PATIENT PRIVACY POLICY
1. Scope & Applicability
This Patient Privacy Policy ('Policy') applies to all individuals who interact with Oncomed Clinic, including but not limited to:
This Policy covers all forms of personal data and sensitive personal data (including health/medical data) collected, processed, or stored by Oncomed Clinic, whether in digital, electronic, or physical form.
2. Definitions
In this Policy, the following terms shall have the meanings assigned to them:
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or can identify an individual patient, including name, address, date of birth, contact number, and email. |
| Sensitive Personal Data (SPDI) | Health/medical records, treatment history, diagnostic reports, prescriptions, biometric data, financial data related to payments. |
| Data Controller | Oncomed Clinic, which determines the purpose and means of processing personal data. |
| Data Processor | Any third-party entity that processes personal data on behalf of Oncomed Clinic (e.g., payment gateways, IT service providers). |
| Consent | Freely given, specific, informed, and unambiguous agreement by the patient for processing their data. |
| Health Data | All medical records, clinical notes, diagnoses, test results, prescriptions, and treatment plans. |
| DPDP Act | Digital Personal Data Protection Act, 2023 (India). |
| IT Act | Information Technology Act, 2000, as amended. |
| SPDI Rules | IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. |
3. Information We Collect
Oncomed Clinic collects the following categories of information:
3.1 Personal Identification Information
3.2 Medical & Health Information
3.3 Financial & Payment Information
3.4 Digital & Technical Information
4. Legal Basis for Processing Personal Data
Oncomed Clinic processes personal and sensitive personal data under the following legal bases in accordance with the DPDP Act 2023, IT Act 2000, and SPDI Rules 2011:
| Legal Basis | Description | Examples |
|---|---|---|
| Consent | Explicit consent obtained from the patient prior to data collection. | Medical history forms, online booking consent. |
| Medical Treatment (Necessity) | Processing necessary for diagnosis, treatment, and continuity of care. | Sharing reports with treating oncologist. |
| Legal Obligation | Compliance with Indian laws, court orders, regulatory requirements. | Responding to statutory body inquiries. |
| Legitimate Interest | Operational needs of the clinic to deliver healthcare services. | Appointment reminders, billing. |
| Vital Interest | Emergencies where processing is necessary to protect the patient's life. | Medical emergencies during consultation. |
5. How We Use Your Information
Oncomed Clinic uses patient information strictly for the following purposes:
5.1 Clinical & Medical Purposes
5.2 Administrative & Operational Purposes
5.3 Research & Education (Anonymised Only).
5.4 Legal & Regulatory Purposes
6. Disclosure & Sharing of Patient Information
Oncomed Clinic treats all patient information as strictly confidential. We will NOT sell, rent, or trade your personal information. Disclosure is limited to the following circumstances:
6.1 Within the Clinical Team
6.2 Third-Party Healthcare Providers
6.3 Insurance & Third-Party Payers
6.4 Legal & Statutory Disclosure
6.5 Authorised Persons
6.6 Service Providers & Data Processors
7. Patient Rights
Under the DPDP Act 2023 and applicable Indian law, patients have the following rights with respect to their personal and health data:
| Right | Description |
|---|---|
| Right to Access | You may request a copy of personal and health data held about you by the clinic. |
| Right to Correction | You may request correction of inaccurate, incomplete, or outdated personal information. |
| Right to Withdraw Consent | You may withdraw consent for non-essential processing at any time, without prejudice to prior processing. |
| Right to Grievance Redressal | You may raise a complaint about data processing with the clinic's designated Privacy Officer. |
| Right to Data Portability | You may request that your records be transferred to another treating physician or medical institution. |
| Right to Restrict Processing | You may request that we limit the use of your data in specific circumstances. |
| Right to be Informed | You have the right to be informed about what data we collect, why, and how it is used. |
8. Cookies & Website Privacy
The Oncomed Clinic website (www.oncomedclinic.com) may use cookies or similar tracking technologies to improve user experience. By using our website, you consent to the use of cookies in accordance with this Policy.
Patients may disable cookies through their browser settings; however, this may affect the functionality of the online appointment booking system.
9. Cross-Border Data Transfer
Oncomed Clinic primarily stores and processes patient data within the territory of India. In the event that any data is transferred outside India (e.g., through cloud-based service providers with international servers), such transfer will be carried out only:
10. Special Categories of Data
Given the nature of oncology care, Oncomed Clinic routinely handles special categories of particularly sensitive data, including:
Such data is processed with the highest level of care and confidentiality. Access is limited exclusively to clinicians with a direct role in the patient's care.
11. Children's Privacy
Oncomed Clinic recognises the need for special protection of data relating to children (persons below 18 years of age). We will:
12. Grievance Redressal
Oncomed Clinic has designated a Privacy Officer responsible for addressing any concerns or complaints regarding the handling of patient data.
Privacy Officer — Oncomed Clinic:
Dr. Randeep Singh / Dr. Satinder Kaur
X-10 Haus Khas, New Delhi – 110016
Phone: +91 88601 03234
Email: Oncomedclinics@gmail.com
Response Time: Within 30 days of receipt of complaint.
If the patient is dissatisfied with the response from the clinic's Privacy Officer, they may escalate the matter to the Data Protection Board of India (upon its formal establishment under the DPDP Act 2023) or approach the relevant courts or consumer forums under applicable Indian law.
13. Amendments to This Policy
Oncomed Clinic reserves the right to update or amend this Privacy Policy at any time. Any material changes will be:
Patients are encouraged to review this Policy periodically. Continued use of the clinic's services after any amendment constitutes acceptance of the revised Policy.
14. Governing Law & Jurisdiction
This Privacy Policy is governed by the laws of the Republic of India. Any dispute arising under or in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts located in New Delhi, India.
CLINIC DECLARATION
Oncomed Clinic is committed to maintaining the highest standards of patient confidentiality and data protection. We Never Lose Hope — and we never lose sight of your right to privacy.
Issued by: Oncomed Clinic | X-10 Haus Khas, New Delhi – 110016
www.oncomedclinic.com | +91 88601 03234 | Oncomedclinics@gmail.com