Effective Date: 09-09-2026 

Applies to:  hi-techhospital.in, including all campuses and sections published under this domain (for example, hi-techhospital.in/raurkela/ for the Rourkela campus) 

 Hi-Tech Medical College & Hospital (“HMCH”, “we”, “us”, “our”), operated by Vigyan Bharati Charitable Trust, is the Data Fiduciary in respect of personal data processed through the website hi-techhospital.in, including all campus-specific sections published under this domain such as hi-techhospital.in/raurkela/ for the Rourkela campus (together, the “Website”). This Privacy Policy explains how we collect, use, store, disclose and protect the personal data of visitors, patients, patient attendants and other users (“you”, “your”, “Data Principal”) who access or interact with the Website, regardless of which campus or department page they visit. 

This Policy is framed in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and its associated rules, as may be notified and amended from time to time. By accessing or using the Website, submitting a form, or otherwise sharing personal data with us, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described in it. If you do not agree with any part of this Policy, we advise you to discontinue use of the Website; continued use after any update to this Policy constitutes your acceptance of the updated terms. 

 Key Definitions: 

These terms, as used in this Policy, carry the meaning given to them under the DPDP Act: 

• Data Fiduciary: HMCH (operated by Vigyan Bharati Charitable Trust), which determines the purpose and means of processing your personal data. 
• Data Principal: You, the individual to whom the personal data relates. 
• Personal Data: Any data about you by which you are, or can be, identified. 
• Processing: Any operation performed on personal data, including collection, storage, use, sharing or deletion. 
• Consent Manager: A registered entity, where applicable, through which you may give, manage, review or withdraw consent. HMCH does not currently route consent through a third-party Consent Manager; consent is managed directly by HMCH. 

 Information We Collect: 

We may collect the following categories of information when you use the Website. Billing and payments at HMCH are handled offline at the hospital; the Website does not collect payment or financial information. 

 2.1 Information you provide directly: 

• Name, age, gender and date of birth 
• Contact details, including phone number and email address 
• Address, including city, state and pin code 
• Department or doctor preference when booking an appointment or enquiry 
• Details you enter in contact, appointment, callback or feedback forms 
• Any health-related information you voluntarily mention while describing your query or symptoms in a form 
• Any other information you voluntarily choose to share with us through the Website or in correspondence with us 

2.2 Information collected automatically: 

• IP address, browser type and device type 
• Pages visited, time spent on the Website, referring URL and click behavior 
• Cookies and similar tracking identifiers (see Section 5) 
• Approximate location derived from your IP address or browser settings 

 How We Collect Information:

• When you fill out an appointment, contact, callback or enquiry form on the Website 
• When you call, WhatsApp or email us using the contact details listed on the Website 
• When you interact with chat widgets or click-to-call/click-to-WhatsApp elements 
• Automatically, through cookies and analytics tools, when you browse the Website 
• When you click through to the Website from an advertisement (Google, Meta or other ad platforms)

   Consent and Use of Personal Data:

Wherever we rely on your consent to process personal data (for example, when you submit a form), we seek that consent for specific, clearly stated purposes, and only collect data relevant to those purposes. Where required, the consent request is presented separately from other information, in clear language, and includes contact details for our Grievance Officer. 

We use the personal data collected for the following purposes: 

• To respond to appointment requests, enquiries and callback requests 
• To connect you with the relevant department or doctor’s team 
• To send appointment confirmations, reminders or updates via call, SMS, WhatsApp or email 
• To operate, maintain, and improve the Website and its content 
• To analyze Website traffic and user behavior so we can improve navigation and content relevance 
• To measure and optimize our advertising campaigns 
• To send promotional or informational communications about HMCH’s services, health camps or offers, where you have not opted out of such communications 
• To aggregate and anonymise data for research, statistical analysis, service quality improvement and accreditation reporting, in a form that does not identify you 
• To investigate, prevent or act on suspected fraud, misuse of the Website, or violations of this Policy 
• To establish, exercise or defend our legal rights, including in connection with any dispute, claim or regulatory proceeding 
• To comply with applicable law, regulatory requirements or lawful requests from authorities 

You are responsible for ensuring that the information you provide to us is accurate and current. We are not liable for any loss or consequence arising from incomplete, inaccurate or outdated information provided by you. 

You may withdraw consent at any time by writing to our Grievance Officer (Section 17). Withdrawal does not affect the lawfulness of processing carried out before withdrawal and may limit our ability to respond to a pending appointment request or enquiry. We do not sell your personal data to third parties. 

 Cookies and Tracking Technologies: 
 

The Website uses cookies and similar technologies to support functionality, analytics, and advertising. These include: 

 You can control or disable cookies through your browser settings at any time. Disabling cookies may affect certain features of the Website. Third-party cookies are governed by the respective third party’s own privacy and cookie practices, and we do not control or take responsibility for them. 

Sharing and Disclosure of Information: 
 

We do not rent, sell, or trade your personal data. We may share it, strictly on a need-to-know basis, with: 

• Authorized HMCH staff and the relevant clinical department, to action your appointment or enquiry 
• Service providers who support our website, communications or advertising (for example, hosting providers, WhatsApp Business API, analytics and advertising platforms), bound by confidentiality obligations 
• Government authorities, regulators or courts, where disclosure is required by law, or where necessary to establish, exercise or defend our legal rights 
• A successor entity, in the event of a merger, restructuring, or transfer of business operations, subject to that entity honoring the terms of this Policy 

We may also compile, aggregate, or anonymize personal data so that it no longer identifies you, and use or share such aggregated/anonymized data for research, statistics, service improvement or accreditation reporting, without further reference to you. 

Cross-Border Transfer of Data: 

Some of the third-party tools used on the Website, such as Google Analytics/Site Kit, Google Ads and Meta Ads, may process data on servers located outside India. Where this occurs, such transfers take place in the ordinary course of using these platforms and are subject to the platforms’ own data protection safeguards. The DPDP Act permits transfer of personal data outside India except to countries specifically restricted by the Central Government; we do not knowingly transfer personal data to any such restricted jurisdiction. 

 Data Storage & Security: 

We adopt reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure or loss, including: 

• Access controls: Personal data submitted through the Website is accessible only to authorized staff who need it to respond to your request. 
• Secure transmission: Data submitted through Website forms is transmitted using standard encryption (HTTPS/SSL). 
• Vendor safeguards: Third-party tools used on the Website (hosting, analytics, communication platforms) are selected with attention to their own security practices. 
• Periodic review: Access permissions and Website security settings are reviewed on an ongoing basis. 

No method of transmission or storage over the internet is completely secure, and while we take reasonable steps to protect your data, we cannot guarantee absolute security. We will not be liable for any unintended loss, unauthorized access, or disclosure of your personal data that occurs despite these reasonable safeguards, except where such loss or disclosure results from our own negligence. In the event of a personal data breach likely to affect you, we will take steps to notify you and the Data Protection Board of India as required under the DPDP Act. 

Data Retention: 

We retain personal data collected through the Website for at least three (3) years from the date of your last interaction with the Website or HMCH, or for such longer period as may be required to comply with applicable legal, regulatory, tax, medical record-keeping or accreditation obligations, or to establish, exercise or defend a legal claim, whichever is later. Once no longer required, data is securely deleted or anonymized. 

 Your Rights as a Data Principal: 

Under the Digital Personal Data Protection Act, 2023, you have the following rights in relation to your personal data: 

• Right to Access: You may request a summary of the personal data we hold about you, the processing activities undertaken, and the identities of any entities with whom it has been shared. 
• Right to Correction and Updating (Rectification): If any personal data we hold about you is inaccurate, incomplete or outdated, you may write to our Grievance Officer requesting correction. Please specify the record and the correction needed; we will make reasonable efforts to update it within a reasonable time of receiving your request. 
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to any legal retention requirements. 
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal. 
• Right to Grievance Redressal: You may raise a complaint about how your personal data has been processed, as described in Section 17. 
• Right to Nominate: You may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, by writing to our Grievance Officer. 

To exercise any of these rights, please write to our Grievance Officer using the contact details in Section 17. We will respond within a reasonable time, and in any case within the timelines prescribed under the DPDP Act. We may require you to verify your identity before acting on any request, to prevent unauthorized access to, or alteration of, another person’s data.  

These rights are subject to the exceptions and restrictions set out in the DPDP Act (including for medical, legal, research and record-keeping purposes), and we reserve the right to decline a request that is manifestly unfounded, excessive or repetitive, or where fulfilling it would compromise the rights of another individual. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India. 

Children’s Privacy: 

The Website is intended for use by adults seeking information or services on behalf of themselves or a patient in their care. Where information relating to a minor is submitted (for example, while booking a pediatric appointment), it is understood to be provided by, and with the verifiable consent of, the minor’s parent or legal guardian, in accordance with the DPDP Act. The parent or guardian submitting such information is responsible for its accuracy and for the decision to share it, and HMCH is not liable for any consequence arising from information submitted on a minor’s behalf without proper authority to do so. 

 Third-Party References & Links: 

The Website may contain, or reference, links to third-party websites, including insurance partners, listing platforms, or social media pages. Inclusion of such a reference or link does not imply our endorsement of that third party or its site. We do not control these external sites, make no representation as to their accuracy or safety, and are not responsible or liable for their content, terms of use, privacy practices, or any transaction or interaction you have with them. We encourage you to review the privacy policy of any third-party site before sharing information with it. 

Do Not Track: 
There is currently no universal industry standard for how websites should respond to browser “Do Not Track” signals. Accordingly, the Website does not currently respond to Do Not Track signals. We will revisit this position as recognized standards develop. 

 Governing Law, Jurisdiction & Dispute Resolution: 

This Privacy Policy, and the collection and processing of personal data described in it, is governed by the laws of India, including the DPDP Act. Subject to the jurisdiction of the Data Protection Board of India for matters within its statutory remit, any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts at Bhubaneswar, Odisha. The Website is intended for use by residents of India. If you access the Website from outside India, you are responsible for compliance with the local laws applicable to you, and for satisfying yourself that your use of the Website is consistent with this Policy. 

 Limitation of Liability & Indemnification: 

To the maximum extent permitted by law, HMCH’s liability arising out of or in connection with this Policy, or the processing of your personal data, is limited to instances of our own proven negligence or willful default, and excludes indirect, incidental or consequential loss. Nothing in this Policy excludes liability that cannot lawfully be excluded under the DPDP Act or other applicable law. 

You agree to indemnify and hold HMCH, its trustees, employees and agents harmless from any claim, loss, or liability arising from: (i) information you provide that is false, inaccurate or misleading; (ii) your breach of this Policy; or (iii) your unauthorized use of the Website. 

General Provisions: 

Severability: If any provision of this Policy is held invalid or unenforceable by a court or the Data Protection Board of India, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall continue in full force and effect. 

Entire Policy: This Policy, together with any Terms of Use published on the Website, constitutes the entire understanding between you and HMCH regarding the processing of your personal data through the Website, and supersedes any prior understanding on the subject. 

Right to Restrict Access: We reserve the right to restrict, suspend or terminate your access to the Website, without liability, where we reasonably believe this Policy or applicable law has been violated. 

Changes to This Policy: 

We may update this Privacy Policy at our sole discretion, from time to time, to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised “Effective Date.” We encourage you to review this page periodically; your continued use of the Website after any update constitutes acceptance of the revised Policy. 

Grievance Officer / Contact Us: 

This Policy covers all campuses published under hi-techhospital.in. For questions, requests or grievances regarding this Privacy Policy or your personal data, please contact our Grievance Officer: 

Data Fiduciary: Hi-Tech Medical College & Hospital, operated by Vigyan Bharati Charitable Trust  

Bhubaneswar Campus: 

Health Park, Pandara, Bhubaneswar, Odisha 751025 

Phone: 0674-3500900 

Email: info@hi-techmedical.org 

Rourkela Campus: 

Near Hanuman Vatika, R.G.H Campus, Rourkela, 769004 

Phone: 0661 – 3500900 

Email: