1. Overview
Pristine Hospital (“we”, “us”, “our”) respects your privacy. This policy explains what personal data we collect through this website, why we collect it, how long we keep it, and the choices you have. This policy applies only to this website and the forms, appointment requests and contact channels available on it.
2. Data we collect
We follow the principles of data minimisation and purpose limitation. Through this website we collect only:
- Identity & contact details: your name, phone number and email address.
- Appointment intent: the department, doctor or consultation you are interested in, and your preferred date and time.
- Messages you send us: the contents of enquiries or messages you submit through our contact form or WhatsApp.
We do not collect medical, health or clinical data through this website. Clinical information is captured separately, in person, and is governed by the hospital’s clinical record-keeping practices.
3. How we use your data
We use the limited personal data above only to:
- Process and confirm appointment requests;
- Respond to your enquiries and messages;
- Send you service-related communications (for example, appointment reminders); and
- Improve the website and our patient experience.
We do not sell your personal data, and we do not use it for unrelated purposes.
4. Legal basis & DPDP Act 2023
We process the data above on the basis of the consent you provide when submitting a form, and as reasonably necessary to respond to your request. We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act), including the duties of a Data Fiduciary, the rights of Data Principals, and the principles of data minimisation, purpose limitation and storage limitation.
5. Third-party processors
To deliver appointment booking and communications we rely on the following categories of third-party processors, who process data on our behalf and under our instructions:
- Appointment booking: our website and hospital portal store the contact and visit details you submit so staff can confirm the appointment.
- Communications: phone, WhatsApp, and email providers may deliver confirmations and reminders.
- Online consultations: LiveKit Cloud carries the encrypted audio and video during a consultation. Pristine does not record consultations.
- Hosting & analytics: the hosting provider and any analytics tools operate under their own privacy controls.
We share only the minimum data required for each processor to perform its function.
6. Data retention
We retain personal data collected through this website only for as long as necessary to fulfil the purpose for which it was collected, typically until your appointment or enquiry is resolved, plus a short period for record-keeping. After that, it is deleted or anonymised, unless a longer retention period is required by law.
7. Your rights
As a Data Principal under the DPDP Act, you have the right to:
- Access the personal data we hold about you;
- Correct inaccurate or incomplete data;
- Erasure of your personal data, subject to legal exceptions;
- Nominate another individual to exercise your rights; and
- Grievance redressal: contact us using the channel below.
8. Contact & grievance officer
To access, correct or request erasure of your data, or to raise a privacy grievance, please contact us through our contact page or write to the hospital directly. We will respond to verified requests within a reasonable period and in accordance with the DPDP Act.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected on this page with an updated date. Continued use of the website after a change indicates acceptance of the revised policy.