Asha Multi-SpecialityPrivacy Policy — How We Protect Your Data
A plain-language, legally grounded account of what Asha Multi-Speciality Hospital collects, why, and how you stay in control of it — built around India’s Digital Personal Data Protection Act, 2023.
The short version, before the legal one
You shouldn’t need a law degree to understand how your data is handled. Here’s the plain-English summary — the full legal text follows below it.
We collect what care requires
Contact details, health information shared with your doctor, and basic technical data from browsing the site.
We never sell your data
Your information is used to provide care and communicate with you — not sold to third parties, ever.
You stay in control
Access, correct, or request erasure of your data at any time — see “Your Rights” below.
Access is restricted
Only treating clinicians and relevant staff can see your health records.
Children’s data needs a guardian
For our Pediatrics department, a parent or guardian consents and exercises rights on the child’s behalf.
A named person handles concerns
Mr. Sachin is our designated Grievance Officer — see the “Grievance” section for direct contact.
Where your data actually goes
A simplified map of the path your information takes when you interact with Asha.
You
Share info via visit, form, or WhatsApp
Asha Reception
Records your request, routes to the right doctor
Treating Clinician
Health data used solely for your care
Secure Records
Stored per medical record-keeping regulations
Your data is never routed to advertisers, data brokers, or unrelated third parties.
What information we collect
Contact Details
Name, phone number, and city — collected when you book an appointment via phone, WhatsApp, or our website.
Health Information
Collected directly by our medical staff during consultation, diagnosis, and treatment — never scraped from the website itself.
Technical Data
IP address, browser type, and pages visited — via Google Analytics/Search Console and Meta Pixel for advertising measurement.
Your rights as a Data Principal
Under the DPDP Act, 2023, you have real, enforceable rights over your personal data.
Access
See what personal data we hold about you.
Correction
Request correction of inaccurate or incomplete data.
Erasure
Request deletion, subject to legal medical record-keeping periods.
Withdraw Consent
Opt out of non-essential communications at any time.
Nomination
Nominate someone to exercise these rights on your behalf if needed.
Grievance & Escalation
Raise a concern with us, and escalate to the Data Protection Board of India if unresolved.
Full legal text
Every section, in full — for when the plain-language summary isn’t detailed enough.
1. What Information We Collect +
- Contact details you provide when booking an appointment via phone, WhatsApp, or our website (name, phone number, city)
- Health information shared with our doctors during consultation, diagnosis, and treatment — collected directly by our medical staff, not through the website itself
- Technical data automatically collected when you browse our website, such as IP address, browser type, and pages visited (via standard analytics tools, including Google Analytics/Search Console and Meta Pixel for advertising measurement)
2. Why We Collect It (Purpose) +
- To respond to appointment requests and provide medical consultation and treatment
- To maintain accurate medical records as required by Indian medical regulations
- To communicate with you regarding your care (appointment reminders, follow-ups)
- To improve our website and services through anonymized usage analytics
- To comply with legal, regulatory, and medical record-keeping obligations
3. Your Consent +
4. Your Rights as a Data Principal (DPDP Act, 2023) +
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure of your data, subject to our legal obligation to retain medical records for the period mandated by Indian medical council regulations
- Withdraw consent at any time for non-essential communications, without affecting the lawfulness of processing carried out before withdrawal
- Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
- Lodge a grievance with our designated Grievance Officer and, if unresolved, escalate to the Data Protection Board of India
5. How We Protect Your Data +
5a. Website Contact/Enquiry Forms +
6. Data Sharing +
- With our treating doctors and clinical staff involved in your care
- With diagnostic labs or specialists we refer you to, with your knowledge
- With insurance providers or third-party administrators (TPAs), only where you have opted for cashless/insurance-based treatment
- Where required by law, court order, or regulatory authority
7. Data Retention +
9. Children’s Data +
10. Changes to This Policy +
Analytics & tracking tools in use
Exactly what’s running on this website, and why.
Grievance Officer
For any privacy-related questions, requests, or complaints, contact our named officer directly.
The rest of our legal & trust framework
Contact Us About Your Data
Asha Multi-Speciality Hospital · MPA-4, Mahaveer Nagar-II, near Central Public School, Kota, Rajasthan 324005
Phone: +91-7300342858 · Email: ashawellnesssanctuary@gmail.com