Privacy Policy
Rainbow Children’s Medicare Limited (“we”, “us”, “Rainbow”), is the author and publisher of the internet source and application https://www.rainbowhospitals.in/ (“Website”) and __Rainbow Children’s Hospital ____ (“App” and collectively with the Website referred to as “Services”, as the context may require) is committed to respecting the privacy of every person who shares their information or data with us (“you(r)” or “User(s)”). Your privacy protection is of utmost importance to us and we strive to take due care and protection of the information we receive from you, the User. This privacy policy aims at explaining to you how we collect, share and protect personal data of the Users in order to demonstrate our commitment in protecting your privacy and your personal information (“Privacy Policy”/ “Policy”). Any capitalised word has the meaning attributed to it in the Policy hereinafter. This Privacy Policy applies to the collection, storage, processing, disclosure and transfer of your Personal Information (defined below) as per the below mentioned laws, particularly when you use our Services.
In this regard, we adhere to law applicable to us, inclusive of
- The Information Technology Act, 2000 – Section 43A.
- The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011. (“SPI Rules”)
- The Information Technology (Intermediaries Guidelines) Rules, 2011
- The Digital Personal Data Protection Act, 2023
By confirming that you are bound by this privacy policy (by the means provided on this website or app), by using the services or by otherwise giving us your information, you acknowledge that you understand this privacy policy and its contents, agree to the practices and policies outlined in this privacy policy and hereby consent to our collection, use and sharing of your information as described in this privacy policy. We reserve the right to change, modify, add or delete portions of the terms of this privacy policy at any time. If you do not agree with this privacy policy at any time, please exercise restraint from using any of our services or sharing any of your information with us. If you use the services on behalf of someone else (such as your child or a dependant) or an entity, you represent that you are authorised by, and hereby acknowledge that you accept this privacy policy, on such individual’s or entity’s behalf.
1. ACCESS
- Basis communication standards/ protocols/ practices on the Internet, we collect your Personal Information directly from you and/or from third-parties and automatically through our Services. Such Personal Information includes the Internet Protocol (IP) address of your computer (or the proxy server a User used to access the World Wide Web), your computer/ device operating system and type of web browser you are using, email patterns, as well as the name of User’s ISP other Personal Information, as listed in Clause 5 below.
- The linkage between User’s IP address and User’s Personal Information may be available to us or our partners but is not shared with other third parties. We also may use the geolocation feature and automatically collect data such as the type of device used, operating system and device identifier. This information, however, is not shared and the User can opt out of such services by making changes to their settings at the device level. You may access your Personal Information shared with us in the manner given below. You can further choose to share additional Personal Information with us and can further modify your Personal Information or our usage thereof by writing to us as per Clause 16 or per Clause 3 below.
2. CONSENT
- By choosing the opt-in option on the Services and thereafter by providing us with your Personal Information or availing the services of Rainbow or by making use of the facilities provided by the Website or by registering on our App/ Website, it is agreed by you that you have, freely consented to the collection, storage, processing, disclosure and transfer of your Personal Information in accordance with the provisions of this Privacy Policy and any amendments thereof. The consent given by you shall be free, specific, informed, unconditional and unambiguous with a clear affirmative action, and shall signify an agreement to processing of your personal data.
- You acknowledge that you have provided your Personal Information out of your free will and after understanding how it will be used. You also consent that the collection, storage, processing, disclosure and transfer of any Personal Information shall not cause any wrongful loss to you, if it is done in accordance with the provisions of this Privacy Policy.
- In addition, to the extent necessary in order to provide Services to you, we may use third party services who work on our behalf. Such third-parties may collect, monitor and analyze your Personal Information. In such case, we might require you to voluntarily provide third-parties, certain information that personally identifies you or secondary users related to you. You hereby consent to the collection of such information by third-parties. The information that such third-parties collect from you, about you or secondary users related to you, may include but not be limited to your IPS, contact details, _________, _______.
3. CONTROL OVER YOUR PERSONAL INFORMATION
- We may continue to process the personal data until and unless you withdraw your consent. You may give, manage, review or withdraw your consent through Consent Manager for our usage of the Personal Information at any point once the withdrawal of the consent is intimated to us in writing through an email to grievance@rainbowhospitals.com [IT TEAM TO PROVIDE EMAIL] requesting the same. The consequence of withdrawal shall be borne by you, and such withdrawal shall not affect the legality of processing of the personal data based on consent before your withdrawal. If you wish to rectify the Personal Information (or a part thereof) that we may have collected to offer you personalized services and offers, as per Clause 12 of this Policy, you may write to the Grievance Officer, as mentioned under Clause 16 of this Policy, citing the reason for such rectification of Personal Information.
- Once you withdraw your Consent to share the Personal Information collected by us, we shall have the option not to fulfil the purposes for which the said Personal Information was sought and we may restrict you from using our Services or the Website. Unless required under law for the time being in force, Rainbow shall erase personal data as soon as the User withdraws their consent.
4. CHANGES TO THE PRIVACY POLICY
Rainbow reserves the right to update and modify this Privacy Policy from time to time, without advance notice, including on account of changes in applicable law. We will, subject to law, however, endeavour not to adversely impair your rights under this Privacy Policy without your explicit consent and will do so by displaying such a change through notice. We always indicate the date when the last changes were published and we will offer access to archived versions for your review. If you object to the changes of our Policy and wish to no longer use our Services you may contact us in accordance with the terms hereof to deactivate your account. If a User uses our Services after a notice of changes has been sent or published, such a User hereby provides their consent to the changed terms.
5. PERSONAL INFORMATION COLLECTED
In order to provide the best services so as to meet your needs, we may ask you to voluntarily provide us with information that will enable us to personally identify you. You consent, agree and acknowledge that that the kinds of information we may collect about you may include the following:
- Contact details (number/mobile number and email address),
- Personal details, medical records, test results, details of drugs and pharmaceuticals and related consumables and history provided by you and/or your health care professional,
- Valid financial information at time of purchase of product/service and/or online payment,
- Login ID and password,
- User details as provided at the time of registration or thereafter,
- Records of interaction with our representatives,
- Your usage details such as time, frequency, duration and pattern of use, features used and the amount of storage used,
- Master and transaction data and other data stored in your user account,
- Internet Protocol address, cookie data, browser type, browser language, referring URL, files accessed, errors generated, time zone, operating system and other visitor details collected in Our log files,
- Any other information that may be willingly shared by you such as insurance data, reports etc. (collectively referred to as "Personal Information").
Such information we collect may constitute Personal Information as per the SPI Rules and you give us your express consent to such collection with this Policy. Our Services may be unavailable to you, or may not be available as intended, in the event such consent is not given. Information that is however freely available to the public domain under the right to information act or other such act will not be regarded as Personal Information or sensitive as per the SPI Rules.
You shall have the right to correction, completion, updating and erasure of the Personal Information for the processing of which you have previously given consent, including the consent referred to in Clause 7.
6. HOW WE COLLECT PERSONAL INFORMATION
The methods by which we collect your Personal Information include but are not limited to the following:
- When you fill the patient registration form,
- When you provide details to a Rainbow health care professional or Rainbow representative,
- When you register on our Website or App and with our other healthcare aggregators with information as may be necessary
- When you provide your Personal Information to us during course of receiving services,
- When you use the features of our Services,
- When you provide access to any other website,
- By the use of cookies (more fully detailed in Clause 9 of this Privacy Policy).
Information from a casual visitor who is just perusing the Website shall be not be used or collected. However, this Privacy Policy is to be understood by such casual visitors as well before using our Services, failing which they are required to leave the Website or App immediately. Any visitor who has voluntarily submitted their information to the Website or App shall come within the definition of User as set out above. Casual visitors who have accepted this Privacy Policy but do not agree with them anymore can exit the App or Website to clear temporary cookies and can ensure the same by clearing them on the website. Rainbow does not guarantee the behaviour of the Services for such visitors of the Website/ users of the App.
During your interactions with us, it may happen that we provide/include links and hyperlinks of third-party websites that are not owned or managed by us. Such third-parties are governed by their own terms and conditions and when you access such third-parties, you will be governed by the terms of such third-party websites. You must use your own discretion while accessing or using such third-party websites. We do not make any representations regarding the availability and performance of any of the third-party websites. We are not responsible for the content, terms of use, privacy policies and practices of such third-party websites. We do not bear any liability out of your use of third-party websites.
7. USE OF PERSONAL INFORMATION
All the Personal Information that you voluntarily provide us including sensitive Personal Information as per the SPI Rules, may be used by or processed by Rainbow or its partners for various purposes including but not limited to the following:
- To provide effective services by sharing Personal Information to third party contractors working on behalf of Rainbow. Such third parties generally do not have the right to share information and the same is subject to their privacy policy(cies) and Rainbow takes no responsibility for the same;
- To operate and improve our Services;
- To perform studies, research and analysis for improving our information, analysis, services and technologies; and ensuring that the content displayed is customized and relevant to your interests and preferences;
- To contact you via phone, SMS, WhatsApp or email for appointments, technical issues, payment reminders, deals and offers and other announcements;
- To send promotional mailings from us or any of our channel partners via SMS, WhatsApp, email or other media/ channels of communication;
- To advertise products and services of Rainbow and third parties;
- To transfer information about you if we are acquired by or merged with another company, or undertake a reorganization of our assets with any third party to whom we agree to sell our assets: such entities shall have the right to continue to use the personal and other information that you provide to us;
- To share with our business partners and third-party contractors for provision of specific services you have obtained so as to enable them to provide effective services to you;
- To administer or otherwise carry out our obligations in relation to any agreement you have with us;
- To build your profile on the Website/ App and publish any such information on the Website/ App;
- To fulfil any obligation under any law for the time being in force in India on any person to disclose any information to the State or any of its instrumentalities;
- To enforce any legal right or claim;
- To respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims;
- To comply with any judgment or decree or order issued under any law for the time being in force in India, or any judgment or order relating to claims of a contractual or civil nature under any law for the time being in force outside India;
- To respond to a medical emergency involving a threat to the life or immediate threat to the health of the Users or any other individual;
- To take measures to provide medical treatment or health services to any individual during an epidemic, outbreak of disease, or any other threat to public health;
- To take measures to ensure safety of, or provide assistance or services to, any individual during any disaster, or any breakdown of public order;
- To investigate, prevent, or take action regarding illegal activities, prevention, detection, investigation or prosecution of any offence or contravention of any law for the time being in force, suspected fraud, violations of our terms of use, breach of our agreement with you or as otherwise required by any law, rule, regulation, law enforcement agency, governmental official, legal authority or similar requirements or when Rainbow, in its discretion, deems it necessary in order to protect its rights or the rights of others, to prevent harm to persons or property, to fight fraud and credit risk;
- To aggregate Personal Information for research, statistical analysis and business intelligence purposes, and to sell or otherwise transfer such research, statistical or intelligence data in an aggregated or non-personally identifiable form to third parties and affiliates. In particular, we and our partners or affiliates reserve with us the right to use anonymized user demographics collected as per Clause 5 and 6 for analysing software usage patterns to improve design and for research purposes and to use such analysis in commercial product offerings with third parties (collectively, “Purposes”).
You hereby consent to such use of such information by Rainbow in providing any of the above-mentioned services and usage.
8. RIGHTS AND DUTIES OF THE USERS
The Users shall perform the following duties:
- To ensure not to impersonate another person while providing their personal data for the purposes stated above.
- To ensure not to supress any material information while providing their personal data for any document, unique identifier, proof of identity or proof of address issued by the State or any of its instrumentalities.
- To ensure not to register a false or frivolous grievance or complaint with us or the Board.
- To furnish only such information as is verifiably authentic, while exercising the right to correction or erasure.
- To obtain a summary of personal data which is being processed and the processing activities undertaken with respect to such personal data subject to a request made in such manner as may be prescribed.
- To obtain the identities of all other data fiduciaries and data processors with whom the personal data has been shared by Rainbow subject to a request made in such manner as may be prescribed.
9. SHARING AND TRANSFERRING OF PERSONAL INFORMATION
Once you have freely consented to share your Personal Information with us, you authorize us to exchange, transfer, share, part with all or any of your Personal Information, across borders and from your country to any other countries across the world with the cloud service provider and our affiliates / agents / third party service providers / partners / banks and financial institutions or any other persons, for the Purposes and objectives/ uses specified under this Policy or as may be required by applicable law.
10. COOKIES
- We may store temporary or permanent ‘cookies’ on your computer/ device for the technical administration of our Services. You can erase or choose to block these cookies from your computer/ device or configure your computer's/ device’s browser to alert you when we attempt to send you a cookie with an option to accept or refuse the cookies. If you have turned cookies off, you may be prevented from using certain features of the Website and/ or App. Rainbow may allow authorized third parties to place unique cookies on your browser that do not store Personal Information of the User.
- We do not exercise control over the sites that may be displayed as search results or links from within the Website and App. These other sites may place their own cookies or other files on the Users’ computer/ device, collect data or solicit personal information from the Users, for which Rainbow is not responsible. The inclusion or exclusion does not imply any endorsement by Rainbow of the said website, the website's provider, or the information on the website. If you decide to visit a third-party website linked to the Website, you do this entirely at your own risk. Rainbow encourages you to read the privacy policies of all external sites.
11. CONFIDENTIALITY AND SECURITY
- The security of your Personal Information is important to us and is therefore maintained in electronic form and maybe converted from time to time. We have adopted reasonable security practices and procedures to protect the information you share with us, including technical, operational, managerial, organisational and physical security control measures.
- We also provide access to your Personal Information to our affiliates’ employees, agents, third party service providers, partners, and agencies on a role-based and need to know basis in relation to the Purposes as specified above in this Policy.
- No administrator at Rainbow will have knowledge of your password as it is protected and encrypted to ensure that the Personal Information collected by us is secure. Therefore, you shall be liable to indemnify Rainbow and its employees against any loss suffered by Rainbow due to the unauthorized use of your account and password.
- Our websites include social media features/ links, such as Facebook, Instagram, YouTube, Twitter, etc. that may collect your IP address and may set cookie(s) to enable proper functioning. Your interactions with these features are governed by their privacy statement and Rainbow cannot be held liable for any breach arising from the same.
- Rainbow is not responsible for confidentiality, security or distribution of your Personal Information beyond the scope of our agreement with third parties. Rainbow shall not be responsible for any breach for actions that are beyond its control, including acts of the government, computer crashes, breach of security, etc.
- While We will endeavour to take all reasonable and appropriate steps to keep secure any information which We hold about You and prevent unauthorized access, You acknowledge that the internet is not 100% secure and that We cannot provide any absolute assurance regarding the security of Your Personal Information. We will not be liable in any way in relation to any breach of security or unintended loss or disclosure of information caused by Us in relation to your Personal Information.
12. HOW WE PROTECT PERSONAL INFORMATION TRANSMISSION
- Rainbow may require the User to pay using online payment mechanisms for chargeable services. Rainbow will only use related information for the billing processes while the authentication process is to be completed by the User themselves. User’s information with this regard are transacted upon secure sites that are under encryption, ensuring the highest standard of care as per current technology. User is advised, however, that internet technology is not fool-proof and User should exercise discretion on using the same.
- We maintain administrative, technical and physical safeguards, consistent with legal requirements where the personal information was obtained, designed to protect against unlawful or unauthorized destruction, loss, alteration, use or disclosure of, or access to, the personal information provided to us through the channels.
- Do-not-track requests - There is no standard for how online service should respond to “Do not track” signals or other mechanisms that may allow you to opt out of the collection of information across networks of websites and online services. Therefore, we may not be able to guarantee the effectiveness of “Do not track” or similar signals/ instructions owing to reasons beyond our control (as aforesaid). As standards develop, we will revisit this issue and update this notice, as permitted.
13. THIRD PARTY REFERENCES AND LINKS
- In addition, to the extent necessary in order to provide Services to you, we may use third party services who work on our behalf, such third-party may collect, monitor and analyze your Personal Information. In such case, we might require you to voluntarily provide third-parties certain information that personally identifies you or secondary users related to you. You hereby consent to the collection of such information by third-parties. The information that such third-parties collect from you, about you or secondary users related to you, may include but are not limited to your IPS, contact details, _________, _______.
- Notwithstanding the above, we are not responsible for the confidentiality, security or distribution of your Personal Information by third-parties outside the scope of our Policy. Further, we shall not be responsible for any breach of security or for any actions of any third-parties or events that are beyond the reasonable control of us.
- During your interactions with us, it may happen that we provide/include links and hyperlinks of third-party websites that are not owned or managed by us. Such third-parties are governed by their own terms and conditions and when you access such third-parties, you will be governed by the terms of such third-party websites. You must use your own discretion while accessing or using such third-party websites. We do not make any representations regarding the availability and performance of any of the third-party websites. We are not responsible for the content, terms of use, privacy policies and practices of such third-party websites. We do not bear any liability out of your use of third-party websites.
14. RECTIFICATION/CORRECTION OF PERSONAL INFORMATION
You are responsible to maintain the accuracy of the information you share with us. If you need to update or correct your Personal Information, you may send updates and corrections to us at grievance@rainbowhospitals.in, we will take all reasonable efforts to incorporate the changes within a reasonable period. Upon receipt of request for correction, completion or updating the Personal Information from the User, Rainbow shall (a) correct the inaccurate or misleading information, (b) complete the incomplete personal data and (c) update the data. If you provide any information that is untrue, inaccurate, out of date or incomplete (or becomes untrue, inaccurate, out of date or incomplete), or Rainbow has reasonable grounds to suspect that the information provided by you is out of date or incomplete, untrue, inaccurate and/or is being provided or accessed for fraudulent/ unlawful/improper purposes and/or without good faith, Rainbow may, at its sole discretion, discontinue the provision of the services to you and/or may further restrict your access to the Website and/or the App.
15. COMPLIANCE WITH LAWS
You are not allowed to use the services of the Website if any of the terms of this Privacy Policy are not in accordance with the applicable laws of your country and Rainbow takes no responsibility for losses that may arise from such wrongful usage.
16. TERM OF STORAGE OF PERSONAL INFORMATION
If you wish to cancel your account, you may do so as per Clause 3. Rainbow shall retain and store your Personal Information at least for the lesser of either a period of three years from the last date of use of the Services or such period as may be required and permitted by law. Unless required under law for the time being in force, Rainbow shall erase personal data as soon as it is reasonable to assume that the specified purpose is no longer served. After such a time, your data maybe anonymized and aggregated as long as necessary for us to provide our Services effectively solely for analytic purposes.
17. CHILDREN AND MINOR PRIVACY
Rainbow strongly encourages parents and guardians to supervise the online activities of their minor children and consider using parental control tools available from online services and software manufacturers to help provide a child-friendly online environment. These tools also can prevent minors from disclosing their name, address, and other personally identifiable information online without parental permission. Although the Rainbow Services are not intended for use by minors, Rainbow respects the privacy of minors who may inadvertently access our Services. Rainbow shall not undertake tracking or behavioural monitoring of children or targeted advertising directed at children.
18. GRIEVANCE OFFICER
We have appointed a grievance officer to address any concerns or grievances that you may have in respect of any act or omission by Us regarding the performance of its obligations in relation to the processing of your Personal Information or your rights. If you have any such grievances, please write to our grievance officer at grievance@rainbowhospitals.in. We shall respond to the grievances within such period as may be prescribed from the date of its receipt.. If you have further issues you may communicate such a grievance to –
The Grievance Officer,
Rainbow Corporate Office,
Daulet Arcade, 8-2-19 /1/A, Rd Number 11,
Avenue 4, Banjara Hills, Hyderabad, Telangana 500034
Such comments or grievances that are sent to us using email or secure messaging and that pertain to the provision of medical services by us may be shared with our employees and health care professionals who are most able to address the comment or question. We will archive such messages once we have made efforts to provide you with a complete and satisfactory response.
