SSO Hospitals – Privacy Policy for Data Collection and Protection

1. INTRODUCTION

This Privacy Policy (“Policy”) explains how SSO Hospitals (“SSO”, “we”, “us”, “our”) collects, uses, stores, shares, and protects personal information when you use https://ssohospitals.com (“Website”) and related services/channels including forms, webinar registrations, call-backs, and WhatsApp communication (collectively, “Services”).

We are committed to protecting personal data—especially health-related data—in compliance with applicable Indian laws, including:

Information Technology Act, 2000
Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”)
Digital Personal Data Protection Act, 2023 (where applicable)

By using the Website or Services, you consent to the practices described in this Policy.

2. CONSENT AND WITHDRAWAL

By submitting your information on the Website or through our Services, you consent to collection and processing of your personal data in accordance with this Policy. You may withdraw consent by writing to appointments@ssohospitals.com. If you withdraw consent, we may not be able to provide certain services or respond to your requests.

3. INFORMATION WE COLLECT

We may collect the following categories of information:

a) Identity and Contact Information

Name (patient/caregiver)
Mobile number / WhatsApp number
Email address
City, address, country, postal code (if provided)

b) Demographic Information

Age / date of birth (if provided)
Gender (if provided)

c) Health and Medical Information (Sensitive Personal Data)

Symptoms, diagnosis, treatment history
Medical reports and records shared by you or an authorized caregiver
Consultation-related details provided voluntarily

d) Technical and Usage Information

IP address, device type, browser type
Pages visited, time spent, referring URLs
Cookies and analytics identifiers (as applicable)

e) Communication Information

Records of your communications with us (including WhatsApp messages, emails, and call logs) for service, support, and compliance purposes

4. HOW WE COLLECT INFORMATION

We collect information through:

Website forms, landing pages, and registrations
Webinar registrations and attendee interactions
WhatsApp opt-ins and conversations
Phone calls and emails with your consent
Cookies and analytics tools
Offline registration at centres/hospitals (where applicable)

5. HOW WE USE INFORMATION

We use personal information to:

Respond to your queries and requests
Schedule appointments and share confirmations/reminders
Provide healthcare services and care coordination
Share webinar links, updates, and educational content
Improve our website, outreach programs, and patient experience
Comply with legal and regulatory obligations
Send informational/promotional communication were permitted by law and based on consent

We do not sell your personal information.

6. WHATSAPP AND ELECTRONIC COMMUNICATION (META COMPLIANCE)

If you provide a WhatsApp-enabled number and consent through our forms/opt-in, you authorize SSO Hospitals to contact you via WhatsApp Business API for:

Appointment confirmations and reminders
Follow-ups and care coordination
Sharing webinar links and event updates
Service-related communications and support
Informational/promotional messages were permitted and consented

Opt-out: You may opt out anytime by replying “STOP” on WhatsApp or emailing appointments@ssohospitals.com. We will process opt-out requests within a reasonable timeframe.

7. SHARING AND DISCLOSURE

We may share your information with:

Doctors, consultants, and care teams involved in your care
Diagnostic labs, hospitals, and service partners involved in service delivery
Technology vendors (hosting providers, CRM systems, WhatsApp API/communication providers, analytics tools) strictly for operating services
Government, regulators, or law enforcement authorities where required by law or legal process

All such sharing is on a need-to-know basis and subject to reasonable confidentiality and security obligations.

8. DATA SECURITY

We implement reasonable security practices to protect personal data, including access controls and secure systems. However, no internet-based system is completely secure, and we cannot guarantee absolute security.

9. DATA RETENTION

We retain personal data only as long as necessary to:

Provide services and respond to requests
Maintain records as required by applicable medical, legal, or regulatory obligations
Resolve disputes and enforce agreements

10. YOUR RIGHTS

Subject to applicable law, you may request:

Access to your personal data
Correction/updates
Deletion (subject to medical/legal retention requirements)
Withdrawal of consent
Opt-out from marketing communication

To exercise these rights, email care@ssohospitals.com.

11. COOKIES

We may use cookies to improve functionality, understand usage, and enhance experience. You can manage cookie settings in your browser. Disabling cookies may impact certain Website features.

12. CHILDREN’S PRIVACY

We do not knowingly collect personal data from children under 18 without parental/guardian consent. If you believe a child has provided data without consent, contact us and we will take appropriate steps.

13. GOVERNING LAW AND JURISDICTION

This Policy is governed by the laws of India. Courts in Mumbai, Maharashtra shall have jurisdiction.

14. GRIEVANCE / CONTACT

For privacy-related complaints, questions, or requests:
Email: care@ssohospitals.com
Subject: “Privacy – Grievance/Request”
We will acknowledge within 48 hours and aim to resolve within 30 days.