Babylon Hospital – Privacy Policy

Effective Date: 17th Feb 2025

Last Updated: 17th Feb 2025

1. Introduction

1.1 Babylon Hospital ("we", "us", "Babylon Hospital") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (www.babylonhospital.com), mobile applications, and other digital services (collectively, "Services").

1.2 By using our Services, you consent to the data practices described in this Privacy Policy. If you do not agree, please discontinue use immediately. If you use the Services on behalf of another person or entity, you confirm that you are authorized to do so and agree to this Privacy Policy on their behalf.

2. Legal Compliance

2.1 This Privacy Policy is published in compliance with:

• Section 43A of the Information Technology Act, 2000;
• Regulation 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
• Regulation 3(1) of the Information Technology (Intermediary Guidelines) Rules, 2011.

3. Information We Collect

3.1 We collect various types of information, including but not limited to:

• A. Personal Information
• Contact Data: Name, mobile number, email address, phone number.
• Demographic Data: Gender, nationality, date of birth, postal address.
• Usage Data: Service interactions, appointment history, transaction records.
• Health Data: Medical history, prescriptions, diagnostic reports.
• Insurance Data: Insurance carrier, plan details.
• Other Data: Any information you voluntarily provide (e.g., emails, feedback, work details).
• B. Sensitive Personal Data (as per SPI Rules)
• Passwords.
• Financial information (bank details, credit/debit card details, etc.).
• Medical records and history.
• Biometric data.
• Sexual orientation.
• Call data records.
• Any data received under lawful contracts.

3.2 We do not collect publicly available information or data accessible under the Right to Information Act, 2005.

4. How We Use Your Information

4.1 We use collected data to:

• Provide and improve our Services.
• Process transactions and facilitate payments.
• Conduct research and analysis (aggregated/anonymized data only).
• Enhance customer support and appointment management.
• Contact you for feedback or new service offerings.
• Improve system security and prevent fraud.
• Comply with legal and regulatory requirements.

4.2 Note: We do not sell personally identifiable information to third parties.

5. Data Sharing and Disclosure

5.1 Your data may be shared with:

• Service Partners: Payment processors, diagnostic labs, pharmacies, customer support services.
• Regulatory Authorities: If required by law, judicial order, or governmental request.
• Business Transfers: In case of mergers, acquisitions, or asset sales.
• Research and Analytics: Only anonymized, non-identifiable data is shared.

6. Data Security

6.1 We implement industry-standard security practices, including:

• Data Encryption: Secure data transmission using SSL and encryption protocols.
• Access Control: Restricted access to personal data.
• Regular Security Audits: Monitoring and updating security measures.

6.2 Despite our best efforts, no online platform is 100% secure. If you suspect unauthorized access, please contact us immediately.

7. Data Retention & Deletion

7.1 We retain personal data as long as necessary for providing services and as required by law.

7.2 After this period, data is anonymized and used for analytics or securely deleted.

7.3 You may request data deletion by contacting [email protected].

8. Children's Privacy

8.1 Our Services are not intended for children under 18 years. If a child has provided personal data, a parent or guardian may request its deletion.

9. Cookies & Tracking Technologies

9.1 We use cookies to improve user experience. You can manage cookie settings in your browser. Third-party advertisers may also use cookies; we do not control their practices.

10. Your Rights & Choices

10.1 You have the right to:

• Access, update, or delete your personal data.
• Withdraw consent for data processing (may limit service access).
• Opt-out of marketing communications at any time.

10.2 To exercise these rights, email us at [email protected].

11. Data Breach Notification

11.1 In case of a data breach affecting personal data, we will notify affected users within 72 hours, in compliance with applicable laws.

12. Changes to This Policy

12.1 We may update this policy from time to time. Changes will be communicated via email or on our website. Continued use of the Services after modifications constitutes acceptance of the updated policy.

13. Contact & Grievance Officer

13.1 If you have any concerns regarding data privacy, please contact:

The Chief Data Officer
Babylon Hospital
311, Adarsh Nagar, Jaipur - 302004
Email: [email protected]

14. Acceptance

14.1 By using our Services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

Last Updated: 17th Feb 2025