Privacy Policy

This Privacy Policy explains how Vinayaka Hospital (“we”, “us”, “our”) collects, uses, shares and protects your personal information when you interact with us through this website, the appointment-booking form, our WhatsApp channel, telephone, or in person at our hospital.

By using this site or contacting us through any of these channels, you agree to the practices described below.

We may collect the following categories of information:

• Identity & contact details: your name, age, gender, phone number, email address and postal address.
• Appointment details: preferred doctor or department, reason for visit, preferred date, and any clinical notes you choose to share.
• Messages: the content of messages you send to us via the website form, WhatsApp, email or SMS.
• Technical information: IP address, browser type, device information, pages visited and timestamps, collected through standard server logs and cookies.
• Clinical information: if you become a patient, we collect medical history, examination findings, investigation reports and treatment records as part of your medical file.

We use the information we collect to:

• schedule, confirm, reschedule or cancel your appointments;
• contact you with appointment reminders, test reports and follow-up instructions over phone, SMS, email or WhatsApp;
• respond to enquiries you raise through the website, WhatsApp, email or phone;
• provide and improve the medical services you have requested;
• send you occasional health information, camp announcements and promotional updates, where you have consented to receive them;
• comply with our legal, regulatory and accounting obligations.

We do not sell your personal information. We share your data only with the following categories of recipients, and only to the extent necessary:

• Service providers who operate on our behalf, including our website hosting provider, CRM and lead-capture tools, email and SMS providers, and our WhatsApp Business API provider (Meta Platforms, Inc.).
• Diagnostic and referral partners when an investigation, opinion or referral requires sharing of your clinical information.
• Insurance providers and TPAs where you have requested cashless or insurance-backed treatment.
• Government and regulatory authorities when required by law (for example, statutory disease notification or court orders).

All third-party processors are required to handle your data confidentially and only for the purposes we instruct.

When you share your phone number with us through the appointment form, the contact form, in person at the hospital, or by messaging our official WhatsApp number, you consent to receive WhatsApp messages from Vinayaka Hospital for the following purposes:

• appointment confirmations, reminders and rescheduling;
• test reports, prescriptions and follow-up instructions;
• responses to questions you ask through WhatsApp;
• occasional updates about our services, health camps and offers (only if you have not opted out of promotional messages).

WhatsApp messages are delivered through Meta's WhatsApp Business platform and are subject to Meta's own privacy terms.

You can stop receiving messages from us at any time:

• WhatsApp: reply STOP to any WhatsApp message from us, or send the word STOP to our WhatsApp number. We will remove you from non-essential messaging within two working days.
• Email: use the unsubscribe link in any marketing email, or write to care@myvinayakahospital.com.
• SMS / phone: ask the operator during a call, or reply STOP to a marketing SMS.

Please note that we may still need to contact you for essential service messages — such as confirming a booked appointment or sharing a critical test report — even after you opt out of promotional communications.

We keep your personal data only as long as it is needed for the purpose it was collected, or as required by law:

• Enquiries and unconverted leads: up to 24 months from the last interaction.
• Medical records: retained in accordance with the Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations and applicable Karnataka health-records rules — typically a minimum of three years from the last consultation, longer for indoor / inpatient records.
• Billing and tax records: retained for at least eight years to meet income-tax and audit requirements.

We store data on access-controlled systems, use HTTPS for all web traffic, encrypt our database backups, and limit access to staff who need it for their work. We review our security measures periodically.

You may at any time request to: access the personal data we hold about you, correct it, withdraw consent, or ask us to delete it (subject to any legal record-keeping obligations on us). To exercise any of these rights, write to us at care@myvinayakahospital.com with the subject line “Privacy request”.

We handle personal data in line with the Information Technology Act 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011, the Digital Personal Data Protection Act 2023 (as it comes into force), and Meta's WhatsApp Business Solution Terms.

Where a patient is a minor, we collect and process personal data only with the consent of a parent or legal guardian, and we will respond to any data request from the parent or guardian on behalf of the child.

We may update this Privacy Policy from time to time. The latest version will always be available on this page, with a revised effective date at the top. If we make a material change, we will also notify you through the channels you have shared with us before the change takes effect.

For any privacy question or request, please reach out to:

Vinayaka Hospital
429/51/1-1, Vishweshwaraiah Road, 80 Feet Road, Opp. Indian Oil Petrol Bunk, Devarachikkanahalli, BTM 4th Stage, Bengaluru – 560076
Phone: +91 99809 55836
Email: care@myvinayakahospital.com

See also our Terms & Conditions.