Privacy Policy

Effective date: [27/10/2027] · Last updated: [27/10/2027]

1. About This Policy

Eva Hospital, 40, Pakhowal Road, New Lajpat Nagar, Model Gram, Ludhiana, Punjab 141001 (“Eva Hospital”, “we”, “us”, “our”) operates the website www.evahospital.in (the “Website”). This Privacy Policy explains how we collect, use, store, share and protect personal data of visitors to the Website and of our patients, and what rights you have.

It is prepared in line with the Digital Personal Data Protection Act, 2023 and the Rules made under it, the Information Technology Act, 2000 and the rules made under it, and the duties of confidentiality that apply to medical practitioners and hospitals. For the purposes of the Digital Personal Data Protection Act, 2023, Eva Hospital is the “Data Fiduciary”.

By using the Website or giving us your information, you acknowledge this Policy. This notice is available in English. You may request it in any language listed in the Eighth Schedule to the Constitution of India by contacting us

2. Personal Data We Collect

Through the Website:

• Name, phone number, email address, city
• The health concern you select and any message you write
• Appointment or callback requests
• Technical data: IP address, browser and device type, pages visited, date and time of visit, and the website you came from
• Cookie data 

At the hospital (for patients): When you register as a patient, we collect the details needed to provide care, such as identity and contact details, age, gender, medical history, test results, prescriptions, treatment records, billing and insurance details. This is collected with your consent or as otherwise permitted by law, and it is protected by this Policy and by the duty of medical confidentiality.

Please share only the information needed for your enquiry. Do not send detailed medical reports through website forms.

3. Why We Use Personal Data

We use personal data to:

• Respond to enquiries and book or confirm appointments
• Provide healthcare services, including consultation, diagnosis, treatment and follow-up
• Maintain medical and billing records
• Send appointment reminders, report updates and service-related messages
• Process insurance, TPA, ECHS or government-scheme claims, where applicable
• Keep the Website secure, working properly and improving
• Meet legal and regulatory requirements, including record-keeping and accreditation reviews
• Carry out internal audits and quality reviews

We use your data only for the purposes for which you gave consent, or for other purposes permitted by law.

4. Consent

We process personal data with your consent, or on other grounds permitted by law (for example, a medical emergency or a legal obligation). When we ask for consent, we explain what data is collected and why, for example through the consent line under our forms.

Your consent is voluntary. You may withdraw it at any time. Withdrawing consent does not affect processing that was lawful before you withdrew, and it may limit our ability to provide some services.

5. Children and Persons Who Need a Guardian

If the patient is under 18 years of age, or is a person who has a lawful guardian, we process their personal data only with the verifiable consent of the parent or lawful guardian, as required by law. We do not track or monitor the behaviour of children, and we do not direct advertising at children.

6. Who We Share Personal Data With

We do not sell personal data. We share it only as needed:

• With the doctors and clinical staff of Eva Hospital who are involved in your care
• With service providers who process data on our behalf, such as website hosting, communication tools (for example WhatsApp, email and SMS), analytics, payment processing, and laboratory or diagnostic partners. They must protect the data and use it only on our instructions.
• With insurers, TPAs, ECHS and government schemes, where you ask for or are eligible for cashless or claim services
• With another doctor or hospital, with your consent or in an emergency
• With courts, regulators or authorities, where the law requires it
• In anonymised form for research or quality improvement, where this cannot identify you and the law permits it

7. Patient Information in Advertising and AI

We do not use identifiable patient information (names, photographs, videos, medical records, clinical images, testimonials or similar details) in advertisements, website content or social media posts, unless the law permits it, the patient has given specific, informed and documented consent, and safeguards are in place to prevent identification.

We do not use artificial intelligence to create or alter a patient’s image, voice, testimonial or clinical outcome. Where patient information is used with any AI system, it is used only as permitted by applicable privacy, confidentiality, data-protection and professional-ethics requirements.

8. Cookies and Analytics

The Website may use cookies and similar technologies to make the site work, remember your preferences and understand how the site is used. Cookies do not collect your medical information. You can block or delete cookies in your browser settings, but some parts of the Website may not work properly.

9. Data Security

We use reasonable security safeguards to protect personal data from unauthorised access, loss, misuse or disclosure. These may include access controls for staff, encryption of data in transit and secure storage. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

10. Personal Data Breach

If a personal data breach occurs, we will inform the affected individuals and the Data Protection Board of India in the manner and within the time required by law.

11. Data Retention

We keep personal data only as long as it is needed for the purposes in Section 3, or as the law requires. Website enquiry data is kept for Medical records are kept for the period required by applicable law and medical regulations. Billing records are kept as required by tax and accounting law. After that, the data is deleted or anonymised.

12. Your Rights

You have the right to:

• Ask for a summary of the personal data we hold about you and how we process it
• Ask us to correct, complete or update your personal data
• Ask us to erase your personal data, subject to records we must keep by law (for example, medical records)
• Withdraw your consent
• Have your grievance addressed
• Nominate another person to exercise your rights if you die or become unable to do so

To use these rights, contact our Grievance Officer . We will respond within the period required by law. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

You are expected to give accurate information, not to impersonate another person, and not to make false or frivolous complaints.

13. Links, Third-Party Sites and Transfers

The Website links to third-party sites and platforms (for example Google Maps, WhatsApp, Facebook, Instagram and YouTube). We are not responsible for their content or privacy practices, and we encourage you to read their policies. Where a service provider processes data outside India, this is done only as permitted by law.

14. Contact and Grievance Officer

For questions, requests or complaints about your personal data:

Eva Hospital, 40, Pakhowal Road, New Lajpat Nagar, Model Gram, Ludhiana, Punjab 141001
Phone: +91 92449 00001
Email: hello@evahospital.in

15. Changes to This Policy

We may update this Policy from time to time. The updated version will be posted on this page with a new “Last updated” date. If a change is significant, we will notify you as the law requires.