Patient Privacy Policy

1. Introduction & Commitment

Fertisure Healthcare ("Fertisure", "we", "us", or "our") operates the website https://fertisure.com/ and associated digital clinical communication channels. This Privacy Policy governs the collection, storage, processing, and protection of Sensitive Personal Data or Information (SPDI) and Protected Health Information (PHI) provided by patients, attendants, visitors, and users of our healthcare services.

By accessing our website, booking an appointment, submitting diagnostic records, or utilizing our clinical consultation services, you explicitly consent to the data practices described in this policy. If you do not agree with any terms of this policy, please refrain from providing personal health data or utilizing our platform.

2. Information We Collect

We collect information necessary to facilitate high-quality clinical assessments, medical consultations, and care coordination:

A. Personal Identification Data

• Full legal name, gender, age, date of birth, and identity documentation.
• Contact details including primary phone number, WhatsApp contact, email address, and residential address.
• Emergency contact information and details of legal guardians or authorized attendants.

B. Clinical & Health Information

• Current symptoms, medical history, prior diagnoses, past surgeries, and family medical history.
• Prescription history, current medications, drug allergies, and immunisation records.
• Diagnostic imaging reports (MRI, CT, Ultrasound), clinical lab investigations (blood tests, pathology reports), biopsy results, and prior discharge summaries.
• Fertility, reproductive, oncological, cardiac, or orthopedic health markers submitted for expert secondary opinion or treatment planning.

C. Appointment & Payment Data

• Preferred specialist, clinical department, appointment dates, times, and consultation mode (In-Clinic or Video Teleconsultation).
• Billing records, transaction IDs, invoice histories, and payment status. (Note: We do not store full credit/debit card numbers or CVVs; all online payments are processed through RBI-authorized, PCI-DSS compliant secure payment gateways).

D. Digital & Technical Usage Data

• IP address, browser type, device identifiers, operating system, and language preferences.
• Website navigation metrics, page viewing timestamps, and interaction data collected via essential cookies.

3. How We Use Health Data

Your data is processed strictly for legitimate healthcare, diagnostic, and communication purposes, including:

4. Medical Records Confidentiality

In accordance with the Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, all patient records and diagnostic discussions are treated with the highest degree of professional confidentiality. Access to your electronic health record is restricted strictly on a need-to-know basis to:

• Your assigned specialist doctors and consulting surgeons.
• Authorized clinical coordinators and nursing staff directly assisting your treatment pathway.
• Accredited diagnostic laboratories performing approved pathology or radiology investigations.

5. Teleconsultation Data & Video Privacy

For patients utilizing remote video consultations, sessions are conducted over end-to-end encrypted medical video communication protocols.

• We do not record video or audio teleconsultations without prior explicit written or recorded consent from both the patient and the physician.
• Digital prescriptions, clinical summaries, and doctor notes generated during teleconsultations are stored securely in your confidential electronic record.

6. Disclosure & Information Sharing

Fertisure Healthcare does not sell, lease, trade, or monetize your health information under any circumstances. We disclose your data only in the following restricted scenarios:

1. Authorized Care Partners: Partner hospitals, imaging centers, and accredited laboratory networks directly involved in your surgical or diagnostic care, under strict Business Associate & Non-Disclosure Agreements.
2. Legal & Statutory Requirements: When mandated by court order, law enforcement subpoena, public health emergency protocols, or statutory medical reporting regulations under Indian law.
3. Emergency Situations: To medical personnel or emergency responders when disclosure is essential to protect life or prevent severe physical harm.

7. Data Security & Encryption Standards

We employ multi-layered technical, administrative, and physical security safeguards to protect patient information from unauthorized access, loss, alteration, or breach:

• 256-bit TLS/SSL Encryption: All data transmitted between your browser and our servers is encrypted using modern TLS 1.3 cryptographic protocols.
• Restricted Role-Based Access: Access to medical databases requires multi-factor authentication and strict role-based permission controls.
• Continuous Security Auditing: Regular vulnerability assessments, firewall protections, and intrusion detection monitoring.

8. Data Retention Policies

Medical records, prescriptions, and diagnostic reports are retained in compliance with statutory clinical record retention mandates under Indian medical laws (typically a minimum of 3 years from the last clinical interaction for general patients, and longer for specific surgical or pediatric care). Non-clinical technical logs are purged on a routine rolling schedule.

9. Your Rights as a Patient

Under applicable health privacy regulations, you have the following rights:

• Right to Access: Request a copy of your electronic health records, prescriptions, and invoices.
• Right to Rectification: Request correction of inaccurate personal contact details or demographic information.
• Right to Withdraw Consent: Withdraw consent for non-essential communications (such as newsletters or health updates) at any time.
• Right to Grievance Redressal: Lodge a formal inquiry regarding data processing with our Data Protection Officer.

10. Cookies & Tracking Technologies

Our website uses essential and functional cookies to ensure proper operation, maintain language preferences (such as Google Website Translator settings), and provide secure session management. We do not use third-party tracking cookies to serve targeted behavioral advertisements. You can configure your browser to reject cookies, though certain interactive features may be affected.

11. Children's Privacy

Our website and services for pediatric care (including Neonatology and Pediatric consultations) require information to be submitted by a parent or legal guardian. We do not knowingly collect personal information directly from minors under the age of 18 without parental consent.

12. Contact & Grievance Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or your health data, please contact our designated Grievance Officer: