Privacy Policy

Nestiva Hospital ("we", "our", "us") is committed to protecting your privacy and the confidentiality of your personal and medical information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our healthcare services.

By accessing our services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

Personal Information

• Full name, date of birth, gender, and contact details
• Aadhaar number or government-issued ID (for patient registration)
• Insurance policy numbers and billing information
• Emergency contact details

Medical Information

• Medical history, diagnoses, medications, and treatment plans
• Lab results, imaging reports, and clinical notes
• Appointment records and visit summaries
• Vaccination and immunisation records

Technical Information

• IP address, browser type, and device identifiers
• Pages visited, time spent, and clickstream data
• Cookies and similar tracking technologies

We use the information collected for the following purposes:

• Providing Healthcare Services — to schedule appointments, deliver treatment, and manage your care
• Patient Communication — appointment reminders, test results, and health advisories
• Billing & Insurance — to process payments and liaise with your insurer
• Legal Compliance — to fulfil obligations under Indian medical laws and regulations
• Quality Improvement — to improve our clinical standards, services, and website
• Research — anonymised data may be used for medical research with your consent

Your medical records are maintained with the highest level of confidentiality. Access is strictly limited to your treating physicians, nursing staff, and authorised administrative personnel.

We will never share your identifiable medical information with third parties without your explicit written consent, except as required by law — for example, for public health reporting, court orders, or emergency situations where disclosure is necessary to prevent harm.

Medical records are retained for a minimum of 7 years in accordance with the Indian Medical Council guidelines, or longer if clinically warranted.

We may share your information with:

• Referral Specialists — doctors and hospitals to whom we refer you for treatment
• Diagnostic Labs — for processing test orders and returning results
• Insurance Providers — for cashless treatment and reimbursement
• IT & Software Vendors — operating our HMS, EHR, and website under data processing agreements
• Regulatory Authorities — as required by law

All third-party vendors are contractually obligated to maintain data confidentiality and security standards equivalent to our own.

Our website uses cookies to enhance your browsing experience, analyse site traffic, and personalise content. You can control cookie preferences through your browser settings or our Cookie Policy page.

• Essential cookies — required for site functionality
• Analytics cookies — help us understand how visitors use our site
• Marketing cookies — used to serve relevant advertisements

We implement robust technical and organisational security measures to protect your data against unauthorised access, alteration, disclosure, or destruction:

• SSL/TLS encryption for all data in transit
• AES-256 encryption for medical data at rest
• Role-based access controls and multi-factor authentication
• Regular security audits and penetration testing
• 24/7 network monitoring and intrusion detection
• Staff training on data privacy and security protocols

As a patient, you have the following rights regarding your personal information:

• Right of Access — request a copy of your personal and medical records
• Right to Rectification — correct inaccurate or incomplete information
• Right to Erasure — request deletion where legally permissible
• Right to Portability — receive your data in a portable format
• Right to Object — object to processing for marketing or research
• Right to Withdraw Consent — at any time, without affecting prior lawful processing

To exercise these rights, contact our Data Protection Officer at nestivahospital@gmail.com.

We provide healthcare services to patients of all ages, including minors. Personal information about patients under 18 years of age is processed only with the explicit consent of a parent or legal guardian. Parental consent is obtained and documented during the registration process.

For privacy-related enquiries, data requests, or complaints:

• Email: nestivahospital@gmail.com
• Phone: 011-42422000
• Address: 384, JS Complex, near Indane Gas godown, Munirka, New Delhi-110068

We aim to respond to all privacy requests within 30 days. If you are dissatisfied with our response, you may lodge a complaint with the relevant data protection authority.