1. Introduction
Clear information about how your personal data is handled.
Apollo Children’s Hospital is committed to protecting the privacy and dignity of every patient, parent, guardian, and website visitor. This Privacy Policy describes what information we collect, why we collect it, how we use it, and how we protect it.
We aim to keep this policy readable and practical. If any point is unclear, please contact us through the details listed in the Contact Us section.
2. Information We Collect
We collect only what is needed for patient care, hospital operations, and lawful obligations.
- Full name, date of birth, gender, and relationship details.
- Phone number, email address, and residential address.
- Government-issued ID details where required for verification.
- Emergency contact and guardian information.
- Clinical history, diagnosis notes, and treatment plans.
- Laboratory reports, imaging records, and prescriptions.
- Allergy details and medication-related information.
- Insurance and billing records linked to care delivery.
- IP address, browser type, operating system, and device type.
- Session logs, request timestamps, and diagnostic metadata.
- Approximate geographic information based on network routing.
- Security logs used to detect malicious activity.
- Visited pages, time spent, referral sources, and navigation paths.
- Click behavior on forms, appointment buttons, and contact links.
- Cookie-based preference and session continuity data.
- Aggregated analytics used for service improvement.
3. How We Use Your Information
- To schedule, confirm, and manage medical appointments.
- To provide consultation, treatment, and follow-up care.
- To maintain accurate electronic and physical medical records.
- To process insurance and billing transactions lawfully.
- To communicate updates, reminders, and health instructions.
- To improve website usability and patient experience.
- To meet legal, regulatory, and healthcare documentation requirements.
- To prevent fraud, abuse, unauthorized access, and security threats.
5. Children’s Privacy
As a pediatric healthcare institution, Apollo Children’s Hospital handles children’s information with heightened care. Information is generally collected from parents or legal guardians and used strictly for treatment, care coordination, and lawful obligations.
We encourage parents and guardians to review this policy carefully and contact us if they believe any child-related information was submitted inaccurately or without proper authorization.
6. Medical Information Protection
Medical records are treated as sensitive data. We apply strict safeguards across systems, personnel access, and clinical workflows to reduce unauthorized disclosure, misuse, or loss.
-
Role-based access for authorized medical and administrative teams only. -
Audit logging for access and key data handling events. -
Confidentiality practices in line with healthcare standards. -
Controlled retention and secure disposal protocols.
8. Third-Party Services
We may use trusted third-party tools for analytics, communication, appointment handling, and infrastructure support. These providers are expected to follow robust privacy and security standards.
Service Scope
Providers receive only data necessary for agreed services.
Contractual Controls
Contracts include confidentiality, security, and lawful-use clauses.
Independent Policies
Third-party websites/services may have separate privacy terms.
9. Appointment Forms
When you submit appointment forms, we collect the details required to schedule care, coordinate relevant departments, and respond to your request efficiently.
- Form submissions are transmitted over secure channels.
- Details are reviewed by authorized scheduling personnel.
- Relevant data is stored in healthcare systems as needed for service delivery.
- Incomplete or inaccurate submissions may require confirmation calls.
10. WhatsApp Communication
If you choose to communicate with Apollo Children’s Hospital through WhatsApp, we may use this channel for appointment reminders, non-urgent updates, and basic support responses.
Please avoid sharing highly sensitive medical details over messaging channels unless specifically requested by authorized hospital staff through secure procedures.
11. Email Communication
We use email for confirmations, informational responses, documents, and patient communication where appropriate. Emails may not always be fully encrypted end-to-end by default.
- Use only official hospital email addresses for communication.
- Do not share payment credentials or OTPs by email.
- Contact us immediately if you suspect phishing or spoofed messages.
12. Data Retention
We retain information only for as long as required by medical, legal, operational, and regulatory obligations. Retention periods depend on data type and applicable law.
Patient care records
Retained as required for continuity of care, compliance, and healthcare documentation standards.
Operational and support data
Kept for service quality, dispute handling, and audit purposes for a reasonable period.
Deletion and anonymization
Data is securely deleted or anonymized when no longer needed, unless law requires longer retention.
13. Your Rights
Depending on applicable law, you may request access, correction, deletion, restriction, or other controls over your personal information.
Access and correction
Request a copy of your information and ask us to correct inaccurate details.
Withdrawal of consent
Where consent is used, you may withdraw it subject to legal and medical constraints.
Deletion requests
Request deletion where legally permitted and where retention is no longer required.
Grievance support
You can raise concerns and request timely review through our privacy contact channels.
14. Security Measures
Apollo Children’s Hospital implements layered technical and organizational controls to secure data throughout collection, storage, transfer, and access.
SSL Encryption
Data in transit is protected with secure encryption protocols.
Secure Servers
Infrastructure is hardened and maintained using secure standards.
Firewalls
Network firewalls filter suspicious traffic and block threats.
Malware Protection
Endpoint and server protections are regularly updated and scanned.
Regular Backups
Secure backups support recovery and continuity of care systems.
Access Controls
Role-based permissions limit data access to authorized staff.
Monitoring
Continuous monitoring helps detect unusual activity early.
Secure Hosting
Hosting environments follow strong physical and digital controls.
15. External Links
Our website may include links to external websites or resources for convenience. We are not responsible for the content, privacy practices, or security of third-party websites.
Please review external sites’ privacy policies before sharing personal information.
16. Policy Updates
We may revise this Privacy Policy from time to time to reflect legal updates, service changes, or operational improvements.
- Any material update will be published on this page.
- The “Last Updated” date will indicate the latest revision.
- Continued use of our services indicates acknowledgment of updated terms.
17. Contact Us
For questions, requests, or concerns regarding this Privacy Policy, please contact Apollo Children’s Hospital using the information below.
Hospital Contact Details
-
Hospital Name: Apollo Children’s Hospital -
Address: [Insert full hospital address] -
Phone: [Insert phone number] -
Email: [Insert official email] -
Website: https://www.apollochildrenshospital.com -
Working Hours: [Insert working hours]
Privacy & Emergency Contacts
-
Support Email: [Insert privacy/support email] -
Emergency Contact: [Insert emergency contact number] -
Google Map: [Insert Google Maps link placeholder]
Please include your full name, registered contact details, and a short description of your request so our team can assist you promptly.
Frequently Asked Questions
We collect personal details, medical records, technical data, and website usage information needed for care delivery, operations, compliance, and service improvement.
No. We do not sell personal information.
Yes. We use layered safeguards including encryption, secure systems, restricted access, monitoring, and backup controls to protect medical data.
Yes, where legally permitted. Some medical or legal records may need to be retained for mandatory compliance periods.
Retention depends on record type and legal requirements. We keep information only as long as needed for care, compliance, and operational continuity.
Contact our support or privacy team using official channels. We may verify identity before updating records for your safety.
Yes. Cookies help with security, preference memory, and performance analytics. You can adjust cookie settings through your browser.
Please use the contact details in the Contact Us section on this page. Our team will guide you through requests and concerns.
Legal Note
This page is a professional privacy policy template and should be reviewed by Apollo Children’s Hospital’s legal advisor for compliance with applicable laws including the Digital Personal Data Protection (DPDP) Act, 2023, GDPR where applicable, and other relevant regulations.