PATIENT APPLICATION PRIVACY NOTICE

Last Updated [4/11/2024]

This privacy notice ("Privacy Notice") outlines how Aster DM Healthcare (hereinafter referred to as "we," "us," or "our") collects, uses, discloses, transfers, and otherwise processes personal data collected from patients and other users of the Aster Health application/website ("Aster Health"), as well as such other persons whose personal data is shared with us on their behalf (hereinafter referred to as "you" and "your"). This Privacy Notice explains how we process personal data collected from you in accordance with applicable data protection law. 

The Nature and Purposes of Personal Data Collected 

1. We will require the following personal information (information about you or identifiable in relation to you) for the following specified purposes: 
    
2. Contact Information: We collect your name, email address, phone number, address, and other identifiable information provided during sign-up or added to your account profile, for the following purposes:
    
   1. To create and maintain your account.
   2. To communicate with you regarding services, updates, and notifications.
   3. To provide customer support and manage service requests.
   4. To improve and customize your user experience on the application.
       
3. Health and Demographic Information: We collect information related to age, gender, health conditions, medications, allergies, vaccinations, history of surgeries or procedures, health goals, health journal entries, medical reports, and health tracking data (entered manually, synced from a device, or authorized by third-party sources), for the following purposes:
    
   1. To provide and maintain the Personal Health Record functionality for patients.
   2. To facilitate the accurate management of your medical history and health monitoring.
   3. To enable healthcare services, such as health tracking, reporting, and the delivery of personalized health insights or recommendations.
   4. To support healthcare professionals in delivering care or advice.
       
4. Other Technical Information: We collect cookie related information, server logs, session settings, usage data including but not limited to location, device type, operating system, browser, date-time, and context usage and other technical data related to the usage of Aster Health for the following purposes:
    
   1. To enhance user experience and functionality.
   2. To save and apply user preferences (e.g., language, display settings).
   3. To facilitate seamless access to services via auto-authentication, where enabled.
   4. To monitor service usage and improve the application’s performance.

Device Permissions 

We ask for the following device permissions while onboarding:

1. SMS: We require access to your SMS messages to provide the following features: (a) Receive and Read SMS: To automatically detect and process OTPs for secure logins; and (b) Send SMS: To send appointment reminders and other important notifications to your contacts.
    
2. Microphone and Camera: We require access to your microphone and camera to provide the following features: (a) Voice Commands: To allow you to interact with the app using voice commands for a hands-free experience; (b) Audio/Video Calls: To facilitate audio and video consultations with healthcare professionals; and (c) Video Consultations: Enable video calls with healthcare professionals. 
    
3. Notification: We require permission to send notifications to provide the following features: (a) Appointment Reminders: To receive timely reminders; (b) Health Alerts: To get notifications about important health updates and medication reminders; and (c) App Updates and Promotions: To stay informed about new features, updates, and special offers.
    
4. Files and Images: We require access to files and images to facilitate upload of documents or images for sharing them on Aster Health.
    
5. SSID/BSSID: We require this access for checking the status and strength of Wi-Fi signals and to determine the best possible way to connect for your services.
    
6. GPS location: We require access to GPS location for fetching your address to identify nearby Aster healthcare facilities and personalize availability of services.

Sources of Collection of Personal Data

We collect personal data from the following sources:

1. From the records of Aster Hospitals who have been consulting till date or who had been admitted in Aster Hospital;
    
2. From patients who are admitted to our hospitals and healthcare facilities; and


3. From users who register on Aster Health.

Transactional Data 

Your payment details are processed via secure, encrypted transactions through authorized payment gateways to provide the highest standard of security. Please note, however, that while we implement advanced security measures, online transactions may still carry some inherent risks. Verification of credit information, however, is accomplished solely you through the authentication process.

Your Responsibilities

You represent that the personal data provided during the registration process is true, accurate, current, and complete. You are required to periodically review and update your registration data to ensure that it is always accurate and correct. We will rely on the last updated version of the personal data as updated by you. While providing your personal data, you agree to ensure not to impersonate another person, and to furnish only such information as is authentic.

The accuracy, integrity and completeness of the personal health information you enter or allow to enter on your behalf is your responsibility, and we do not assume any liability for it.

Sharing of Personal Data with Third Parties 

1. We may disclose any information to government or law enforcement officials if we believe doing so is required to comply with law enforcement and legal process; to prevent or stop any illegal, unethical, or legally prohibited activity; and to protect your, our or others’ rights and safety.
    
2. We may disclose your personal data on your own request.
    
3. We may disclose your personal information to any third-party contractors, who work on behalf of or with Aster, (a) to provide or improve our services; (b) to communicate with you; (c) or to maintain Aster Health.
    
4. We may share anonymised, aggregated data with advertisers, research firms, and other partners.

Minors and Persons under Guardianship

All users of Aster Health are expected to be above 18 years of age. Parents, caregivers/guardians, and healthcare providers are allowed to provide and store personal information about others, including minors and persons with disability. Any user providing, storing, or submitting information on behalf of a child/person under guardianship assumes full responsibility over the submission, use, and transmission of such information.

Security Practices and Procedures

We implement technical and organizational safeguards to protect your data, storing it on secure servers. Data collected under this Privacy Notice is stored only in the servers of our technology vendor. Please note that while we take steps to protect your personal data, no data transmission over the internet is entirely secure, and there is always possibility of risk. 

Your Rights 

1. Right to Withdraw Consent: You have the right to withdraw your consent at any time in the manner provided in the application. Please note that the withdrawal of consent may impact our ability to provide certain services, and we will inform you of any consequences upon withdrawal. 
    
2. Right to Access: Subject to certain conditions, and where we have relied on consent to process your personal data, or where you have voluntarily provided your personal data for a specified purpose, you have the right to obtain information from us as below, as well as such information as may be further prescribed under applicable law: 
    
   1. Summary of personal data and processing activities: You have the right to receive a summary of the personal data that is being processed by us, along with details regarding the processing activities undertaken by us with respect to such personal data. 
       
   2. Identities of other data fiduciaries and data processors: You have the right to know the identities of all other entities with whom your personal data has been shared by us. This includes a description of the personal data shared with these entities. 
       
3. Right to Correction, Completion and Updation: Subject to certain conditions, you have the right to correction, completion, and updating of your personal data for which you have previously given consent, or voluntarily provided your personal data for a specified purpose, in accordance with any requirement or procedure under any law for the time being in force. This includes the right to: 
    
   1. Correct any inaccurate or misleading personal data.
   2. Complete the incomplete personal data. 
   3. Update your personal data. 
       
4. Right to Erasure: Subject to certain conditions, you have the right to request the deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when you withdraw your consent. 
    
5. Right to nominate an individual for exercising rights: You have the right to nominate any other person to exercise the rights mentioned above in case of your death or incapacity.

We will respond to your request within the timeframes and manner specified by applicable law. 

Retention of Your Data

We will not retain your personal data for longer than is required for the purposes for which the information may lawfully be used or is otherwise required under any other law for the time being in force. We may process anonymized and aggregated data/ information collected through Aster Health, for purposes of evaluating healthcare outcomes, healthcare requirement patterns and to measure the effectiveness of services and content. 

Grievance Redressal / Contact Us 

Towards exercising your rights mentioned under the ‘Your Rights’ section and for grievance redressal/inquiries regarding this Privacy Notice, please reach out to our grievance officer as below: 

Name: Vineeth Sukumaran

Email Address: [email protected]

Changes/ Updates to the Privacy Notice

Please note that this Privacy Notice may change from time to time as we continue to offer evolve our services. In the event of any changes in our Privacy Notice, the updated version will be posted here and take effect from the moment of posting. 

If there are any changes to the purposes for which you have provided your consent under this Privacy Notice, we will seek your consent for such change in the purposes of processing personal data under this Privacy Notice.