Privacy Policy

About this policy

This policy explains how the hospital handles personal information collected through this website, appointment bookings, callback requests and related communications. It does not replace information or consent provided for medical examination, treatment or other clinical services.

Information we collect

Depending on the form or service you use, we collect your name, phone or WhatsApp number, email address, selected doctor, appointment date and OPD shift, reason for your visit, additional notes and other information clearly requested on the form. Appointment records may include a booking number, fees, discounts, payment status and transaction references. A callback request includes your name, phone number and the status of the request.

Information you enter about symptoms, a reason for a visit or medical needs may be health information. Please provide only what is necessary for the request. Do not enter card details, passwords, OTPs or unrelated sensitive information in enquiry or appointment notes.

Our website and service providers also process technical information needed to deliver and secure the service, such as IP address, browser/device information, request times and service logs. Only after you accept optional analytics, Google Analytics processes website usage information. See the Cookie Policy for details.

Why we use information

We use relevant information to arrange and manage appointments, respond to enquiries and callback requests, communicate appointment details or reminders where enabled, maintain payment and booking records, support treatment-related coordination and follow-up, resolve disputes, secure the website and meet applicable legal obligations. Optional analytics helps us understand and improve website use; it is separate from providing your appointment.

Cookie consent is not consent to medical treatment. Declining optional analytics will not prevent you from using the appointment form.

Who may receive information

Relevant hospital staff and treating professionals may access information needed for their work. Service providers may process information needed to operate the website, host and store records, deliver communications, process enabled online payments or provide an optional feature you choose.

The website currently uses Hostinger hosting, a MongoDB database service, Google Analytics, Google Fonts, Google Translate and Google Maps. Razorpay is used when online payment is enabled. WhatsApp communications may use WhatsApp/Meta and the hospital's configured messaging provider when enabled. Public images may be delivered through Cloudinary. Provider configuration and available features may change.

If you make an online payment, payment credentials are handled through the payment provider's checkout. The appointment system records transaction references and payment status. Use the provider checkout for card details; do not include card numbers or CVVs in appointment forms.

The Analytics integration is configured not to send appointment form values, names, phone numbers, email addresses, private dashboard URLs or page query strings as analytics event parameters. Google still receives technical connection and usage information when its service is loaded. Usage measurements may include online identifiers and are not necessarily anonymous.

We may disclose information where required by applicable law or a lawful request, or where necessary and lawful to protect patient safety or address fraud or security incidents. Clicking external links, including WhatsApp, Maps or social media, takes you to services governed by their own policies.

Retention and follow-up

We retain relevant appointment and care-related information while it is needed for the patient's care, recovery and clinically appropriate follow-up. Some information may be needed for longer periods because of ongoing or recurring care, continuity of treatment, payment/accounting requirements, dispute resolution, or applicable medical-record and other legal obligations. Recovery alone does not necessarily mean every record can immediately be deleted.

Retention is based on the purpose and applicable requirements, rather than keeping every record indefinitely without review. When information is no longer needed and retention is not otherwise required, it should be securely deleted or de-identified through the hospital's approved records process. Backup copies may remain until their normal retention cycle ends and should remain protected.

Website enquiries, callback requests, technical logs, analytics and backups can have different retention needs from clinical records. Contact us for information about the retention applicable to your request.

Your requests and choices

Contact info@ashaarogyam.com for privacy questions, complaints, access or correction requests, or to request deletion or withdrawal of consent where applicable. Please provide enough information to identify your request; do not email full medical records, identity documents or payment credentials unless the hospital requests them through an appropriate secure process.

We may need to verify your identity or authority to act for a patient. Requests are subject to applicable law and lawful record-retention requirements. Where deletion or another request cannot be fulfilled, the hospital should explain the applicable reason. Withdrawing optional website consent does not cancel your appointment or erase records that must lawfully be retained.

Privacy contacts: Vimal Kumar — CEO; Dr. S. K. Mandal — Medical Director Email: info@ashaarogyam.com Address: NH 53, Opposite Toyota Showroom, Kadambari Nagar, Durg–Bhilai, Chhattisgarh, India.

Children and representatives

For a child or a person who needs assistance, a parent, guardian or appropriately authorised representative should submit the request and provide information required for the service. The hospital must follow applicable consent and verification requirements. Do not submit another person's information without appropriate authority.

Security and service providers

We use access controls and technical safeguards to protect information. No website, internet transmission or storage system can be guaranteed completely secure. Service providers may process information in India or other locations according to their arrangements and applicable requirements.

Changes

When this policy changes, the updated version and its effective date will be published here. A material change that requires additional notice or consent will be handled as applicable.