DPDP Act 2023 Compliance
India's latest Digital Personal Data Protection standards applied.
Data Processor & Fiduciary Roles
HelloHospital operates as a Data Processor for the clinical workflows a doctor configures on our platform - the doctor remains the Data Fiduciary for their patients' data, and we process it solely under their instructions. For the practice information doctors share with us directly (name, specialty, hospital details, contact number), HelloHospital is the Data Fiduciary and determines how that data is used, in line with the DPDP Act, 2023.
Rights of the Data Principal (Patient)
Right to Access & Consent: Patients can view processing notices and manage consent triggers.
Right to Correction: Facilitating updates to clinical contact points.
Right to Erasure: Implementation of secure data purging protocols as directed by the Fiduciary.
Data Localization & Sovereignty
HelloHospital voluntarily hosts all clinical data on MeitY-empaneled servers within India. We comply with all applicable data transfer provisions under the DPDP Act, 2023.
Children's Data (Section 9)
For specialties that treat minors (pediatrics, child psychology), the treating doctor is responsible for obtaining verifiable parental or guardian consent before entering a minor's data into the platform, per Section 9 of the DPDP Act, 2023. See our Privacy Policy for full details.
Grievance Redressal
Grievance Officer: Swati Mittal, ScaleUpWiz Private Limited. Email: privacy@hellohospital.in. We acknowledge all privacy grievances within 48 hours and aim to resolve them within 30 days.
Clinical Trust Protocol
HelloHospital is designed to act as a silent support layer. We never engage in patient contact without a direct clinical event trigger from your hospital.
Effective Date
March 25, 2026