Privacy Policy

We collect information you give us directly, such as your name, phone number, email address, date of birth and the details you enter on our appointment, contact and callback forms.

When you visit us for consultation, diagnostics or admission, our registration and clinical teams collect health information such as symptoms, medical history, test results, prescriptions and treatment notes, as part of your medical record.

Our website also collects limited technical information automatically, such as your browser type, device type and pages viewed, through the cookies described in our Cookie Policy.

We use personal information to schedule and confirm appointments, respond to enquiries, provide clinical care, generate bills and receipts, and communicate updates about your visit or reports.

We may use your phone number or email to send appointment reminders, follow up on care, or share information you have specifically asked for, such as a callback or a cost estimate.

We do not sell personal or health information to third parties. Information is used only for the purposes it was collected for, or a purpose you have been informed of.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023, and other applicable Indian law. We rely on your consent when you submit a form on this website, and on our legitimate need to provide healthcare services once you register as a patient.

You have the right to seek access to, correction of, and, where permitted by law and medical record retention requirements, erasure of your personal data. You may withdraw consent for non-essential communication, such as marketing messages, at any time without affecting the care you receive.

Where required, we obtain separate, specific consent before performing procedures, sharing information with insurers or third-party administrators for cashless claims, or using clinical images for teaching purposes.

We share information with treating doctors, laboratories, pharmacy and other departments within the hospital as needed for your care, and with insurers, third-party administrators or government authorities where required for claims processing, statutory reporting or public health notification.

We may engage service providers, such as billing software or SMS and email providers, to operate this website and our patient communication systems. These providers are permitted to use information only to perform services for us.

We use reasonable administrative, technical and physical safeguards to protect personal and health information against unauthorised access, loss or misuse, including restricted access to medical records and secure storage of physical files and electronic systems.

No method of transmission or storage is completely secure. If you believe your information has been compromised, please write to us at appt@gvhcol.com.

We retain medical records and related personal information for the period required under applicable law and hospital policy, and thereafter only as long as reasonably necessary for continuity of your care, billing, insurance or legal requirements.

For patients under 18 years of age, we collect and process personal and health information with the consent of a parent or legal guardian, who may also exercise the rights described in this policy on the child's behalf.

We may update this Privacy Policy from time to time to reflect changes in law or our practices. The updated version will be posted on this page with a revised date.