Universal Data Privacy Policy
MASTER PRIVACY & DATA PROTECTION POLICY
SECTION 1: DATA COLLECTION BY USER CATEGORY
We apply the principle of "Data Minimization," meaning we only collect information that is strictly necessary for the respective user's interaction with our platform.
1.1 For Website Users & General Visitors
When you browse www.sankatmochantherapy.com without booking an appointment, we collect basic non-identifiable data to improve platform performance.
- Technical Data: IP address, browser type, device information, and operating system.
- Usage Data: Pages visited, time spent on the website, and referring URLs.
- Cookies & Tracking: Session cookies are used to enable dark mode preferences and ensure smooth navigation. We use Google Analytics for aggregate traffic analysis.
1.2 For Patients & Legal Guardians
When you book an appointment, fill out a consent form, or receive home therapy, we collect Protected Health Information (PHI) to deliver safe clinical care.
- Personal Information: Patient name, age, gender, contact number, emergency contact, and complete residential address for home visits.
- Medical Records: Chief complaints, past medical history, surgical history, radiology reports (X-rays/MRIs), and daily clinical progress notes.
- Financial Data: Billing details and digital transaction IDs (UPI/Bank Transfer references). Note: We do not store raw credit card numbers or UPI PINs.
- Media Consent: Anonymized photographs or videos of the affected body part strictly for tracking clinical rehabilitation progress.
1.3 For Consultant Therapists
For independent professionals empaneled under our 70:30 revenue-sharing model, we collect data necessary for legal compliance and financial settlements.
- Identity & KYC: Full name, Date of Birth, Aadhaar Card Number (encrypted), and PAN Card details for TDS deductions.
- Professional Credentials: Degree certificates (BPT/MPT), State Council Registration numbers, and CPR certifications.
- Background Audit: Police verification reports, previous employer references, and clinical evaluation scores.
- Financial Information: Bank account numbers and IFSC codes exclusively for processing weekly/monthly revenue payouts.
1.4 For Internal Employees (Admin & HR)
For full-time administrative and operational staff, data collection aligns with standard employment laws.
- HR Records: Resumes, interview assessments, employment contracts, attendance logs, and performance KPIs.
- System Access Logs: Time-stamped logs tracking when an employee accesses the digital portal or patient records to prevent unauthorized data viewing.
SECTION 2: PURPOSE OF DATA PROCESSING
We utilize the collected data strictly for the following lawful purposes:
- Service Delivery: To schedule home visits, assign the nearest available therapist, and formulate accurate treatment protocols.
- Financial Processing: To generate invoices, process patient payments, and execute revenue-sharing payouts for therapists.
- Legal & Compliance: To comply with Indian Medical Council regulations, taxation laws, and Medico-Legal case requirements.
- Quality Assurance: To audit therapist performance, review patient feedback, and improve clinical outcomes.
SECTION 3: DATA SHARING & THIRD-PARTY DISCLOSURE
Sankatmochan Home Therapy enforces a strict Zero Data Selling Policy. We do not sell, rent, or trade Personal or Medical Data to marketing agencies, pharmaceutical companies, or telemarketers.
Data is shared only under the following conditions:
- Internal Clinical Team: Patient data is securely shared only with the specifically assigned treating therapist and the Clinical Director.
- Legal Authorities: Information may be disclosed to law enforcement agencies or courts if mandated by a valid legal subpoena or court order.
- Technology Partners: Encrypted data is processed by RBI-compliant payment gateways and secure cloud hosting providers under strict confidentiality agreements.
SECTION 4: DATA SECURITY, ENCRYPTION & RETENTION
- Security Infrastructure: All digital agreements, E-Signatures, and medical records are hosted on secure cloud servers utilizing SSL/TLS 256-bit encryption in transit and AES-256 encryption at rest.
- Role-Based Access (RBAC): The platform restricts data access. A therapist can only view records of patients assigned to them; they cannot access the entire company database.
- Retention Period: Patient medical records and financial invoices are retained digitally for a mandatory period of 7 years as per statutory healthcare guidelines. HR and Therapist records are retained for 3 years post-termination. Thereafter, data is securely purged.
SECTION 5: USER RIGHTS (DATA PRINCIPAL RIGHTS)
Regardless of your user category, you hold the following rights under applicable data protection laws:
- Right to Access: You may request a digital copy of your personal data, medical summaries, or employment records held by the Company.
- Right to Rectification: You can request immediate corrections to any inaccurate demographic or contact information.
- Right to Erasure (Right to be Forgotten): Website users and patients may request the deletion of non-clinical account data. (Note: Core medical records cannot be deleted before the 7-year statutory period).
- Right to Withdraw Consent: Patients may revoke consent for media (photo/video) recordings or tele-consultation at any time via written notice.
SECTION 6: GRIEVANCE REDRESSAL MECHANISM
In accordance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, any discrepancies or grievances related to data privacy must be addressed to our designated officer.
Grievance & Data Protection Officer
Department: Clinical Compliance & Legal Operations
Organization: Sankatmochan Home Therapy
Official Email: sankatmochantherapy@gmail.com
Contact Number: +91 9588861800
Registered Address: 254-A, Rajendra Nagar, Bharatpur, Rajasthan - 321001, India
Sankatmochan Home Therapy