Privacy Policy

1. Who we are and how to reach us

Shiva Hospitals is a multispecialty hospital located at Opp. RTC Bus Stand, Old Club Road Entrance, Kothapet, Guntur, Andhra Pradesh 522001, India. For the purposes of the DPDP Act, we act as the “Data Fiduciary” in respect of the personal data you provide through the Website.

If you have any questions about this Policy or your personal data, you can contact us by phone at +91 7382191999 or by email at shivahospitals123@gmail.com.

2. Information we collect

We collect only the information necessary to respond to you and provide our services. This includes:

• Information you provide directly — such as your name, phone number, email address, preferred department or doctor, appointment date/time preference, and any symptoms, health concerns, or messages you choose to include when you fill in our appointment or contact forms or message us on WhatsApp.
• Information collected automatically — such as your device type, browser, approximate location, IP address, referring pages, and how you navigate the Website. This is collected through cookies and analytics tools (see “Cookies and analytics” below).

Please share only the health information that is necessary to route your enquiry. Detailed clinical information is best discussed directly with our doctors during your consultation.

3. How we use your information

We use the personal data you provide for the following purposes:

• To respond to your enquiries and communicate with you;
• To schedule, confirm, reschedule, or follow up on appointment requests;
• To coordinate your care with the relevant department or doctor;
• To improve the content, performance, and usability of our Website;
• To comply with applicable laws, regulations, and lawful requests from authorities.

We do not use your information for automated decision-making that produces legal or similarly significant effects on you.

4. Consent and legal basis

We process your personal data on the basis of your consent, which you provide when you voluntarily submit your details through our forms or messaging channels, and for the legitimate purposes permitted under the DPDP Act. You may withdraw your consent at any time by contacting us; withdrawal will not affect the lawfulness of processing carried out before withdrawal, and may limit our ability to respond to your request.

5. Cookies and analytics

Our Website uses cookies and similar technologies, including Google Analytics, to understand how visitors use the site so that we can improve it. These tools may collect information such as pages visited, time spent, device and browser type, and general location. This information is used in aggregate and is not used to personally identify you.

You can control or delete cookies through your browser settings, and you can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. Disabling cookies may affect how some parts of the Website function.

6. How we share your information

We do not sell or rent your personal data. We may share it only in the following limited circumstances:

• With our doctors, clinical, and administrative staff, to the extent needed to respond to your enquiry or provide care;
• With trusted service providers who help us operate the Website and communicate with you — such as our website hosting, form-processing, and analytics providers — who are permitted to use the data only for that purpose;
• With courts, regulators, law-enforcement, or other authorities where required by law or to protect our rights, safety, or the safety of others.

7. Medical records

This Policy governs personal data collected through the Website. Your clinical and medical records — created in the course of consultation, diagnosis, or treatment at the hospital — are maintained separately and handled in accordance with applicable medical record-keeping regulations and confidentiality obligations that govern the practice of medicine in India.

8. Data security

We implement reasonable technical and organisational security practices designed to protect your personal data against unauthorised access, disclosure, alteration, or loss. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security. You share information with us at your own discretion.

9. Data retention

We retain personal data collected through the Website only for as long as necessary to fulfil the purpose for which it was collected, to respond to and follow up on your enquiry, and to comply with our legal obligations. When it is no longer required, we take reasonable steps to delete or anonymise it.

10. Your rights

Subject to applicable law, and in particular the DPDP Act, you have the right to:

• Access the personal data we hold about you and a summary of how it is processed;
• Request correction, completion, or updating of inaccurate or incomplete data;
• Request erasure of your personal data where it is no longer required;
• Withdraw your consent to processing;
• Nominate another individual to exercise your rights in the event of your death or incapacity;
• Raise a grievance regarding our handling of your personal data.

To exercise any of these rights, please contact us using the details in this Policy. We may need to verify your identity before acting on your request.

11. Children and minors

We do not knowingly collect personal data of children (individuals below 18 years of age) through the Website without the consent of a parent or lawful guardian. Where information relating to a minor is submitted, it should be provided by the parent or guardian. If you believe a minor has provided us information without such consent, please contact us so we can take appropriate action.

12. Third-party links

The Website may contain links to third-party websites or services (for example, mapping, messaging, or social media platforms). We are not responsible for the privacy practices or content of those third parties, and we encourage you to review their privacy policies before providing them any information.

13. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or in the law. The revised version will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.

14. Grievance redressal

If you have any concern or complaint regarding the processing of your personal data, you may contact our grievance point of contact by email at shivahospitals123@gmail.com or by phone at +91 7382191999. We will acknowledge and address your grievance within the timelines prescribed under applicable law.

15. Governing law

This Policy is governed by and construed in accordance with the laws of India. Any disputes arising in relation to it shall be subject to the exclusive jurisdiction of the competent courts at Guntur, Andhra Pradesh.