information”)
• Biometrics data
• Genetic Data
• Transgender Status
• Intersex Status
• Caste or Tribe
• Religious or political belief or affiliation
• Sexual orientation
• Gender
• Mobile device identifiers (device ID, advertising ID, push notification tokens) collected via the App
• App permissions granted by you (such as access to camera, photo library, calendar, notifications, or biometric login), where you have explicitly consented at the time of granting the permission
• Appointment, prescription, lab report, and other clinical data accessed through the App

6. How We Collect Personal Information

Methods for collecting your Personal Information may include:

• Patient registration form submission
• Details provided to Asian Heart Institute Health Care Professionals or representatives
• Website registration
• Mobile App registration and login
• Information shared during service acquisition
• Website feature usage
• App feature usage, including in-app interactions, appointment bookings, and accessing health records
• Access granted to other websites
• Utilisation of cookies (explained in detail in Clause 9)

7. Use Of Personal Information

Your Personal Information may be utilized for various purposes, including but not limited to:

• Providing efficient services
• Operating and enhancing the Website and services
• Conducting research and analysis for improving information, services and technologies
• Contacting you for appointments, technical issues, payment reminders, deals and offers
• Sending promotional communications
• Advertising products/services of Asian Heart Institute and third parties
• Sharing information in case of acquisition/merger
• Sharing with business partners for service provision
• Administering agreements
• Building user profiles
• Responding to legal obligations or investigations
• Aggregating Personal Information for research and analysis

8. Sharing And Transferring Of Personal Information

Once you have consented to share your Personal Information, Asian Heart Institute is authorized to exchange, transfer, or share your information as required, including across borders and with affiliates, agents, third-party service providers, partners, banks or institutions. We acknowledge that certain countries may not have stringent data protection laws, and when transferring information, we ensure contractual obligations to maintain privacy standards.

9. Use Of Cookies

We may store temporary or permanent cookies on your device. You have the option to erase or block these cookies, although doing so may limit certain website features. We encourage configuring your browser settings to receive alerts when cookies are sent, allowing you to accept or refuse them. We do not store identifiable information in cookies and are not responsible for external sites’ cookies or data collection practices.

10. Security

Asian Heart Institute implements reasonable security measures like role-based access, password protection, and encryption to secure collected Personal Information. Access to this data is restricted to authorized personnel only. However, while we strive to maintain data security, the internet’s nature does not guarantee absolute security, and we cannot be held liable for breaches or unintended information disclosures.

11. Third Party References And Links

References or links to third parties or their websites included within our services do not imply endorsement by the Asian Heart Institute. These entities operate under their own terms and conditions and we do not control their content, terms of use, or privacy policies. We advise reviewing the privacy policies of external websites.

12. Rectification/Correction Of Personal Information

For updating or correcting Personal Information, you may contact us at dataprivacy@ahirc.com. We will endeavour to incorporate the changes within a reasonable period.

13. Compliance With Laws

Utilization of the Asian Heart Institute website and services is subject to compliance with applicable laws in your country.

14. Data Retention and Deletion

Asian Heart Institute will store your Personal Information for the periods set out below, or as mandated by law. Please reach out to us at the provided email address for any queries or concerns regarding this Privacy Policy.

14.1 Retention Period

We retain your Personal Information only for as long as necessary to fulfil the purposes for which it was collected, including providing healthcare services, responding to your queries, complying with legal obligations, and resolving disputes. Specifically:

• Medical records and clinical data are retained for a minimum of ten (10) years from the date of last service, in line with applicable healthcare regulations and Asian Heart Institute’s internal Medical Records Policy.
• Account data, App usage data, and non-clinical personal information (such as login credentials, device identifiers, app interaction logs, and appointment history) are retained for a period of three (3) years from your last interaction, after which they are securely deleted or anonymised, unless a longer retention period is required by law.
• Financial transaction records are retained as required under the Income Tax Act and other applicable financial regulations.
• Aggregated and anonymised data that no longer identifies you may be retained indefinitely for research, analytics, and service improvement.

14.2 How to Request Deletion of Your Data

You may request deletion of your account and associated personal data at any time by writing to us at dataprivacy@ahirc.com with the subject line “Account & Data Deletion Request”, including your registered name, mobile number, and registered email address for identity verification.

14.3 What Happens When You Request Deletion

Upon receiving and verifying a deletion request:

• Your App account, login credentials, device identifiers, app interaction logs, appointment history, and other non-clinical personal information will be permanently deleted within thirty (30) days of verification.
• Medical records and clinical data cannot be deleted upon request, as Asian Heart Institute is legally required to retain them under applicable healthcare regulations. These records will continue to be held securely and confidentially in accordance with our Medical Records Policy and will be destroyed only after the statutory retention period expires.
• Information already shared with regulatory bodies, insurance providers, third-party administrators, or legal authorities prior to the deletion request cannot be recalled.
• Aggregated and anonymised data that no longer identifies you may be retained for research and service-improvement purposes.

14.4 Confirmation of Deletion

We will confirm completion of your deletion request via email to your registered email address within thirty (30) days of receiving and verifying the request.

15. Your Rights Under the Digital Personal Data Protection Act, 2023

In addition to the rights described elsewhere in this Privacy Policy, you have the following rights in respect of your Personal Information:

• Right to Access: You may request a summary of the Personal Information we hold about you and the processing activities undertaken in respect of such information.
• Right to Correction: You may request correction of inaccurate or incomplete Personal Information, in accordance with Clause 12.
• Right to Erasure: You may request deletion of your Personal Information, in accordance with Clause 14, subject to legal retention obligations.
• Right to Grievance Redressal: You may raise a grievance regarding the processing of your Personal Information by contacting our Grievance Officer (see Clause 16).
• Right to Nominate: You may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

16. Grievance Officer

In compliance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the contact details of our Grievance Officer are as follows:

Name: Bhagyashree Biswal
Email: dataprivacy@ahirc.com
Address: Asian Heart Institute, G/N Block, Bandra Kurla Complex, Bandra (East), Mumbai – 400 051, Maharashtra, India.

We will acknowledge any grievance within forty-eight (48) hours and endeavour to resolve it within thirty (30) days of receipt.

17. Children’s Data

Where the Asian Heart Institute provides healthcare services to a patient under the age of eighteen (18) years, the Personal Information of such minor is collected and processed only with the verifiable consent of the minor’s parent or lawful guardian, in accordance with the Digital Personal Data Protection Act, 2023. We do not undertake any processing of children’s data that is likely to cause detrimental effect on their well-being, and we do not engage in tracking, behavioural monitoring, or targeted advertising directed at children.

18. Contact Us

For any queries, requests, or concerns regarding this Privacy Policy or the manner in which your Personal Information is handled, please contact us at:

Email: dataprivacy@ahirc.com
Address: Asian Heart Institute, G/N Block, Bandra Kurla Complex, Bandra (East), Mumbai – 400 051, Maharashtra, India.