Effective Date: [November 19, 2024]

Wockhardt Hospital (“we,” “us,” or “the Hospital”) is fundamentally committed to protecting the privacy and confidentiality of your Protected Health Information (PHI), personal data, and medical records. This Privacy Policy details how we collect, use, share, and protect your information in compliance with applicable health data privacy laws and regulations (such as HIPAA, GDPR, and relevant national health data standards).

 

1. Scope and Applicability

 

This policy applies to all PHI and personal data collected by Wockhardt Hospital through patient registration, medical treatment, financial billing, website usage, and communication channels.

 

2. Information We Collect and Process

 

We collect various categories of information necessary for the provision of healthcare services:

Category of Data	Examples of Data Collected	Purpose of Collection
Protected Health Information (PHI)	Medical history, diagnoses, treatment plans, prescriptions, laboratory results, surgical reports, insurance claims, and electronic medical records (EMR).	Core purpose of treatment, payment, and healthcare operations (TPO).
Personal Identification & Contact Data	Patient name, date of birth, gender, marital status, address, emergency contact information, phone number, email, and Aadhaar/PAN details.	Patient identification, appointment scheduling, billing, and communication.
Financial & Insurance Data	Health insurance details, policy numbers, claim information, billing records, and payment card details (processed by secure third parties).	Claim processing, billing, auditing, and financial reconciliation.
Technical & Usage Data	IP addresses, website navigation data, date/time stamps (for users of our patient portal or website).	Website performance, security, and service improvement.

 

3. Permitted Uses and Disclosures of Your Information

 

We use and disclose your PHI primarily for Treatment, Payment, and Healthcare Operations (TPO), and as permitted by law:

• Treatment: Using and sharing your PHI with doctors, nurses, and other healthcare professionals involved in your care.

• Payment: Using and disclosing PHI to process insurance claims, determine coverage, and send bills to you or a third party.

• Healthcare Operations: Disclosing PHI for quality assessment, protocol review, training programs, credentialing of staff, and general business planning.

• Appointment Reminders: Using your contact information to send appointment reminders, follow-up calls, or informational materials about your care.

• Required by Law: Disclosing PHI when legally mandated, such as public health activities, law enforcement, or in response to a court order.

• Research (with De-Identification): Using de-identified (anonymized) information for medical research, unless specific authorization is obtained for identifiable data.

 

4. Patient Authorization and Special Consents

 

• Marketing and Sales: We will obtain your explicit, written authorization before using or disclosing your PHI for marketing purposes unrelated to your treatment or for the sale of PHI.

• Psychotherapy Notes: Disclosure of psychotherapy notes requires a separate, specific authorization.

 

5. Data Security and Safeguards

 

• Confidentiality: We maintain the highest standards of confidentiality and adhere to strict patient-doctor privilege guidelines.

• Technical Security: Our electronic systems (EMR, Patient Portal) are protected by advanced encryption, multi-factor authentication, restricted access controls, and regular vulnerability assessments to ensure data integrity and security.

• Physical Security: Access to paper records and physical storage areas is strictly controlled and monitored.

• Personnel Training: All staff members receive regular, mandatory training on data privacy, security protocols, and patient confidentiality laws.

 

6. Your Rights Regarding Your PHI

 

As a patient, you have the right to:

• Right to Access (Inspection and Copy): Request to inspect or receive a copy of your medical and billing records.

• Right to Amendment: Request an amendment or correction to your medical record if you believe the information is incorrect or incomplete.

• Right to Accounting of Disclosures: Request a list of certain disclosures of your PHI made by the Hospital.

• Right to Request Restrictions: Request limitations on how we use or disclose your PHI for TPO. We are not required to agree to all requests, but we will review them carefully.

• Right to Confidential Communications: Request that we communicate with you about medical matters in a certain way or at a certain location (e.g., mail correspondence to an office address rather than home).

 

7. 📢 Notification and Communication Consent

 

By accepting this policy, you acknowledge and consent to receive notifications and promotional communications from us through various channels, including but not limited to email, mobile push notifications, SMS, RCS (Rich Communication Services), WhatsApp, or any other digital communication platforms.

If you prefer not to receive such updates or marketing communications, you may opt out by contacting us at info@wockhardthospital.shop.