1. Introduction

We, St. Joseph’s Mission Hospital (SJM Hospital), are committed to protecting the privacy, confidentiality, and security of your personal and medical information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website https://sjmhospital.org/, use our online services, make payments, or interact with us via WhatsApp, mobile application, and other digital communication channels.

By using our website or services, you agree to the collection and use of your information in accordance with this policy and applicable laws in India, including the Digital Personal Data Protection Act (DPDPA), 2023 and the Information Technology Act, 2000.

2. Information We Collect

We collect personal information necessary to deliver healthcare services, facilitate appointments, process payments, and communicate effectively with you.

A. Personal Identification Data

• Full name, age, gender, date of birth.
• Contact details: Mobile number, WhatsApp number, email address, physical address.
• Government IDs (if required for registration, insurance claims, or verification).

B. Health & Medical Information (Sensitive Personal Data)

• Medical history, diagnostic test results, lab reports, prescriptions, and treatment notes.
• Doctor appointment details and consultation notes (offline and teleconsultations).

C. Financial & Transaction Data (Online Payment)

• Payment history, transaction IDs, invoice numbers, and payment status.
• Note: SJM Hospital does not directly store full credit/debit card numbers, CVV, or banking passwords. All online payments are securely processed through third-party, PCI-DSS compliant Payment Gateways.

D. WhatsApp Communication Data

• Chat history, voice notes, media files, and medical reports shared with or by SJM Hospital via WhatsApp for consultation, appointments, or administrative inquiries.

E. Technical & Usage Data

• IP address, browser type, device details, operating system, and website usage statistics via cookies and analytics software.

3. How We Use Your Information

We collect and use your data for the following medical, operational, and administrative purposes:

1. Healthcare Delivery: Scheduling appointments, managing medical consultations, maintaining Electronic Health Records (EHR), and delivering treatment.
2. WhatsApp Services: Sending appointment confirmations, reminders, diagnostic reports, invoices, digital prescriptions, feedback links, healthcare and promotional information, and responding to inquiries via WhatsApp (Manual & Chatbots).
3. Payment Processing: Facilitating online billing and payment settlements through secure payment gateways.
4. Communication: Contacting you regarding updates, emergency alerts, or administrative updates.
5. Quality & Compliance: Enhancing hospital operations, ensuring compliance with medical regulations, and responding to legal demands.
6. Mobile Application: Handling appointment reminders, diagnostic reports, invoices, EHR reports, digital prescriptions, healthcare management, feedback links, and facilitating online billing and payment settlements through secure payment gateways.

4. Privacy Policy for WhatsApp Communication

When you interact with SJM Hospital via WhatsApp:

• Consent: By sending a message or opting into our WhatsApp service, you explicitly consent to receiving healthcare communications, appointment reminders, healthcare and promotional information, and digital health records through WhatsApp.
• Encryption & Data Transmission: Messages sent via WhatsApp are protected by WhatsApp’s end-to-end encryption. However, once messages/documents reach our official devices or automated systems, they are handled under SJM Hospital's standard internal privacy policies.
• Voluntary Sharing: You are advised not to share unnecessary or highly sensitive personal information unless requested by authorized hospital personnel for direct medical assistance.
• Opt-Out: You can opt out of receiving promotional or non-essential WhatsApp communications at any time by replying "STOP" or contacting us directly.

5. Online Payments & Data Security

To provide convenient online payment options:

• We integrate with third-party Payment Gateway Providers.
• Your payment transactions are encrypted using Secure Sockets Layer (SSL) technology.
• We do not collect or store sensitive financial credentials on our servers. Your interaction with the payment gateway is governed by the respective gateway's privacy policy.

6. Disclosure and Data Sharing

SJM Hospital respects your privacy and will never sell, rent, or trade your personal or medical data to third parties. We may share your information only under the following circumstances:

1. Internal Medical Staff: Doctors, nurses, lab technicians, and administrative staff on a strict "need-to-know" basis for delivering your care.
2. Authorized Service Providers: Secure cloud hosts, payment gateway partners, EHR software vendors, and official WhatsApp Business API service providers bound by confidentiality contracts.
3. Insurance & TPA Companies: For cashless claim processing, as requested or authorized by you.
4. Legal & Regulatory Obligations: When mandated by law, court orders, or government authority requests (e.g., public health reporting).

7. Data Security Measures

We implement appropriate technical, administrative, and physical security controls to safeguard your data against unauthorized access, alteration, disclosure, or destruction.

• Encryption of digital transmissions and secure storage protocols.
• Access controls restricting health data strictly to authorized personnel.
• Regular system security reviews and routine backups.

8. Data Retention & Patient Rights

• Retention Period: SJM Hospital retains medical records and personal data in accordance with medical ethics guidelines, applicable laws, and hospital documentation standards.
• Your Rights: As a patient/data principal, you have the right to:
  • Access your medical records and personal details.
  • Request correction or updating of inaccurate data.
  • Withdraw consent for non-essential data processing or marketing communications.

9. Cookies and Analytics

Our website https://sjmhospital.org uses standard cookies to enhance user experience, remember preferences, and analyse website traffic. You can choose to disable cookies through your web browser settings, though some website features may not function optimally.

10. External Third-Party Links

Our website may contain links to external third-party websites or services (e.g., payment gateways, social media pages). SJM Hospital is not responsible for the privacy practices or content of these third-party platforms. We encourage you to read their respective privacy policies.

11. Changes to This Privacy Policy

SJM Hospital reserves the right to modify or update this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last Updated" date. Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.

12. Grievance Officer & Contact Information

If you have questions, concerns, or grievances regarding this Privacy Policy or the handling of your personal data, please contact us at: