Privacy Policy

1. Information we collect

Medical information

• Patient demographics, address, emergency contacts, and contact details
• Medical history, allergies, surgeries, and family history
• Clinical records, diagnoses, treatment plans, medication records, lab results, and imaging reports
• Vital signs, bedside monitoring, and ICU data where applicable
• Billing and insurance-related information

Website information

• Contact form data such as name, phone, email, program interest, and message content
• Technical data such as IP address, browser type, and pages visited
• Essential cookies and analytics tools if enabled

Sensitive categories

• Mental health records and psychiatric evaluations
• HIV, STI, genetic screening, and reproductive health data
• Substance-use or self-harm related treatment records

2. How we use information

• Providing treatment, diagnosis, medication management, and care coordination
• Managing healthcare operations, safety standards, infection control, and quality review
• Processing billing and insurance requirements
• Communicating about appointments, reports, follow-up care, and emergencies
• Complying with legal and regulatory obligations

3. How we protect information

• Restricted physical access to records and locked storage for paper files
• Password-protected electronic systems, access logs, backups, and network safeguards
• Confidentiality agreements and staff training on privacy responsibilities

4. When information may be disclosed

• With patient consent for treatment coordination or requested sharing
• When required by law, court order, reportable disease rules, or safety obligations
• To insurers, laboratories, referral physicians, or healthcare partners where necessary for care delivery

5. Patient rights

• Right to request copies of medical records
• Right to ask for correction of inaccurate information
• Right to request restrictions on certain disclosures where feasible
• Right to request confidential communication channels

6. Website privacy and cookies

• Contact form data is used only to respond to your enquiry or plan care follow-up
• Google Forms, Google Maps, and WhatsApp may be used as third-party services subject to their own policies
• Cookies may support essential functionality and optional analytics

7. Minor patients

Parents or legal guardians generally have access to records for patients under 18. Older adolescents may receive confidential support in limited reproductive and mental health contexts as allowed by law and clinical ethics.

8. Data retention

• Medical records are retained for at least 5 years or longer if required by regulation
• Pediatric records may be retained until age 25
• Website enquiries may be stored for approximately 1 year before deletion

9. Consent and revocation

By receiving treatment at MPMC, patients consent to the use of information for treatment, operations, and necessary compliance activities. Requests to limit non-essential uses may be submitted in writing.

10. Breach notification

If a data breach affecting patient information occurs, affected individuals will be informed as required, and immediate security remediation steps will be taken.

11. Changes to this policy

This page may be updated to reflect changes in law, technology, or hospital practice. The latest revision date appears at the top of the page.

12. Contact us about privacy

13. Compliance frameworks

• Medical Council of India Code of Ethics and related professional obligations
• Indian Medical Association guidance
• Information Technology Act, 2000 and later amendments
• Tamil Nadu private clinical establishment obligations