Your Health,
Our Sacred
Commitment

Last updated: April 2026 · Effective across all Spring Field Hospital services.

1. Introduction

Spring Field Hospital ("we", "our", "us", or "the Hospital"), located at Below Union Bank, Narsingi Main Road, Hyderabad – 500075, is committed to protecting the privacy and confidentiality of all personal and medical information provided by our patients, their family members, visitors, and users of this website and our WhatsApp channel. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices and rights you have over your information. It applies to information collected in person at our hospital, through our website, by phone, through WhatsApp chats on +91 9866724729, and via any forms you submit to us.

2. Information We Collect

We collect only the information necessary to provide safe, effective healthcare and to run our hospital lawfully. Depending on your interaction with us, this may include:

• Identity & contact data: full name, phone number, WhatsApp number, email address, date of birth, gender, address, and emergency contact details.
• Health data: symptoms, medical history, allergies, medications, diagnoses, test results, prescriptions, imaging, and clinical notes made by our doctors and nurses.
• Appointment & visit data: booking history, department, attending doctor, admissions, discharge summaries, and follow-up schedules.
• Billing data: payment method, transaction references, insurance provider and policy numbers (where applicable), and GST details for corporate bills.
• Identity documents: government-issued ID (Aadhaar, voter ID, driving licence, passport) when required for admission, insurance, or legal compliance. We collect the minimum verification detail and do not store full ID images unless legally required.
• Website & device data: IP address, browser type, pages viewed, referring page, and approximate location — collected through cookies and standard analytics.

3. How We Use Your Information

We use the information above strictly for the following purposes:

• To diagnose, treat, and care for you, including emergency treatment.
• To confirm, reschedule, or remind you about appointments (by call, SMS, or WhatsApp).
• To send lab reports, discharge summaries, prescriptions, and follow-up advice.
• To process payments, issue receipts, and handle insurance or TPA claims.
• To comply with notifiable-disease reporting, drug-control rules, and other legal obligations.
• To improve our services, train our clinical teams, and make the hospital safer — always using de-identified data wherever possible.

We will never use your health information for advertising, and we do not sell or rent personal data to any third party.

4. Confidentiality of Medical Records

All medical records are treated with the highest level of confidentiality, in line with the Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, the Clinical Establishments (Registration and Regulation) Act, 2010, and the Digital Personal Data Protection Act, 2023 (DPDP Act). Access to your records is restricted to the treating doctor, assigned nursing staff, authorised administrative personnel, and you (or a legal guardian/representative). We share your information with third parties only when:

• You have given explicit written consent (for example, sharing reports with an external specialist).
• It is required by law (for example, court orders, subpoenas, or mandatory disease notifications).
• It is necessary to prevent an immediate threat to your life or the life of another person.

5. Data Security

We apply reasonable administrative, technical, and physical safeguards to protect your information. Physical files are stored in locked, access-controlled rooms. Digital records are held on secured systems with role-based access, strong passwords, automatic session time-outs, and encrypted backups. Our staff are trained on confidentiality and sign binding non-disclosure undertakings as part of their employment. If a data breach ever occurs that may materially affect you, we will notify you and the appropriate authorities as required by law.

6. WhatsApp & Digital Communication

When you contact us on WhatsApp (+91 9866724729), messages are delivered through Meta's end-to-end encrypted infrastructure. Our hospital team, however, must retain a copy of relevant clinical messages in your patient file. Please do not share sensitive payment details (card numbers, CVV, OTPs) on WhatsApp — our staff will never ask for these.

7. Cookies & Website Analytics

Our website uses a small number of cookies to remember your preferences and to understand how visitors use the site. These are either strictly necessary (for the site to function) or analytics cookies (to measure traffic). You can disable cookies through your browser settings; disabling strictly necessary cookies may prevent certain features from working correctly.

8. Retention of Records

We retain patient medical records for the minimum period required by law — generally three years from the last visit for adult out-patient records, and longer for in-patient, MLC, and paediatric records as required by regulation. After that, records are securely archived or destroyed in a manner that preserves confidentiality.

9. Your Rights

Subject to applicable law, you have the right to:

• Access a copy of your medical record and personal information.
• Request correction of information that is inaccurate or out of date.
• Withdraw consent for non-essential uses of your data (for example, appointment reminders by WhatsApp).
• Nominate another person to exercise these rights if you are unable to.
• Make a complaint to the Data Protection Board of India if you believe we have mishandled your data.

To exercise any of these rights, contact our Data Privacy Officer at springfield.hospitals@gmail.com or call +91 9866724729. We will respond within 30 days.

10. Children's Privacy

For patients under 18, we collect information through a parent or legal guardian and use it only for the child's treatment. We do not knowingly market to minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised "Last updated" date. Material changes will also be communicated through a notice on our homepage for 30 days.

12. Grievance & Contact

For any privacy-related questions or concerns, please write to our Data Privacy Officer:

Data Privacy Officer
Spring Field Hospital
Below Union Bank, Narsingi Main Road
Narsingi, Hyderabad – 500075, Telangana
Email: springfield.hospitals@gmail.com
Phone / WhatsApp: +91 9866724729