Privacy Policy

Last updated: [DATE] — Effective for health1hospital.com and all Health1 Super Speciality Hospitals digital properties.

This policy is written to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable healthcare data regulations. It should be reviewed by legal counsel before publication — placeholders marked [LEGAL: ...] need counsel input, not just filling in.

1. Who this policy covers

This policy applies to anyone who visits health1hospital.com, books an appointment, uses our chatbot or WhatsApp services, or otherwise shares personal or health information with Health1 Super Speciality Hospitals ("Health1", "we", "us"), operated by H1N1 Super Speciality Hospitals Pvt. Ltd.

2. What we collect

Contact information: name, phone number, email address, when you book an appointment, use the chatbot, or sign up for updates.
Health information: symptoms you describe to our symptom checker or chatbot, appointment details, and — once you become a patient — your medical records as part of treatment.
Technical information: IP address, browser type, and pages visited, collected automatically for site security and performance.

3. How we use it

To book, confirm, and manage your appointments
To respond to questions through our chatbot or WhatsApp
To provide medical care once you are a registered patient
To send appointment reminders and (only if you opt in) health updates and newsletters
To improve our website and services

We do not sell your personal or health information to third parties. [LEGAL: confirm any data sharing with insurance/TPA partners for cashless claims processing, and disclose it explicitly here.]

4. Your rights under the DPDP Act

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Withdraw consent for non-essential communications (e.g., newsletters) at any time
Request erasure of your data, subject to our legal obligation to retain medical records for the period required by Indian medical record-keeping law

To exercise these rights, contact our Data Protection point of contact at privacy@health1hospital.com [LEGAL: confirm designated contact/grievance officer as required under the DPDP Act].

5. How we protect your information

Health1's digital systems (booking, HMIS, LAB1, MedPay) use encrypted connections and role-based access controls, so that only authorized clinical and administrative staff can view patient information relevant to their role.

6. Third-party services

Our chatbot and appointment confirmations may use third-party messaging services (such as WhatsApp Business/AiSensy) to communicate with you. These providers process messages on our behalf under their own security terms.

7. Children's information

For pediatric patients, information is provided and consented to by a parent or legal guardian on the child's behalf.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected with an updated "Last updated" date above.

9. Contact us

For privacy questions or concerns, reach us at privacy@health1hospital.com or write to our corporate office: Health1 Super Speciality Hospital, Near Venitian Villa, Shilaj Circle, S.P. Ring Road, Thaltej, Ahmedabad, Gujarat 380059.