Privacy Policy

How Dr. Shamsher Singh Eye Hospital collects, uses and protects your personal data

Last updated: 2 September 2026

1. Who we are

Dr. Shamsher Singh Eye Hospital, Dr Shamsher Singh Rd, behind Surya Tower, GTB Market, Khanna, Punjab 141401 (“we”, “the Hospital”) is the Data Fiduciary responsible for the personal data described in this policy. This policy is provided in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

2. What data we collect

Identity & contact: name, age, gender, mobile number, address, email, government ID / UHID.
Health data: symptoms, diagnosis, examination findings, prescriptions, surgery and lab records. Health data is treated as sensitive and given the highest protection.
Insurance / panel data: scheme or policy details (e.g. ECHS or health insurance), policy/card numbers, TPA details, claim documents.
Website usage: appointment bookings, enquiry messages, and basic technical logs.

3. Why we use it (purpose)

To provide eye-care treatment; to schedule appointments and surgeries; to process insurance and government-panel claims; to send appointment and follow-up reminders; to maintain medical records as required by law; and to respond to enquiries. We do not use your data for any purpose you have not been told about.

4. Your consent

By providing your details on our forms or at the hospital, you consent to us processing that data for the purposes above. For medical treatment, processing is also necessary for the legitimate purpose of providing care. You may withdraw consent at any time (see “Your rights”), though this may affect our ability to treat you or process a claim.

5. Who we share it with

We share data only where necessary: with the treating doctors and hospital staff; with the TPA / insurance company / government scheme you are claiming under; and with authorities where required by law. We do not sell your data or share it for advertising. Our technology providers (e.g. our secure database host) process data on our behalf under confidentiality obligations, with data stored on servers located in India.

6. How we protect it

Access to records is restricted to authorised staff with individual logins. Data is protected by row-level security, encrypted connections, and private document storage accessible only through time-limited signed links. Patient portal access requires your UHID plus your registered mobile number.

7. How long we keep it

Medical records are retained for the period required by applicable medical-records regulations, after which they are securely deleted or anonymised. Enquiry and appointment data is kept only as long as needed for the purpose collected.

8. Your rights under the DPDP Act

To access a summary of the personal data we hold about you.
To request correction or updating of inaccurate data.
To request erasure of your data where it is no longer needed and retention is not legally required.
To withdraw consent.
To nominate another person to exercise your rights in case of death or incapacity.
To grievance redressal (see below).

To exercise any right, contact our Grievance Officer below with your name and UHID.

9. Children’s data

For patients under 18, we process data only with the consent of a parent or lawful guardian, and never use it for tracking or targeted advertising.

10. Grievance Officer

For any question, request, or complaint about your personal data:
Grievance Officer — Dr. Shamsher Singh Eye Hospital
📧 dsseh.punjab@gmail.com
📞 9803007079
📍 Dr Shamsher Singh Rd, behind Surya Tower, GTB Market, Khanna, Punjab 141401

11. Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the latest version.

Request Your Data Rights

Ask to access, correct, or erase your personal data, or withdraw consent. We verify your identity using your registered mobile number before acting on any request.

This policy is a good-faith summary for patients. It is not legal advice — please have it reviewed by a lawyer for your specific obligations.