Privacy Policy

1. Why This Privacy Policy?

This Privacy Policy is published in compliance with Section 43A of the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011, and the Information Technology (Intermediaries Guidelines) Rules, 2011.

The policy outlines:

• Types of information collected from users
• Purpose, means, and modes of information usage
• Information disclosure practices

2. Collection of Personal Information

Utkal Hospital collects various categories of user information:

• Contact Data: Email addresses and phone numbers
• Demographic Data: Gender, date of birth, and pin codes
• Usage Data: Service usage patterns and appointment history
• Health/Medical Data: Medical history, diagnostic reports, prescriptions, and medication records
• Insurance Data: Insurance carrier and plan details
• Voluntary Information: Details shared through emails, letters, work information, or family details

Classification Under SPI Rules

The hospital distinguishes between "personal information" and "sensitive personal data or information" (SPDI). SPDI includes:

• Passwords
• Financial information (bank accounts, credit/debit card details)
• Physical, physiological, and mental health conditions
• Sexual orientation
• Medical records and history
• Biometric information
• Information under lawful contract
• Visitor registration details
• Call data records

Public domain information accessible under the Right to Information Act, 2005 is excluded from these definitions.

3. Privacy Statements

User Consent and Service Terms

Users must accept the Terms of Use and Privacy Policy conditions to access services. Users may discontinue services if they disagree with any provisions.

Use of Information

"All the information provided to us by a User, including sensitive personal information, is voluntary." The hospital reserves rights to:

• Publish information on the website
• Contact users about new products or services
• Request product and service feedback
• Analyze software usage patterns
• Use anonymized information for commercial purposes
• Share aggregated, non-personally identifiable data with partners

Sensitive Data Consent

Collection of SPDI requires express user consent. Services may become unavailable without this consent.

Anonymized Data Usage

The hospital and partners may use anonymized user demographics and health information for:

• Improving product design
• Research and development
• Commercial product offerings
• Sharing analysis with third parties

Information Accuracy

Users are responsible for maintaining accurate information. Users can correct, delete, or amend information through their profile page or by contacting info@utkalhospital.in. If information is untrue, inaccurate, out-of-date, or incomplete, the hospital may discontinue service provision.

Account Cancellation

Users requesting account cancellation should contact info@utkalhospital.in. "We will retain your information for as long as your account with the Services is active and as needed to provide you the Services." Data retention follows legal requirements, with older data potentially anonymized and aggregated for analytical purposes only.

Payment Information

For paid services, the hospital collects credit card numbers and financial institution information for billing. User verification occurs through third-party payment gateway authentication. "User's credit-card/debit card details are transacted upon secure sites of approved payment gateways which are digitally under encryption."

Automatic Information Collection

When users visit the website, the hospital automatically receives:

• Referring website URL
• Internet Protocol (IP) address
• Operating system and browser type
• Email patterns
• Internet Service Provider (ISP) information

This data analyzes usage trends. "The linkage between User's IP address and User's personally identifiable information may be available to us or our Partners but is not shared with other third parties."

Cookies

The website uses cookies for technical administration, research, and user administration. Cookies do not store sensitive personal data. Third parties may place unique cookies for advertisement and service optimization purposes.

Account Registration

Creating an account requires:

• Name
• User ID
• Email address
• Physical address
• Date of birth
• Gender
• Phone number
• Password

Third-Party Websites

The Privacy Policy applies only to Utkal Hospital's owned websites and apps. "We do not exercise control over the sites that may be displayed as search results or links from within the Services." The hospital is not responsible for third-party privacy practices, accuracy, or content.

User-Generated Content

Users may communicate with others or post publicly accessible information. "Such Users, including any moderators or administrators, are not authorized Utkal Hospital representatives or agents, and their opinions or statements do not necessarily reflect those of Utkal Hospital."

Social Media Features

Websites and apps may include social media features (like Facebook buttons). "Your interactions with these Features are governed by the privacy statement of the company providing them."

Geolocation

With permission, the hospital uses mobile device geolocation features. Downloaded app data includes device type, operating system version, and device identifier. "Utkal Hospital and our Partners do not share your location information with other any third party." Users may opt out through device-level settings.

4. Security Measures

Data Protection

"Utkal Hospital has implemented best international market practices and security policies, rules and technical measures to protect the personal data that it has under its control from unauthorised access, improper use or disclosure."

However, the hospital is not liable for data loss or theft due to unauthorized device access.

Reasonable Security Practices

Implemented measures include:

• Data encryption during transmission using industry standards
• Regular production key and password changes
• Secure production server access
• Regular security updates

5. Data Disclosure

Legal Requirements

"Utkal Hospital takes your right to privacy very seriously and other than as specifically stated in this privacy Policy, will only disclose your personal information in the event it is required to do so by law, rule, regulation, law enforcement agency, governmental official, legal authority or similar requirements or when Utkal Hospital, in its sole discretion, deems it necessary in order to protect its rights or the rights of others, to prevent harm to persons or property, to fight fraud and credit risk, or to enforce or apply the Terms of Use."

Asset Transfer

The hospital may disclose or transfer user information as part of reorganization or asset sales. "Any third party to which Utkal Hospital transfers or sells its assets to will have the right to continue to use the personal and other information that Users provide to us."

Third-Party Contractors

To provide services, the hospital may share personal information with third-party contractors. "Generally these contractors do not have any independent right to share this information, however certain contractors who provide services on the Website, including the providers of online communications services, will have rights to use and disclose the personal information collected in connection with the provision of these Services in accordance with their own privacy policies."

6. Casual Visitors Note

• No sensitive data is automatically collected from casual website browsers
• Casual visitors must still read and understand privacy statements
• Temporary cookies from casual browsing should clear upon browser exit
• Users are those who willingly submit personal data through any means
• All Privacy Policy statements apply to such individuals

7. Confidentiality and Security

Information Storage

Personal information is maintained electronically and may be converted to physical form. The hospital implements "reasonable security practices and measures including certain managerial, technical, operational and physical security control measures that are commensurate with respect to the information being collected and the nature of Utkal Hospital's business."

Password Protection

No hospital administrator has knowledge of user passwords. Users must protect against unauthorized access. "Be sure to log off from the Website when finished. Utkal Hospital and its Partners do not undertake any liability for any unauthorized use of your account and password." Users must immediately notify the hospital of suspected unauthorized access at info@utkalhospital.in.

Information Access

User information is accessible to employees on a need-to-know basis only.

Third-Party Liability

"Utkal Hospital is not responsible for the confidentiality, security or distribution of your personal information by our Partners and third parties outside the scope of our agreement with such Partners and third parties." The hospital is not responsible for breaches beyond reasonable control, including government actions, hacking, computer crashes, encryption breaches, poor internet/telephone service, or similar events.

8. Changes to Privacy Policy

The hospital may update the Privacy Policy with or without advance notice. For significant changes, the hospital displays notices on the website or sends user emails so users may review changed terms.

Users may deactivate accounts by contacting info@utkalhospital.in if they object to changes. "If a User uses the Services or accesses the Website or uses the App after a notice of changes has been sent to such User or published on the Website, such User hereby provides his/her/its consent to the changed terms."

9. Children's and Minors' Privacy

"Utkal Hospital strongly encourages parents and guardians to supervise the online activities of their minor children and consider using parental control tools available from online services and software manufacturers to help provide a child-friendly online environment." Though websites and apps are not intended for minor use, the hospital respects minor privacy rights.

10. Consent to Policy

Users acknowledge the Privacy Policy is part of the Terms of Use. User registration signifies assent to the policy. Website visits, app use, and service access are subject to this Privacy Policy and Terms of Use.

11. Contact Information

For privacy questions, users should contact:

The hospital uses reasonable efforts to respond promptly to requests, questions, or concerns regarding information use.