Privacy Policy

1. Who we are

This policy applies to Oncora Superspeciality Hospital & Research Centre (“Oncora Hospital”, “we”, “us”), located at N-2, Model Town, Phase-1st, Sri Ganganagar (Rajasthan) — 335001, India, and to the Oncora Care Android mobile application (“the App”) connected to our services at oncorasuperspaciality.com.

2. What this policy covers

It explains how we handle personal information when you:

• Book appointments on our website or through the App
• Sign in to the App as a patient (email OTP), staff/owner, or doctor
• View or upload medical documents (prescriptions, lab reports, OPD slips) through hospital systems
• Contact us by phone, WhatsApp, or email

3. Information we collect

Depending on how you use our services, we may collect:

• Identity & contact: name, mobile number, email address
• Appointment details: doctor, department, date, time slot, symptoms or notes, consultation type (online/in-person), payment status
• Patient records: patient code, linked appointments, medical reports, prescriptions, OPD slip data
• Account credentials: staff/owner username (passwords are stored securely hashed; we do not store plain-text passwords)
• Doctor app accounts: doctor name, username (for hospital-issued app login)
• Technical: IP address and basic server logs when you use the App API (for security and troubleshooting)

Payment card or UPI details for online consultation fees are processed by Razorpay on our website; we do not store full card numbers on our servers.

4. How we use your information

We use data only for legitimate hospital operations, including:

• Scheduling and managing appointments
• Providing prescriptions, reports, and OPD documents to patients and clinical staff
• Verifying patient identity (email OTP) for the patient App
• Internal administration, billing support, and quality of care
• Contacting you about your bookings or care, when needed
• Protecting our systems from fraud or misuse

We do not sell your personal or health-related information to third parties for marketing.

5. Who can access information

• Patients see their own appointments, prescriptions, reports, and OPD slips in the App.
• Authorised hospital staff and owners manage patient records and uploads in the admin panel and App.
• Doctors see information only for patients on their own appointment schedule (via the doctor App).
• Service providers (e.g. web hosting, email/SMS if used for OTP, Razorpay for payments) process data only to provide their service to us.

6. Storage & security

Data is stored on secure servers used by Oncora Hospital. Communication between the App and our servers uses HTTPS (encryption in transit). Access to medical files and admin functions is protected by login and role-based permissions.

No method of transmission or storage is 100% secure; we work to maintain reasonable safeguards appropriate for a healthcare provider.

7. How long we keep data

We retain patient and appointment records as needed for medical care, legal compliance, and hospital administration. You may contact us to ask about correction or deletion where applicable law allows; some medical records must be kept for statutory periods.

8. Your choices & rights

You may:

• Update contact details through reception or Patient Corner (admin)
• Request information about data we hold about you
• Ask us to correct inaccurate information
• Stop using the App at any time (uninstall the application)

For patient App login, you must use the email address registered with the hospital. If your email is not on file, book an appointment on the website first or contact reception.

9. Children

The App is intended for hospital patients and staff, not as a standalone children’s service. Where minors receive care, information is handled through parents/guardians and hospital records as per standard medical practice.

10. Third-party links

Our website may link to external services (e.g. payment, WhatsApp). Their privacy practices are governed by their own policies. We encourage you to review them when you leave our site.

11. Changes to this policy

We may update this page from time to time. The “Last updated” date at the top will change. Continued use of the App after updates means you accept the revised policy.