Privacy Policy & Privacy Notice

Last updated: 9 October 2026

This notice explains how [TO BE CONFIRMED: Legal entity name of Sankalp Hospital (e.g. "Sankalp ... Pvt. Ltd." / trust / proprietorship)], operating as Sankalp Hospital, Near District Hospital, Manipur, Ambikapur, Chhattisgarh - 497001 (“we”, “us”), processes personal data collected through sankalphospital.com (the “website”). It is written with reference to the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

This notice covers the website only. Medical records created when you are treated at the hospital are handled under the hospital’s patient-records procedures and applicable medical-records law; ask at the reception desk for details.

1. Personal data we collect, why, and on what basis

In a medical emergency involving a threat to life or health, we may process personal data without consent to the extent permitted by Section 7 of the DPDP Act.

Information about your health is sensitive. We ask only for what is needed and use it only for the purpose above. We do not sell personal data, and we do not use form submissions for advertising.

2. Children

Appointment requests for a child (anyone under 18) should be made by a parent or lawful guardian, who consents on the child’s behalf. We do not knowingly carry out tracking, behavioural monitoring or targeted advertising directed at children.

3. Who we share personal data with

We share personal data only with service providers (“data processors”) who process it on our instructions, and with authorities where the law requires. Our current website service providers are:

Some of these providers may store or process data outside India. Such transfers are made only as permitted under Section 16 of the DPDP Act.

4. How long we keep it

• Appointment and contact enquiries: [TO BE CONFIRMED: 12 months from the last communication, unless the enquiry becomes part of your medical record]. After that they are deleted from the form service and our inboxes.
• If you become our patient: information that becomes part of your medical record is kept for [TO BE CONFIRMED: the period required by law and medical-record regulations (at least 3 years for in-patient records under the IMC Regulations 2002, longer where other laws or pending proceedings require)].
• Analytics and advertising data: according to the retention settings of the tool (we set Google Analytics to the shortest practical period), and in any case only while your consent is in force.
• Security logs: as long as needed for security, and for at least the minimum period required by law.

We also erase personal data when you withdraw consent, unless the law requires us to keep it.

5. How we protect it

We use reasonable security safeguards, including encrypted (HTTPS) transmission, access restricted to staff who need it, and agreements with our service providers. No online system is completely secure. If a personal data breach occurs, we will inform affected persons and the Data Protection Board of India as required by law.

6. Your rights

Under the DPDP Act you have the right to:

• Access: get a summary of the personal data we hold about you and how we use it, and the identities of those we have shared it with;
• Correction and erasure: have inaccurate or incomplete data corrected or updated, and have data erased when it is no longer needed for the purpose you gave it for (unless the law requires us to keep it);
• Withdraw consent at any time, as easily as you gave it — for cookies, use the “Cookie Preferences” link at the bottom of any page; for form data, write to us. Withdrawal does not affect processing already carried out;
• Grievance redressal: have your complaint handled by our Grievance Officer;
• Nominate another person to exercise your rights if you die or become incapable.

How to make a request: email the Grievance Officer (below) with the subject “Data request”, say what you want us to do, and include the mobile number or email you used on the website so we can find your data. We may ask you to verify your identity before acting. We aim to respond within 30 days.

Please give us accurate information and do not file false or frivolous complaints. These are your duties under Section 15 of the DPDP Act.

7. Grievance Officer

Name: [TO BE CONFIRMED: Name of the designated Grievance Officer]
Designation: [TO BE CONFIRMED: Designation]
Email: [TO BE CONFIRMED: A dedicated mailbox, e.g. privacy@sankalphospital.com]
Phone: [TO BE CONFIRMED: Phone number]
Address: Sankalp Hospital, Near District Hospital, Manipur, Ambikapur, Chhattisgarh - 497001

If you are not satisfied with our response, you may complain to the Data Protection Board of India once the relevant provisions are in force, after first using our grievance process.

8. Cookies

Optional analytics and advertising tools run only after you agree through the cookie banner. See our Cookie Policy for the full list.

9. Changes to this notice

We will update this notice when our practices or the law change, and show the date at the top. If we change the purposes for which optional cookies are used, we will ask for your consent again.

Related: Medical Disclaimer · Privacy Policy · Cookie Policy · Terms of Use · Editorial & AI Content Policy