Privacy Policy

Effective date: 19 June 2026  |  Last updated: 19 June 2026

This Privacy Policy explains how Isha Women's Hospital ("Isha Women's Hospital", "we", "us" or "our") collects, uses, discloses and protects your personal information when you use the Isha Women's Hospital mobile application and any related services (together, the "App"). By creating an account or using the App, you confirm that you have read and understood this Policy.

We are committed to handling your information in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable Indian laws.

1. Information we collect

a) Information you provide

• Identity & contact details: full name, gender, date of birth / age, phone number, email address and postal address.
• Account details: login credentials and any profile information you add.
• Appointment information: the doctor / service selected, preferred date and time, reason for visit and any notes or symptoms you choose to share.
• Health information you submit: details relevant to your care (for example, medical history, prior treatments or reports) that you voluntarily provide through the App.
• Payment information: where the App supports online payment, transaction details processed through a third-party payment gateway. We do not store your full card or banking credentials on our servers.
• Communications: messages, enquiries and feedback you send us.

b) Information collected automatically

• Device & technical data: device model, operating system version, app version, unique device / installation identifiers and crash logs.
• Usage data: features used, pages viewed, actions taken and timestamps.
• Log & network data: IP address and general (approximate) location derived from it.
• Notifications: a push token used to deliver appointment reminders and updates (only if you enable notifications).

2. How we use your information

• To create and manage your account.
• To book, confirm, reschedule or cancel appointments and to send you related reminders and updates.
• To enable the hospital's doctors and authorised staff to prepare for and provide your care.
• To process payments, where applicable.
• To respond to your enquiries and provide customer support.
• To operate, maintain, secure and improve the App, including diagnosing technical problems and preventing fraud or misuse.
• To comply with legal, regulatory and medical record-keeping obligations.

3. Legal basis and consent

We process your personal data on the basis of the consent you give when you register and use the App, and where necessary to provide the services you request, to comply with law, or for other lawful purposes permitted under applicable data-protection legislation. You may withdraw your consent at any time (see "Your rights" below); withdrawal does not affect processing carried out before withdrawal and may limit our ability to provide certain services.

4. Sensitive personal data & health information

Health information, and certain other categories such as financial information, are treated as sensitive personal data. We collect and use such information only for the purposes described in this Policy, restrict access to authorised personnel involved in your care or in operating the App, and apply additional safeguards to protect it. We do not use your health information for advertising and we do not sell it.

5. How we share your information

We do not sell or rent your personal information. We share it only as follows:

• With the hospital's doctors and authorised staff for the purpose of providing and managing your care and appointments.
• With service providers who help us run the App — for example hosting / cloud infrastructure, SMS / email / push-notification providers and payment gateways — strictly under confidentiality and data-protection obligations and only to the extent needed to perform their services.
• For legal reasons — where required by law, regulation, court order or a lawful request by a public authority, or to protect our rights, safety or property and that of others.
• In a business transfer — if the hospital or its operations are reorganised, merged or transferred, subject to this Policy continuing to apply to your information.

6. Data security

We implement reasonable technical and organisational security measures — including encryption of data in transit, access controls, authentication and secured servers — designed to protect your information against unauthorised access, alteration, disclosure or destruction. No method of transmission or storage is completely secure; while we strive to protect your data, we cannot guarantee absolute security.

7. Data retention

We retain your personal information for as long as your account is active and as long as needed to provide the services and to fulfil the purposes described in this Policy. Health and treatment-related records are retained for the periods required under applicable medical record-keeping laws and regulations (which, for certain fertility / assisted-reproduction records under the Assisted Reproductive Technology (Regulation) Act, 2021 and related rules, may require retention for an extended period). After the applicable retention period, information is securely deleted or anonymised.

8. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you and obtain a summary of it;
• request correction or updating of inaccurate or incomplete data;
• request erasure of your personal data;
• withdraw consent previously given;
• nominate another individual to exercise your rights in the event of death or incapacity; and
• raise a grievance with our Grievance Officer.

To exercise any of these rights, contact us using the details in the "Contact us" section. You can request deletion of your account and data as described on our Account & Data Deletion page.

9. Children's privacy

The App is intended for use by adults (18 years and over). We do not knowingly collect personal data directly from children without the consent of a parent or lawful guardian. Where information about a minor is provided in connection with care, it must be provided by a parent or guardian. If you believe a child has provided us data without such consent, please contact us and we will take appropriate steps to delete it.

10. Third-party services and links

The App may use third-party services (such as analytics, messaging or payment providers) and may contain links to third-party websites. Their use of your information is governed by their own privacy policies, and we encourage you to review them. We are not responsible for the practices of third parties.

11. Data location

Your information is primarily stored and processed on servers located in India. Where any processing occurs outside India, it is done in accordance with applicable law.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest revision. Material changes will be notified through the App or other reasonable means. Your continued use of the App after changes take effect constitutes acceptance of the revised Policy.

13. Contact us

For any questions, requests or complaints regarding this Policy or your personal data, please contact our Grievance Officer: