Privacy Policy

This Policy applies to:

• Visitors browsing www.medivisioneyecare.com and its sub-pages;
• Patients and prospective patients who submit enquiries, book appointments (including through our online appointment portal), or contact us via phone, email, or WhatsApp;
• Users who interact with our official social media pages (Facebook, Instagram, X/Twitter, YouTube, LinkedIn) linked from the Website;
• International patients seeking treatment through our International Patient Care and Medical Tourism services; and
• Corporate, insurance, and empanelment partners who share employee or beneficiary information with us for treatment purposes.

This Policy does not apply to third-party websites or services that may be linked from our Website (including our appointment booking portal hosted at medivision.elihealthsupport.com), which are governed by their own privacy policies.

2.1 Personal Information

• Name, age, gender, date of birth, and contact details (phone number, email address, postal address);
• Identity and demographic information such as government-issued ID, and, for international patients, passport and visa details;
• Appointment and scheduling details, including preferred branch, doctor, and department;
• Billing, insurance, and payment information, including corporate tie-up or empanelment (e.g., TPA / insurance) details;
• Communications you send us, including enquiry forms, emails, and messages via phone or WhatsApp.

2.2 Health and Medical Information

As a healthcare provider, we collect sensitive personal medical information necessary to provide diagnosis, treatment, and follow-up care. This may include:

• Medical and ophthalmic history, symptoms, diagnoses, and prescriptions;
• Clinical records relating to consultations and treatments including cataract, refractive, corneal, retinal, glaucoma, oculoplasty, paediatric, squint, and SMILE / LASIK (SILK) procedures;
• Diagnostic images, scans, and test results generated during examination or treatment;
• Family and referring-physician information relevant to your care.

Health information is treated as sensitive personal data and is subject to the stricter safeguards described in Section 5 of this Policy.

2.3 Information We Receive from Third Parties

We may also receive information about you from referring doctors and hospitals, diagnostic centres, insurance companies and third-party administrators (TPAs), and corporate or empanelment partners, where this is relevant to your care, appointment, or claim.

2.4 Information Collected Automatically

• IP address, browser type, device type, and operating system;
• Pages visited, time spent on pages, referring website, and general browsing behaviour on our Website, collected through cookies, log files, and similar tracking technologies (including Google Tag Manager);
• Approximate geographic location derived from your IP address, used to help identify your nearest branch.

2.5 Premises Security (CCTV)

For the safety and security of patients, visitors, and staff, our Hospitals are monitored by closed-circuit television (CCTV). CCTV footage is used solely for security, safety, and the prevention or investigation of incidents, and is retained for a limited period in accordance with applicable law.

We use the information we collect to:

• Schedule, confirm, reschedule, or cancel appointments and consultations at any of our branches;
• Provide medical consultation, diagnosis, treatment, surgery, and follow-up care;
• Communicate with you regarding your appointments, treatment plans, reports, billing, and post-treatment instructions;
• Process insurance claims, corporate tie-up benefits, and empanelment reimbursements;
• Coordinate travel, accommodation, and treatment logistics for international and medical tourism patients;
• Respond to enquiries submitted through the Website, phone, email, or WhatsApp;
• Improve our Website, services, and patient experience, including through analytics;
• Send appointment reminders, health-awareness information, and, where you have consented, promotional communications about camps, offers, or CSR initiatives;
• Comply with applicable legal, regulatory, medical, and record-keeping obligations; and
• Maintain the safety, security, and integrity of our Website and Hospitals.

We may monitor or record telephone calls and messages handled by our patient-support and helpline teams for quality, training, and record-keeping purposes. Where we do so, we handle those recordings in line with this Policy.

We collect and process personal and medical information on the basis of: (a) your explicit consent, given at the time of booking an appointment, registering at a Hospital, or submitting a form on the Website; (b) the necessity of processing to provide medical care, including emergency care where consent cannot immediately be obtained; (c) compliance with legal and regulatory obligations applicable to healthcare providers in India; and (d) our legitimate interest in operating, maintaining, and improving our services. You may withdraw consent for non-essential uses (such as marketing communications) at any time by contacting us using the details in Section 14, without affecting the lawfulness of processing carried out before withdrawal.

We maintain administrative, physical, and technical safeguards designed to protect your medical records and personal data, including:

• Restricted, role-based access to patient records, limited to treating doctors, clinical staff, and authorised administrative personnel on a need-to-know basis;
• Secure storage of physical case sheets and electronic medical records at each branch;
• Confidentiality obligations binding all doctors, nurses, optometrists, and staff, consistent with applicable medical ethics and professional-conduct regulations;
• Encryption and access controls for information transmitted or stored through our online appointment portal and IT systems; and
• Periodic review of our data-handling practices.

While we take reasonable measures to protect your information, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

We do not sell or rent your personal or medical information. We may share your information only in the following circumstances:

• With treating doctors, consultants, and clinical staff involved in your care across our branches;
• With diagnostic laboratories, pharmacies, or referral hospitals where necessary for your treatment, with your consent;
• With insurance companies, third-party administrators (TPAs), and corporate tie-up partners, strictly for processing claims and benefits, and only with your authorisation;
• With service providers who support our Website, appointment portal, IT systems, or communications, under confidentiality obligations;
• With government or regulatory authorities where required by law, court order, or public-health reporting obligations; and
• In connection with a merger, acquisition, or restructuring of our business, subject to equivalent privacy protections.

We do not use patient photographs, case details, or testimonials for marketing or publicity without separate, specific consent.

Our Website uses cookies, tags (including Google Tag Manager), and similar technologies to operate correctly, remember preferences, and understand how visitors use the Website. You can control or disable cookies through your browser settings; however, doing so may affect the functionality of certain Website features. We do not use cookie-based data to make clinical decisions about you.

Our Website contains links to third-party services, including our online appointment portal (medivision.elihealthsupport.com), Google Maps, and our social media pages on Facebook, Instagram, X (Twitter), YouTube, and LinkedIn. These third parties operate independently of MediVision and maintain their own privacy policies. We encourage you to review those policies, as we are not responsible for the privacy practices of third-party platforms.

For patients availing our International Patient Care and Medical Tourism services, we may collect additional information such as passport, visa, and travel details, and may need to share limited information with authorised travel, accommodation, or visa-facilitation partners assisting your visit, and, where legally required, with immigration or health authorities. If you are accessing our Website or services from outside India, your information will be processed in India, where data-protection standards may differ from those in your home country. By providing your information, you consent to this processing.

We retain medical records for such period as is required under applicable medical council, hospital-licensing, and health-record regulations in India, and in accordance with sound clinical practice. Website enquiry and appointment-related data not linked to an active treatment record is retained only as long as necessary to fulfil the purpose for which it was collected, or as required by law, after which it is securely deleted or anonymised.

Subject to applicable law, you may:

• Request access to, and a copy of, the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Withdraw consent for marketing communications or non-essential processing;
• Request deletion of information that is no longer required for treatment or legal purposes, subject to our medical record-retention obligations; and
• Raise a grievance regarding the handling of your personal information (see Section 14).

Access to certain medical records may be provided through your treating doctor in accordance with standard clinical practice, particularly where direct disclosure could affect your care. To exercise any of these rights, please contact us using the details in Section 14. We may need to verify your identity before acting on your request.

When you share information with us or use our Website, you agree to provide accurate, current, and complete information, and to keep your contact and medical details up to date so that we can care for you safely. You agree not to submit information that is unlawful, misleading, or that infringes the rights of others, and not to misuse the Website or attempt to gain unauthorised access to our systems or to other users' data. If you provide information about another person (for example, a family member or a minor in your care), you confirm that you are authorised to do so.

We provide paediatric ophthalmic care and may collect information about minors for the purpose of their treatment. Such information is collected from and with the consent of a parent or legal guardian, who is responsible for reviewing this Policy on the minor's behalf. We do not knowingly collect personal information directly from children through the Website for any purpose other than facilitating an appointment initiated by a parent or guardian.

If you have questions, concerns, or complaints about this Privacy Policy or the handling of your personal or medical information, please contact our Grievance Officer:

We will acknowledge and endeavour to resolve grievances within a reasonable time in accordance with applicable law.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review this Policy periodically. Continued use of our Website or services after changes are posted constitutes acceptance of the revised Policy.

This Privacy Policy is governed by the laws of India, including applicable data-protection legislation such as the Information Technology Act, 2000 (and the rules made thereunder) and the Digital Personal Data Protection Act, 2023, to the extent applicable. Any disputes arising out of this Policy shall be subject to the exclusive jurisdiction of the courts at Hyderabad, Telangana.