Privacy Policy

1Who We Are

OrthoMedd Hospital is an orthopaedic hospital located at Sector-38, Medicity, Gurugram - 122018, Haryana, India. In this policy, "we", "us" and "our" refer to OrthoMedd Hospital, and "you" refers to anyone who visits our website, contacts us, or receives care from us.

This policy covers our website at orthomeddhospital.com and the personal information we handle in the course of providing treatment, scheduling appointments and responding to enquiries.

2Information We Collect

We only collect information that we genuinely need. Depending on how you interact with us, this may include:

• Contact details — your name, phone number, email address and postal address, usually given when you book an appointment or submit a form.
• Health information — your medical history, symptoms, diagnoses, imaging, test results, prescriptions and treatment records, collected during consultation and care.
• Appointment details — the doctor you wish to see, your preferred date and time, and the reason for your visit.
• Billing information — insurance or scheme details such as CGHS, ECHS, Ayushman or a TPA, and payment records. We do not store your full card or bank details on our website.
• Website usage data — your IP address, browser type, device type, pages viewed and time spent, collected automatically to keep the site working and secure.

3How We Use Your Information

We use your information to:

• Provide medical consultation, diagnosis, treatment and follow-up care.
• Schedule, confirm, reschedule or remind you about appointments.
• Answer your questions and respond to enquiries you send us.
• Process billing, insurance claims and cashless approvals.
• Maintain accurate medical records as required by law.
• Improve our services, our website and the quality of care we deliver.
• Send you health information or hospital updates, where you have asked to receive them.

4Consent and Legal Basis

We process your personal data with your consent, and in line with the Digital Personal Data Protection Act, 2023 and applicable Indian medical and IT regulations. Where we are required by law to keep or disclose records, we may process your data on that legal basis instead.

You may withdraw your consent at any time by contacting us. Please note that withdrawing consent may limit our ability to provide certain services, and it does not affect records we are legally required to retain.

5When We Share Information

Your information stays within the hospital unless sharing is necessary. We may share it with:

• Treating clinicians — doctors, surgeons, nurses and technicians directly involved in your care.
• Diagnostic partners — laboratories and imaging centres, where a test is required for your treatment.
• Referral hospitals — if your care needs to continue elsewhere, and with your knowledge.
• Insurers and TPAs — to process a claim or a cashless approval you have requested.
• Service providers — IT, hosting and communication partners who help us operate, and who are bound to keep your data confidential.
• Government or legal authorities — where disclosure is required by law, a court order, or to protect someone from harm.

6How We Protect Your Data

We use reasonable technical and organisational safeguards to protect your information, including encrypted connections on our website, restricted staff access on a need-to-know basis, secure storage of physical and digital records, and confidentiality obligations for everyone who works with us.

No system can be guaranteed completely secure. If a breach occurs that is likely to affect you, we will inform you and the relevant authority as required by law.

7How Long We Keep It

We keep medical records for the period required under Indian medical regulations and hospital policy. Enquiry and appointment data is kept only as long as needed for the purpose it was collected, after which it is securely deleted or anonymised.

8Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Ask what personal data we hold about you and how it is being used.
• Request a copy of your medical records.
• Ask us to correct information that is inaccurate, incomplete or out of date.
• Ask us to erase data we no longer have a legal reason to keep.
• Withdraw a consent you previously gave.
• Nominate someone to exercise these rights on your behalf if you are unable to.
• Raise a grievance with us, and escalate it to the Data Protection Board of India if it remains unresolved.

9Cookies and Website Analytics

Our website uses cookies, which are small files stored by your browser, to keep the site functioning, remember your preferences and understand how visitors use our pages. Analytics cookies help us see which pages are useful so we can improve them.

You can block or delete cookies through your browser settings at any time. Some parts of the site may not work as intended if essential cookies are disabled.

10Links to Other Websites

Our pages may link to external sites, such as maps, insurance portals or health resources. We are not responsible for their content or their privacy practices. We encourage you to read the privacy policy of any site you visit from ours.

11Information About Children

We treat paediatric patient information with particular care. Where a patient is under 18, we collect and process their data only with the consent of a parent or legal guardian, as required by law.

12Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in the law. The revised version will be posted on this page with a new last-updated date. Significant changes will be communicated to you where required.