Privacy Policy

This policy explains how Golden Park Hospital ("Hospital," "we," "us"), Vasai West, Palghar District, Maharashtra, India, handles personal information when you use our website and online patient portal. We act as the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

Account details — your name, email address and/or mobile number when you sign in with Google or with a WhatsApp one-time code.

Appointment details — the doctor, date, time, mode (in-person or video) and the reason for your visit that you choose to share.

Health information — messages, reports, prescriptions and notes shared between you and your care team through the portal or created by our clinicians.

Payment details — online payments are made by scanning a UPI QR code with your own banking or UPI app. We receive only the payment amount, status and transaction reference from our payment partner — your bank account details and UPI PIN are never entered on our site and never stored on our servers.

Technical data — basic device and browser information and cookies needed to keep you signed in and keep the site secure.

To create and secure your account, schedule and run your appointments (including video consultations), deliver care, send appointment confirmations and reminders, process payments and refunds, meet legal and medical record-keeping obligations, and improve the safety and reliability of the portal.

We do not sell your personal information and we do not use your health information for advertising.

Your care team at the Hospital — only the clinicians and staff who need it to look after you.

Service providers that operate parts of the platform on our behalf: Supabase (secure database and sign-in), Vercel (website hosting), Google (Google sign-in, Google Meet video calls and, if you switch it on, Google Calendar sync), Meta/WhatsApp (appointment messages) and Razorpay (payment processing). They may process data only to provide their service to us.

Authorities or courts, where the law requires it.

Nothing is shared with anyone else without your separate consent.

Online payments are processed by Razorpay Software Private Limited, a payment aggregator regulated by the Reserve Bank of India. Payment details you enter are handled by Razorpay under its own privacy policy and security standards (PCI DSS). We receive only confirmation that a payment succeeded or failed, the amount and a transaction reference.

Medical records are kept for the period required by Indian medical record-keeping rules. Other account and technical data is kept for as long as your account is active and then deleted or anonymised unless the law requires us to hold it longer. Payment records are retained as required for accounting and tax purposes.

Data is encrypted in transit, access to patient information is limited by role, and new staff accounts are approved by hospital administration before they can see anything. No system is perfectly secure; if a breach affecting your information occurs, we will notify you and the Data Protection Board of India as the law requires.

Under the DPDP Act you may ask us to show you the personal data we hold about you, correct or complete it, erase it (subject to medical-record retention rules), withdraw consent you previously gave, and nominate someone to exercise these rights if you are unable to. You may also switch off Google Calendar sync at any time from your portal settings.

To make a request, contact the Hospital using the details in Section 11. We aim to respond within 30 days.

Accounts for patients under 18 must be created and managed by a parent or legal guardian, who gives consent on the child's behalf.

We will update this page when our practices change and revise the date at the top. Continued use of the portal after an update means you accept the revised policy.

Grievance Officer, Golden Park Hospital, Golden Park Commercial Complex, Sai Nagar, Navghar-Manikpur, Near Parvati Cinema, Vasai West, Maharashtra 401202. Phone: +91 92267 37969. You can also raise a grievance in person at the hospital reception.