Privacy Policy & Data Protection

This Privacy Policy governs the processing of personal and business information across all operations undertaken by I&D Hospital Solution Pvt. Ltd. The terms apply universally to domestic and international patients seeking healthcare assistance, patient attendants and traveling companions, client hospitals and clinical establishments, and visitors accessing our online portal. Our covered service verticals encompass Medical Tourism Facilitation along with our complete range of hospital liaisoning offerings, including CGHS, ECHS, and ESI empanelment, corporate empanelment, and NABH Accreditation consulting.

I&D Hospital Solution Pvt. Ltd. operates as the designated Data Fiduciary, assuming full accountability for determining the purposes and lawful means of processing personal data. The company is headquartered on Rajpur Road, Dehradun, Uttarakhand, India, with legal jurisdiction established in Dehradun. All communications regarding administrative accountability, regulatory notices, or fiduciary obligations should be directed to our registered headquarters or official communication channels.

To deliver healthcare consulting and facilitation, we collect specific categories of personal, clinical, and corporate documentation. For patients, this includes official identity proofs, comprehensive medical records, diagnostic histories, contact coordinates, and itinerary details. For companions and attendants, basic identity verification and contact records are collected. For institutional clients and healthcare providers, collection includes corporate incorporation filings, regulatory compliance certifications, statutory accreditations, and key administrative contact details.

Personal and medical data is gathered solely for legitimate operational purposes. These include coordinating medical consultations, securing clinical second opinions, assisting with medical visa documentation, and arranging patient logistics and accommodations. For corporate clients, information is used to execute empanelment and accreditation workflows. I&D Hospital Solution Pvt. Ltd. acts strictly as an administrative facilitator and consultancy. The company does not practice medicine, provide clinical diagnoses, or deliver medical treatments directly.

All data collection and subsequent processing rely strictly on informed user consent. Individuals retain the explicit right to withdraw their consent at any stage by providing written notice. International patients and foreign healthcare clients acknowledge that facilitating overseas treatments requires cross-border transfers of personal and medical records. By requesting international facilitation, users expressly consent to transferring their data across borders under established regulatory and security safeguards.

To fulfill service mandates, data may be shared with accredited partner hospitals, medical specialists, embassies, immigration authorities, regulatory agencies, and vetted logistics providers. We do not sell, rent, or disclose personal data to third parties for commercial marketing or promotional initiatives. In critical medical emergencies where obtaining immediate authorization is impracticable, relevant clinical data may be disclosed without prior consent to safeguard patient health and life.

I&D Hospital Solution Pvt. Ltd. maintains rigorous administrative, organizational, and technical safeguards to preserve the confidentiality, integrity, and availability of personal and healthcare records. Our security posture combines end-to-end data encryption, multi-layered role-based access controls, hardened infrastructure environments, and continuous vulnerability monitoring to prevent unauthorized access, data loss, alteration, or unlawful exposure.

Personal data is maintained only as long as necessary to fulfill the operational purpose for which it was collected or to satisfy statutory obligations. Patient medical records are archived in strict accordance with statutory Indian healthcare regulations. Logistics, travel, and hospitality information is systematically purged upon service completion unless ongoing legal mandates require its preservation. Cross-border case files are retained for designated post-care follow-up or compliance requirements.

Under applicable privacy frameworks, data principals maintain clear statutory rights regarding their personal information. Users may request access to their stored records, petition for the correction of incomplete or inaccurate information, and request the deletion of non-essential records. Users also retain the right to lodge formal grievances regarding data management and appoint legal representatives to manage their data rights in case of incapacity.

To ensure prompt accountability and transparent dispute resolution, I&D Hospital Solution Pvt. Ltd. has appointed a designated Grievance Officer. Users, patients, or corporate partners experiencing concerns regarding data privacy, security breaches, or compliance practices may lodge a formal complaint. All grievances are documented, investigated, and resolved within established procedural timelines.

I&D Hospital Solution Pvt. Ltd. acts solely as an independent consultancy and facilitation coordinator. The company is not liable for medical outcomes, diagnostic errors, hospital care standards, clinical provider decisions, third-party vendor performance, or visa rejections issued by governmental embassies. This Privacy Policy is governed entirely by the laws of India. Any legal disputes arising under this policy fall under the exclusive jurisdiction of the competent courts in Dehradun, Uttarakhand.

I&D Hospital Solution Pvt. Ltd. reserves the right to amend, update, or revise this Privacy Policy periodically to reflect changes in regulatory mandates, corporate structure, or technological practices. Revised policies will be published on this page with updated revision markers. Continued engagement with our services following publication signifies acceptance of the revised terms. For questions regarding this policy, reach out directly to our administrative team.