Privacy Policy

Privacy Policy

Effective Date: October 26, 2026

Last Updated: October 26, 2026

Website: https://vedahospital.com

Entity: Veda Hospital (A unit of Lalit Mohan Bansal Healthcare Pvt. Ltd.), Hospital Site No.- 2, Sector 16-17, Hisar, Haryana, India.

  1. Introduction & Overview

At Veda Hospital, we are committed to safeguarding the privacy, confidentiality, and security of our patients, visitors, and website users. Operating as Haryana’s premier 400-bed multispeciality and eco-friendly healthcare institution, we believe in transparency, ethical practice, and rigorous data protection.

This Privacy Policy explains how Veda Hospital collects, processes, uses, stores, and protects your Personal Information and Sensitive Personal Data or Information (SPDI) when you access our website (vedahospital.com), use our online appointment scheduling tools, interact with our digital patient services, or seek medical care at our facility.

By visiting our website or submitting information through our digital portals, you acknowledge and agree to the practices outlined in this policy.

  1. Information We Collect

We collect information directly from you, automatically through your interaction with our website, and during your clinical consultations.

  1. Personal Identification Data
  • Full name, age, gender, date of birth, and blood group.
  • Contact information (mobile number, alternate contact, postal address, and email address).
  • Emergency contact and family/guardian details.
  • Government-issued identification details (Aadhaar, Passport, Voter ID) required for hospital registration, admission, or Ayushman Bharat / government schemes.
  1. Sensitive Personal Health Data & Medical History (SPDI)
  • Medical history, current symptoms, prior diagnoses, prescriptions, and allergy profiles.
  • Clinical notes, surgical records, consultation summaries, and treatment plans.
  • Laboratory test results, diagnostic pathology reports, and radiology scans (e.g., MRI, CT, X-Ray, Ultrasound).
  • Insurance, TPA (Third-Party Administrator), and corporate healthcare scheme documentation.
  • Billing records, transaction identifiers, and payment status (note: Veda Hospital does not store raw credit/debit card numbers or bank account passwords; transactions are processed via secure, certified payment gateways).
  1. Automatically Collected Technical Data
  • IP address, browser type and version, operating system, and screen resolution.
  • Referral URLs, duration of visit, pages viewed, and navigation patterns on vedahospital.com.
  • Device identifiers and geolocation data (approximate location used to suggest nearest transit/emergency access).
  1. Purpose of Collection and Use of Data

We use your information strictly for legitimate medical, administrative, and clinical purposes:

  1. Healthcare Delivery: To schedule appointments, admit patients, administer clinical treatments, perform surgeries, and coordinate continuous inpatient and outpatient care.
  2. Diagnostic & Laboratory Services: To conduct tests, produce accurate pathology and imaging reports, and share results securely with treating consultants.
  3. Emergency Medical Services: To contact designated attendants and initiate rapid trauma care or critical triage.
  4. Billing & Insurance Processing: To verify cashless medical insurance, process TPA claims, settle bills, and issue legal receipts.
  5. Patient Communication: To send appointment confirmations, schedule reminders, follow-up alerts, health advisory notices, and laboratory report readiness alerts via SMS, WhatsApp, phone, or email.
  6. Hospital Administration & Quality Control: For internal audits, clinical quality monitoring, NABH/JCI accreditation standards, and operational efficiency improvements.
  7. Statutory & Legal Compliance: To comply with applicable laws, statutory reporting (e.g., infectious disease notifications to health authorities), and court orders.
  1. Disclosure & Sharing of Information

Veda Hospital maintains strict patient confidentiality. We do not sell, rent, or trade your personal or medical data to third parties for marketing purposes. Disclosures occur only in the following controlled circumstances:

  • Internal Clinical Teams: Treating physicians, surgeons, nursing staff, clinical pharmacists, and healthcare assistants on a strictly need-to-know basis.
  • Authorized Service Providers: Certified diagnostic labs, imaging partners, ambulance networks, and IT software providers (e.g., Electronic Medical Records/Hospital Information System vendors) operating under binding non-disclosure agreements.
  • Insurance Companies & TPAs: Medical summaries and diagnostic claims submitted with patient authorization to secure cashless or reimbursement facilities.
  • Legal and Regulatory Mandates: When required by central, state, or municipal law enforcement agencies, public health departments, or judicial summons.
  • Emergency Medical Situations: When disclosure is necessary to protect the life, health, or safety of the patient or another individual, and obtaining immediate consent is impractical.
  1. Data Security & Storage

We employ comprehensive technical, administrative, and physical safeguards to prevent unauthorized access, alteration, disclosure, or destruction of your data:

  • Encryption: All web traffic on vedahospital.com is encrypted using Secure Sockets Layer (SSL / TLS 1.3) protocols.
  • Access Control: Hospital Information Systems (HIS) and Electronic Medical Records (EMR) utilize role-based access, multi-factor authentication, and strict audit logs.
  • Physical Security: On-premise servers and paper medical archives are housed within restricted, biometric-controlled, climate-monitored facilities.
  • Security Audits: Regular vulnerability assessments and compliance audits are conducted to maintain industry-standard medical data integrity.
  1. Retention of Medical Records

Veda Hospital retains medical records and patient data in full accordance with the guidelines set forth by the National Medical Commission (NMC), the Clinical Establishments Act, and applicable Indian statutory requirements:

  • Inpatient records and surgical records are maintained for a minimum statutory period (typically 3 to 10 years depending on clinical classification and minor/adult status).
  • General inquiry messages and web contact submissions are archived or purged periodically once resolved.
  1. Cookies & Web Tracking

Our website uses cookies (small text files placed on your browser) to:

  • Ensure core website functionality and fast page loading.
  • Remember user preferences (such as language or text size).
  • Collect aggregated, anonymized analytical data via platforms like Google Analytics to optimize user navigation and service accessibility.

You can modify your browser settings to decline cookies at any time; however, some interactive features (such as dynamic doctor search or appointment forms) may function with limited capabilities.

  1. Patient Rights

As a data subject and patient at Veda Hospital, you have the right to:

  • Access: Request a copy of your discharge summaries, laboratory reports, and billing receipts.
  • Correction: Request rectification of incorrect or outdated personal contact details.
  • Consent Withdrawal: Withdraw your consent for non-essential digital communications (e.g., wellness newsletters or health camp updates) at any time by clicking “Unsubscribe” or notifying us.
  • Confidentiality: Expect medical examinations, discussions, and treatment protocols to remain completely confidential.
  1. Third-Party Links

Our website may include links to external websites, such as medical research institutions, government health schemes, or payment gateways. Veda Hospital is not responsible for the privacy practices, content, or security standards of external third-party domains. We advise reviewing their individual policies prior to sharing personal details.

  1. Grievance Redressal & Contact Information

In compliance with the Information Technology Act, 2000 and rules made thereunder, any discrepancies, concerns, or grievances regarding the processing or security of your data may be directed to our designated Grievance Officer:

  • Hospital Name: Veda Hospital
  • Attention: Data Protection & Grievance Officer
  • Address: Hospital Site No. – 2, Sector 16-17, Hisar, Haryana – 125001, India
  • Telephone: +91-895001100
  • Email: info@vedahospital.com / admin@vedahospital.com
  • Hospital Reception / Help Desk: +91-8950011000 (24×7)
  1. Amendments to This Policy

Veda Hospital reserves the right to update or modify this Privacy Policy at any time to reflect advancements in technology, clinical protocols, or statutory legal obligations. Any changes will be posted on this page with an updated “Last Updated” date. Continued use of vedahospital.com following modifications constitutes your acceptance of the revised policy.