Privacy Policy

Data Processor Role

HelloHospital acts as a Data Processor under the exclusive direction of the Medical Practitioner (Data Fiduciary). We process patient data solely for the purpose of facilitating clinical continuity and administrative efficiency as instructed by your healthcare provider.

WhatsApp & Meta Business API Disclosure

To enhance your care experience, HelloHospital utilizes the Meta Business API (WhatsApp) to deliver critical healthcare communications. By opting into our services, you acknowledge that automated messages will be sent to your registered mobile number.

Authorized Communication Types

Opt-In & Opt-Out (STOP / Unsubscribe)

Communication is initiated only after a clinical event trigger. You may opt-out at any time by replying 'STOP' or 'UNSUBSCRIBE' to any message. We will immediately cease all automated messaging to your number upon receipt.

Data Sovereignty

All processing occurs on secure servers located within the sovereign territory of India, in line with the DPDP Act, 2023.

Analytics & Third-Party Tools

We use a limited set of analytics tools (Google Analytics, Google Tag Manager) to understand how doctors find and use our platform. We do not sell personal data or use it for advertising. See our Cookie Policy for the full list of tools and how to opt out.

Lead & Onboarding Form Data

When you submit the audit request form or any other enquiry form on this site, your name, WhatsApp number, hospital name and any details you provide are sent to a Google Sheets-backed intake system (Google Apps Script) so our team can follow up with you. Google processes this data as our processor. We use it only to contact you about onboarding, never for advertising or resale.

Data Retention

We retain data only as long as necessary for the purpose it was collected. Lead and onboarding form submissions are retained for up to 24 months from your last interaction with our team, or until you request deletion, whichever is earlier. Analytics data is retained per the period configured in our Google Analytics account, and is only collected after you accept our cookie banner. Patient and clinical data processed through a doctor's HelloHospital account is retained per the period that doctor, as Data Fiduciary, configures for their practice, and is deleted according to their instructions on account closure. You may request earlier deletion of any data we hold by writing to privacy@hellohospital.in.

Children's Data & Minors

This website and its lead-intake form are intended for use by medical practitioners and hospital staff, not by patients directly, and we do not knowingly collect children's personal data through this site. For specialties that treat minors (e.g., pediatrics, child psychology), any patient data processed through a doctor's HelloHospital account is collected under that doctor's clinical relationship with the child's parent or legal guardian. The treating doctor, as Data Fiduciary for their patients, is responsible for obtaining verifiable parental or guardian consent before entering a minor's data into the platform, in line with Section 9 of the DPDP Act, 2023.

Your Rights & How to Exercise Them

Grievance Officer

To exercise any of the rights above, or to raise a grievance, email privacy@hellohospital.in with your name and the request type. Grievance Officer: Swati Mittal, ScaleUpWiz Private Limited. We acknowledge all requests within 48 hours and aim to resolve them within 30 days.