Patient Data Privacy & Confidentiality Policy

1 Scope & Applicability

This Policy applies to personal information and medical records provided voluntarily by patients, their attendants, legal representatives, and visitors when using our digital channels (eyevistahospital.com, tele-consultations, messaging desks, appointment booking forms) or during visits to our clinical establishment at Paldi, Ahmedabad, Gujarat.

2 Categories of Information Collected

To facilitate ophthalmic consultation, clinical assessment, and hospital administrative workflows, we may collect:

• Demographic Information: Name, age, gender, contact number, email address, residential address, emergency contact details, and identification credentials required for patient registration or insurance verification.
• Health & Clinical Records: Relevant ocular symptoms, past medical and surgical history, diagnostic test reports, prescription details, ophthalmic scan outputs, and treatment summaries.
• Billing & Insurance Information: TPA/insurance policy identifiers, cashless pre-authorization records, and transaction reference details for billing and settlement purposes.

3 Purpose of Collection & Processing

Information provided is collected for legitimate healthcare, operational, and regulatory purposes, including:

1. Evaluating ophthalmic health, planning clinical treatments, and monitoring patient recovery.
2. Maintaining patient medical records in accordance with statutory guidelines applicable to clinical establishments.
3. Scheduling appointments, communicating test result availability, and sharing clinical follow-up reminders.
4. Processing insurance documentation, cashless claim pre-authorizations, and corporate healthcare billings.
5. Hospital administration, internal audits, and quality improvement processes.

4 Information Sharing & Disclosures

We do not disclose personal or clinical records except as required for patient care or authorized under applicable law:

• • Medical Personnel & Caregivers: Treating consultants, attending doctors, optometrists, and medical staff directly involved in the patient's care.
• • Diagnostic & Technical Service Providers: Third-party diagnostic facilities, laboratory partners, IT infrastructure providers, or software vendors assisting in clinical or administrative operations under appropriate confidentiality terms.
• • Insurers & TPAs: Insurance carriers, TPAs, or government health schemes as instructed or consented to by the patient for claim settlement.
• • Legal & Statutory Requirements: Government bodies, law enforcement agencies, or courts where disclosure is required by an applicable statute, legal process, or judicial order.

5 Security Measures & Disclaimer

We implement reasonable administrative, organizational, and technical safeguards intended to protect information against unauthorized access, loss, or misuse in line with industry practices. However, electronic transmission and internet storage cannot be guaranteed as completely secure or error-free. The Hospital makes no warranty against unintended security breaches caused by third-party actions, internet disruptions, malicious attacks, or technological limitations beyond its reasonable control.

6 Record Retention

Medical and administrative records are retained for the duration required to provide healthcare services, fulfill statutory record-keeping mandates prescribed under applicable medical regulations (such as NMC guidelines), or resolve any legal or billing matters.

7 Record Access & Correction

Patients or their authorized representatives may request copies of medical discharge summaries, diagnostic reports, or request updates to inaccurate contact information by submitting a written request along with valid identification at our hospital reception or via our official email.