Privacy Policy

1. Who we are (Data Fiduciary)

Gopal Ortho Care Hospital
195/3, Parakkai Road Junction, Kottar, Nagercoil – 629002, Tamil Nadu, India.
Phone: +91 95970 40918  |  Email: gopalorthocare@gmail.com

Under the DPDP Act 2023, Gopal Ortho Care Hospital is the Data Fiduciary responsible for your personal data collected through this website and our clinical operations.

2. What personal data we collect

We collect information you provide directly when you contact us.

Information you give us (via the contact form):

• Full name
• Phone number
• Email address (optional)
• Department of interest / reason for visit
• Any health information you choose to include in a message (optional, provided voluntarily)

Clinical data (in-person patients only): Medical history, treatment records, diagnostic reports, and billing information are collected during your visit and are governed by applicable healthcare regulations. These are stored separately from website data.

3. How and why we use your data

We process your data to respond to your direct enquiries, coordinate care during your hospital visits, and fulfill applicable medical regulation requirements.

4. How long we keep your data

We retain contact enquiries and clinical patient records in accordance with Indian Medical Council regulations and Tamil Nadu Clinical Establishments Act requirements.

5. Cookies and analytics

We use limited cookies to measure traffic and improve the website experience.

• Strictly necessary cookies: For navigation and basic site functionality. These cannot be disabled.
• Analytics cookies: To understand which pages are most useful. These are anonymised and do not identify you personally.
• You may disable cookies in your browser settings at any time, though some features may not work correctly.

We display a cookie notice on your first visit. Continuing to use the site after dismissing this notice constitutes consent to non-essential analytics cookies.

6. Who we share your data with

We share data only when necessary for care or compliance. We never sell data.

• Internal staff: Doctors, nurses, physiotherapists, and administrative staff on a need-to-know basis.
• Diagnostic partners: Labs or imaging centres when referred for tests.
• Insurance / TPA partners: For cashless claim processing, only information required by the insurer.
• Government authorities: If legally required (e.g., communicable disease reporting, court orders).

7. Data security

• Website data is transmitted over HTTPS (SSL/TLS encryption).
• Patient records are stored in access-controlled systems with restricted staff access.
• Physical records are kept in secured areas within the hospital.
• We conduct periodic reviews of our data handling practices.

8. Your rights under the DPDP Act 2023

As a Data Principal (the person whose data we process), you have the right to:

• Access: Request a summary of what personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete personal data.
• Erasure: Ask us to erase your data where there is no legal requirement to retain it.
• Grievance redressal: Lodge a complaint with our Grievance Officer (see below).
• Withdraw consent: Withdraw consent for marketing communications at any time.

To exercise these rights, contact our Grievance Officer. We will respond within 30 days.

9. Children's data

This website does not knowingly collect personal data from children under 18 without the consent of a parent or guardian. Paediatric patient data collected during clinical treatment is handled in accordance with applicable medical regulations and requires parental/guardian consent.