Privacy Policy
Your privacy is part of how we earn your trust.
Last updated: 1 June 2026
Wellness Hospitals is committed to protecting the privacy of every patient, family member, and visitor who interacts with our website, digital services, or care platforms. This policy explains what information we collect, why we collect it, and the choices you have regarding your personal data. It is issued in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA), India.
1. Information we collect
We collect information only when you choose to interact with us. This includes:
- Contact details — name, phone number, and email address provided when you book an appointment, submit an enquiry, or register for the Wellness ONE membership.
- Appointment information — specialty, preferred doctor, branch, date, and reason for visit.
- OTP verification data — your mobile number is used to send a one-time password to verify your identity before confirming a booking. The OTP itself is not stored after verification.
- Website usage data — pages visited, browser type, device identifiers, and referral source, collected through cookies and standard analytics tools.
- Clinical information — health details voluntarily shared with our care teams during consultation or via our digital platforms.
2. How we use your information
- Schedule, confirm, and manage your appointments.
- Send appointment reminders and follow-up communications via SMS, WhatsApp, or email.
- Deliver clinical care and coordinate between treating doctors and departments.
- Manage your Wellness ONE membership account, benefits, and renewals.
- Process and coordinate insurance or cashless claims where applicable.
- Improve our services through anonymised analytics and feedback.
- Meet our legal and regulatory obligations under applicable Indian laws.
3. OTP verification and consent
When you submit your mobile number for appointment booking or account verification, you consent to receiving an OTP from Wellness Hospitals on that number. This OTP is used solely to confirm your identity and is not used for marketing. By entering your phone number and proceeding, you give us consent to contact you for appointment-related communications, including booking confirmations and care advisor callbacks.
You may withdraw this consent at any time by contacting us at care@wellnesshospitals.co.in. Withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal.
4. Cookies and analytics
Our website uses cookies and similar technologies to understand how visitors use the site, remember your preferences, and improve performance. We use analytics tools (such as Google Analytics) that may collect anonymised usage data. This data does not identify you personally and is used solely to improve the website experience.
You can disable cookies through your browser settings at any time. Disabling cookies may affect certain features of the website, such as form pre-fill.
5. Sharing and disclosure
We do not sell, rent, or trade your personal or medical information. Information may be shared only in the following circumstances:
- Treating clinicians and care teams — within Wellness Hospitals, to deliver your care.
- Authorised insurance partners — to process cashless or reimbursement claims at your request.
- Technology service providers — vendors who help us operate our booking and communication platforms, bound by data processing agreements.
- Government and regulatory bodies — where required by law, court order, or public health obligation.
6. Data retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable law:
- Appointment and enquiry records — retained for up to 7 years in accordance with healthcare record-keeping requirements under Indian law.
- OTP logs — deleted within 24 hours of successful verification.
- Membership records — retained for the duration of the membership and up to 3 years after expiry.
- Website analytics data — retained in anonymised form for up to 26 months.
7. Security safeguards
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include HTTPS encryption for all data in transit, access controls limiting who within Wellness Hospitals can view your information, and regular security reviews of our systems. No method of digital transmission is completely secure; however, we take all reasonable steps to protect your information.
8. Children's data
Wellness Hospitals provides care to patients of all ages, including children. Where personal data is collected for a patient under the age of 18, we require the consent of a parent or legal guardian. If you believe we have collected data about a child without appropriate parental consent, please contact our Grievance Officer immediately so we can take corrective action.
9. Your rights under the DPDPA 2023
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data held by Wellness Hospitals:
- Right to access — you may request a summary of the personal data we hold about you and the purposes for which it is being processed.
- Right to correction — you may request correction of inaccurate or incomplete personal data.
- Right to erasure — you may request deletion of your personal data, subject to our legal retention obligations.
- Right to withdraw consent — you may withdraw consent for processing at any time. Withdrawal does not affect processing done before the withdrawal.
- Right to grievance redressal — you may raise a complaint with our Grievance Officer (see below) and expect a response within 30 days.
- Right to nominate — you may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
To exercise any of these rights, please contact us at care@wellnesshospitals.co.in with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and respond fully within 30 days.
10. Grievance Officer
In accordance with the Digital Personal Data Protection Act, 2023, Wellness Hospitals has designated a Grievance Officer to address concerns related to the processing of your personal data:
Designation: Head of Patient Relations & Data Privacy
Organisation: Wellness Hospitals
Email: care@wellnesshospitals.co.in
Address: Plot No. 1-4-26/2, Road No. 4, Shyamkaran Road, Ameerpet, Hyderabad – 500016, Telangana, India.
Response time: Acknowledgement within 48 hours; resolution within 30 days.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
12. Contact us
For any questions about this Privacy Policy or how your data is handled, please reach us at care@wellnesshospitals.co.in or call us at +91 955 955 1 955.
