Introduction

Scope

This privacy policy applies to all personal and non-personal data that we collect from:

• Individuals accessing or using our website or mobile applications
• Patients availing treatment or diagnostic services at Baby Memorial Hospital
• Visitors, bystanders, dependents, or representatives interacting with our healthcare services
• Job applicants, employees, contractors, or service providers engaging with BMH digitally or physically
• Users submitting enquiries, making payments, participating in surveys or marketing initiatives
• Guardians, caregivers, autistic individuals, or persons who are mentally unstable or legally adjudged lunatic as per applicable law

The policy encompasses data collected through all digital platforms owned or operated by Baby Memorial Hospital, including but not limited to websites, patient portals, appointment booking tools, teleconsultation platforms, and electronic health record (EHR) systems.

This privacy policy does not cover:

• Third-party websites or services that are linked from or accessible via BMH’s platforms
• Information collected through non-affiliated entities that Baby Memorial Hospital does not own or control
• Practices of third parties not governed or operated by Baby Memorial Hospital, including but not limited to partner hospitals, labs, or insurance companies, unless data is shared under contractual obligation

Definitions

For the purposes of this privacy policy:

• “Baby Memorial Hospital” / “BMH” / “We” / “Us” / “Our” – refers to Baby Memorial Hospital, including its staff, healthcare professionals, contractors, and authorized affiliates acting on its behalf.
• “You” / “your” / “user” / “data principal” – refers to any individual accessing, browsing, or using our website or services, including patients, visitors, caregivers, job applicants, or legal representatives.
• “Website” – refers to the official Baby Memorial Hospital website at https://babymhospital.org and any subdomains or affiliated mobile platforms, tools, or digital services operated or owned by BMH.
• “Personal data / personal information” – means any information that relates to an identified or identifiable natural person and is capable of identifying such a person either directly or indirectly.
• “Sensitive personal data” – refers to a sub-category of personal data which includes data related to health conditions, biometric data, genetic information, financial data, government-issued identifiers, etc.
• “Non-personal data” – data that does not identify an individual directly or indirectly, such as anonymized usage data, IP address, browser information, etc.
• “Cookies” – small text files stored on your device by our website or third-party services to enhance your browsing experience.
• “Guardian” – legally authorized person acting on behalf of a minor or mentally unstable individual.
• “Main SPOC (Single Point of Contact)” – designated individual responsible for managing communications on behalf of a patient.
• “Data fiduciary” – Baby Memorial Hospital, which determines the purpose and means of processing your personal data.
• “Data processor” – third party that processes personal data on behalf of BMH under confidentiality obligations.
• “Processing” – any operation performed on personal data such as collection, use, storage, or erasure.
• “Third party” – any entity other than BMH involved in processing data, such as service providers or regulatory authorities.

Information We Collect

BMH collects data through its website and connected platforms to provide medical care and improve healthcare services.

• Personal information: Name, DOB, gender, contact details, medical history, guardian details, payment information, feedback, referrals.
• Digital / Non-personal information: IP address, device/browser details, cookies, usage analytics, CCTV footage.

Sources of Collection

• Direct input via registration, admission forms, surveys
• Digital platforms (website, social media, chatbots, CRM)
• Workshops, health programs, community connect
• Referrals and physician networks
• CCTV and hospital surveillance

Purpose for Which We Collect Your Data

• Delivering diagnosis, treatment, and follow-ups
• Managing appointments, billing, and payments
• Communicating with patients and caregivers
• Running wellness programs and community events
• Academic publishing or clinical documentation
• Ensuring hospital security via CCTV
• Marketing, outreach, and awareness campaigns
• Fraud prevention and regulatory compliance

Sharing of Information

BMH does not sell or rent your personal data. Data may be shared under lawful basis with:

• Healthcare providers (doctors, labs, specialists)
• Service providers (payment gateways, IT vendors, marketing partners)
• Regulatory or legal authorities
• Auditors, legal advisors, and compliance teams
• Investigators or risk consultants
• Emergency services to protect life and safety
• Marketing, outreach, and community programs
• Business affiliates in mergers or acquisitions

Data Storage and Processing

All personal data is processed and stored exclusively within India on secure BMH-managed systems and vetted third-party servers compliant with Indian legal standards. Data is retained only as long as required by law and BMH’s internal policies, ensuring data minimization and lawful handling.

Security Controls

• Encryption (in transit and at rest), SSL/TLS, firewalls
• Multi-factor authentication (MFA)
• Role-based access control (RBAC) and training for staff
• Restricted physical access with CCTV monitoring
• Regular internal and external audits
• Separate storage for Aadhaar/biometric data as per UIDAI guidelines

Use of Cookies

BMH may store temporary or permanent cookies to improve user experience. You may delete or block cookies via browser settings, though some site functions may be limited. Third-party cookies (ads/analytics) may be used; BMH is not responsible for external site practices. Please review external site policies before use.

Changes to the Privacy Policy

Baby Memorial Hospital reserves the right to modify or update this privacy policy at any time. Significant changes will be communicated via prominent notices on our website or other official channels.

Communication

Baby Memorial Hospital may contact you via phone, email, or WhatsApp for:

• Appointment reminders, test results, treatment updates
• Billing and insurance-related communication
• Invitations for workshops, surveys, or health programs
• Promotional and informational updates
• Policy or service changes, or emergency notifications