Privacy Policy

1. Overview & Regulatory Framework

Senthil Hospital ("Hospital", "we", "our", or "us"), located at 9, Manthoppu Street, Near Bus Stand, Devakottai – 630302, Sivaganga District, Tamil Nadu, is committed to safeguarding the privacy and confidentiality of personal data and digital health information entrusted to us by patients, families, visitors, and website users ("Data Principals").

This Privacy Notice has been formulated in strict compliance with India's Digital Personal Data Protection Act, 2023 (DPDPA 2023), the Information Technology Act 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011, and applicable guidelines prescribed by the National Medical Commission (NMC) and the Clinical Establishments Act.

2. Categories of Personal Data Collected

We collect and process digital personal data through our website (senthilhospital.live), online appointment requests, inquiry forms, telephone helplines, WhatsApp communications, and in-person hospital registration:

• Identity & Demographic Information: Full name, age, date of birth, gender, marital status, and government-issued identification where required for insurance or admission.
• Contact Information: Phone number, WhatsApp number, email address, residential address, emergency contact person details, and pin code.
• Appointment & Inquiry Form Data: Preferred doctor or department, appointment date and time preferences, reason for consultation, and brief medical inquiries submitted via web forms.
• Clinical & Medical Data: Medical history, consultation notes, laboratory diagnostic reports, radiology imaging files, surgical records, prescription details, and allergy information (processed under doctor-patient confidentiality).
• Insurance & Financial Details: Chief Minister’s Comprehensive Health Insurance Scheme (CMCHIS) card details, PMJAY ID, private health insurance policy number, Third-Party Administrator (TPA) claim documents, and payment receipts.
• Technical Web Log Data: Anonymized browser type, IP address, device type, and visit timestamps collected automatically for website security and traffic analytics.

3. Purposes for Processing Your Data

In line with Section 4 and Section 6 of the DPDPA 2023, your personal data is collected and processed only for specified, explicit, and legitimate healthcare and administrative purposes:

• Scheduling, confirming, and managing clinical appointments with specialist doctors.
• Facilitating prompt response to medical inquiries and emergency contact form submissions.
• Providing clinical diagnosis, inpatient and outpatient healthcare services, surgical procedures, and emergency trauma management.
• Coordinating cashless insurance approvals, CMCHIS scheme benefits, and TPA claims.
• Communicating critical health updates, lab test results, appointment reminders, and discharge instructions.
• Complying with mandatory legal reporting obligations under Tamil Nadu Public Health legislation, infectious disease notification protocols, and statutory medical records maintenance rules.

4. Patient Consent & Your Rights under DPDPA 2023

When you submit an appointment request, contact form, or register at Senthil Hospital, you provide freely given, specific, informed, and unconditional consent for the processing of your personal data for your healthcare management.

Under the Digital Personal Data Protection Act 2023, you as a Data Principal hold the following statutory rights:

• Right to Access Information (Section 11): You have the right to request a summary of the digital personal data being processed about you, along with identities of any third parties with whom data has been shared.
• Right to Correction & Erasure (Section 12): You may request the correction of inaccurate or misleading data, the completion of incomplete data, or the deletion of data no longer required for treatment or legal compliance.
• Right of Grievance Redressal (Section 13): You have the right to accessible grievance redressal mechanisms regarding any aspect of data handling.
• Right to Nominate (Section 14): You have the right to nominate another individual who, in the event of death or incapacity, shall exercise your rights as a Data Principal.
• Right to Withdraw Consent (Section 6(4)): You may withdraw your consent for future non-clinical communications at any time by writing to our designated Grievance Officer.

5. Data Security, Confidentiality & Retention

Senthil Hospital implements reasonable technical and organizational security safeguards to prevent data breaches, unauthorized access, loss, alteration, or disclosure:

• SSL/TLS Encryption: All information transmitted through senthilhospital.live is protected with modern 256-bit Secure Socket Layer (SSL) encryption.
• Role-Based Access Controls: Only authorized medical professionals, nurses, and administrative billing personnel have access to patient medical records on a need-to-know basis.
• No Commercial Sale of Data: Senthil Hospital never sells, rents, trades, or commercializes patient contact details or health data to third-party marketing or advertising networks.
• Retention Schedule: In accordance with statutory Indian healthcare regulations, in-patient records are retained for a minimum of 3 years (or longer as mandated by legal requirements), after which data is securely erased or archived.

6. Data Protection Grievance Officer

Pursuant to Section 13 of the Digital Personal Data Protection Act 2023 and Rule 5(9) of the IT Rules 2011, Senthil Hospital has designated a Data Protection & Grievance Officer to address any privacy inquiries, data subject requests, or grievances:

*Last Updated: October 2026. This policy may be updated periodically to reflect legislative modifications or operational changes. Continued use of our website constitutes awareness of the published policy.