Legal
Privacy Policy
What personal and health information Sainath Institute of Medical Sciences collects, why we hold it, who we share it with, how long we keep it and what you can ask us to do with it.
The short version
When you are treated at Sainath Institute of Medical Sciences, we necessarily learn private things about you — your illness, your test results, your family history, sometimes your finances. We treat that information as belonging to you, held by us in trust so that we can care for you properly.
This policy explains, in plain language, what we collect through this website and through the hospital, what we do with it, and what you can ask us to do. It applies to information gathered on simsanantapur.in and to the personal and health records we maintain as a healthcare provider.
We handle personal data in line with India's Digital Personal Data Protection Act, 2023, the confidentiality obligations that bind registered medical practitioners, and the medical records requirements that apply to hospitals in India.
What we collect and why
Different forms on this site collect different things. We ask only for what the task actually requires.
Appointment and callback requests
Name, age, contact number, email, preferred department or doctor, preferred date and a short description of the problem — used to schedule the consultation and to call you back to confirm it.
OpenMedical records requests
Patient name, hospital registration number, admission dates, proof of identity and the relationship of the person requesting — used to verify that records go only to the patient or an authorised representative.
OpenFeedback and grievances
Your name and contact details (unless you choose to stay anonymous), the department concerned and what you told us. Used to investigate and respond.
OpenClinical records at the hospital
History, examination findings, diagnoses, prescriptions, investigation results, operation notes, nursing records, consent forms and billing entries — the record of your care.
Website analytics
Aggregate information about pages visited, device type, approximate location and referring source. This tells us which health information people are looking for; it is not linked to your medical record.
OpenThe basis on which we hold your information
We process your personal data because you have given consent — by submitting a form, by registering at the hospital, or by signing a consent document before treatment. Where you are unable to consent because of a medical emergency, we act to protect your life and health, and record what was done.
We also process data where the law requires it of a hospital: notifiable disease reporting, medico-legal case documentation, birth and death registration, records requested by a court or by a statutory authority, and reporting obligations under public health programmes.
We do not sell personal or health data. We do not share it with advertisers, and we do not use your clinical information to market services to you.
Who your information is shared with
Sharing is limited to what is needed to treat you, to get you paid for, or to meet a legal obligation.
- The clinicians, nurses, technicians and pharmacists directly involved in your care, and specialists asked for an opinion on your case
- Laboratories, imaging services and blood banks handling your samples or investigations
- Insurers and third-party administrators, where you have asked for cashless treatment or reimbursement and have signed the relevant authorisation
- Statutory and regulatory authorities where reporting is mandatory — police in medico-legal cases, public health authorities for notifiable diseases, courts responding to a lawful order
- Service providers who maintain our hospital information systems, under contracts that require them to protect the data and use it for no other purpose
How long we keep it, and how we protect it
Medical records are retained for the periods expected of hospitals in India, which differ by record type — inpatient case sheets, medico-legal records, and records relating to minors are each held for longer than routine outpatient notes. For the retention period applying to a specific record, ask the medical records desk. Website enquiry data is kept only as long as needed to deal with the enquiry and to maintain a service history.
Records are protected by access controls that limit staff to the information their role requires, physical security for paper case sheets, encrypted transmission of data submitted through this website, backup and recovery arrangements, and confidentiality undertakings signed by every employee. Staff who access records without a clinical reason face disciplinary action.
No system is perfect. If a data breach occurs that is likely to affect you, we will inform you and the relevant authority as required by law.
Your rights over your information
- Ask for a copy of your medical records, in writing, through the patient requests process
- Ask us to correct information that is factually wrong — a misspelt name, a wrong date of birth, an incorrect contact number
- Withdraw consent you previously gave for a non-clinical use, such as receiving health updates, without affecting your treatment
- Ask who your records have been shared with and on what basis
- Nominate a family member to exercise these rights on your behalf if you are unable to
- Complain to us, and thereafter to the Data Protection Board of India, if you believe your data has been mishandled
Write to info@simsanantapur.in with 'Privacy' in the subject line, or speak to the medical records desk at the hospital. Please include the patient name and registration number so the request can be traced. Requests are answered in writing.
Not sure which department you need?
Share your symptoms and the appointment desk will route you to the right consultant. For anything sudden or severe, do not wait for a callback — come to the emergency department.