Privacy Policy & Hospital Management Data Governance

Haryana Hospital (“we,” “our,” or “us”) operates a state-of-the-art super-specialty healthcare center located at Juhi Road, Badhra, Haryana – 127308, India. To deliver seamless, error-free clinical care, we provide the Haryana Hospital Management System (HMS) & Patient Companion Mobile Application.

The primary purpose of the Haryana Hospital application is to digitize and orchestrate the full spectrum of hospital operations and clinical care workflows that traditionally occur manually in a hospital. This includes:

• Reception & Registration: Digital patient enrollment, UHID generation, and doctor schedule-aligned OPD queue booking.
• Nursing Triage Station: Digital recording of vital parameters (BP, SpO2, blood glucose, temperature, BMI).
• Doctor EMR & e-Prescriptions: Comprehensive clinical notes, diagnoses, and digital orders for medications and lab tests.
• Pathology & Diagnostic Labs: Specimen accessioning, diagnostic test processing, and authenticated PDF report uploads.
• In-Hospital Pharmacy: Real-time prescription forwarding, batch verification, drug dispensing, and inventory tracking.
• Billing & Cashier Counter: Consolidated invoices combining OPD fees, lab investigations, medicines, and digital receipts.
• Blood Bank Registry: Blood group inventory, component stock (PRBC, Platelets, FFP), and transfusion safety logs.
• Inpatient (IPD) Management: Bed occupancy, daily doctor rounds, clinical progress notes, and discharge summaries.

This Privacy Policy explains how personal data and sensitive medical records (Protected Health Information / PHI) are collected, processed, protected, retained, and deleted in strict compliance with India's Digital Personal Data Protection (DPDP) Act 2023, the Information Technology Act, 2000, the Information Technology (SPDI) Rules, 2011, and the National Medical Commission (NMC) Telemedicine Practice Guidelines (2020).

To maintain patient confidentiality and prevent unauthorized access, the Haryana Hospital Management System enforces strict Role-Based Access Control (RBAC). Hospital staff are granted access strictly on a need-to-know basis according to their clinical or administrative responsibilities:

We collect only the minimum necessary information required to deliver high-quality clinical healthcare, hospital administration, and statutory medical documentation.

In compliance with Google Play Store Policies and the DPDP Act 2023, the Haryana Hospital Mobile Application requests only permissions strictly necessary for healthcare functionality:

Your health data and personal identifiers are processed strictly for legitimate clinical, diagnostic, and hospital administrative purposes:

• Facilitating the digital patient journey: Reception Booking → Nurse Triage → Doctor Consultation → Laboratory/Pharmacy Orders → Billing Invoicing.
• Generating digitally signed medical prescriptions valid across licensed pharmacies nationwide.
• Conducting diagnostic pathology investigations and publishing calibrated lab reports.
• Managing blood bank inventory and tracking blood unit cross-matching for transfusion safety.
• Maintaining statutory medical records in accordance with the National Medical Commission (NMC) Regulations and Clinical Establishments Acts.
• Preventing unauthorized system access, identity theft, and cyber-security breaches through system audit logging.

We implement comprehensive administrative, physical, and technical safeguards to ensure that patient health data is protected against loss, unauthorized access, and alteration:

In strict adherence to Indian healthcare statutes, medical records and personal data are categorized and retained according to defined regulatory schedules:

Under the DPDP Act 2023, patients and registered users possess the following statutory rights:

• Right to Access: Request a digital summary of personal profile records and diagnostic histories held by Haryana Hospital.
• Right to Correction & Rectification: Request correction of inaccurate demographic or contact details.
• Right to Account Deletion & Erasure: Request permanent deletion of mobile application user accounts, login credentials, and session tokens.
• Right to Grievance Redressal: Submit inquiries or complaints to our designated Data Protection & Grievance Officer.

Our hospital management system and mobile application are designed for adult patients, legal guardians, and authorized hospital staff. Medical records of pediatric patients (minors under 18 years of age) are created and managed strictly with verifiable parental or legal guardian consent during hospital registration.

We do not disclose your health records to external parties except in the following limited operational circumstances:

• Transactional SMS & Messaging Gateways: Encrypted transmission of login OTPs and appointment alert notifications.
• Accredited Reference Laboratories: Specialized external pathology laboratories when advanced diagnostic genomic or biomarker assays are ordered with patient consent.
• Statutory & Legal Requirements: When mandated by valid judicial orders, law enforcement warrants, or statutory public health authorities under Indian law.