Consent for Collection & Processing of Health Information

Last Updated: June 2026

Patient Consent for Collection, Use, Storage, Processing, and Disclosure of Health Information

This Consent for Collection & Processing of Health Information (“Consent”) explains how Sapra Multispeciality Hospital (“Hospital”, “We”, “Our”, or “Us”) collects, uses, stores, processes, shares, and protects personal health information and other sensitive personal data provided by patients, caregivers, authorized representatives, and users of our healthcare services.

By accessing our website, registering as a patient, booking appointments, participating in telemedicine consultations, submitting medical information, making online payments, or receiving healthcare services from Sapra Multispeciality Hospital, you acknowledge and provide your informed consent as described in this document.

1. Purpose of this Consent

The purpose of this Consent is to obtain your authorization for the collection, use, storage, processing, transmission, disclosure, and management of your health-related information for healthcare, administrative, legal, and operational purposes.

Healthcare services cannot be effectively provided without the collection and processing of relevant health information.

2. Information We May Collect

The Hospital may collect the following categories of information:

Personal Information

Full Name
Date of Birth
Age
Gender
Mobile Number
Email Address
Residential Address
Emergency Contact Information
Identification Information
Insurance Details
TPA Information

Sensitive Personal Information and Health Information

The Hospital may collect and process:

Medical History
Current Medical Conditions
Past Medical Conditions
Allergies
Prescriptions
Medication History
Surgical History
Family Medical History
Laboratory Reports
Diagnostic Reports
Radiology Reports
Medical Images
Clinical Notes
Consultation Records
Hospitalization Records
Treatment Plans
Follow-Up Information
Vaccination Records
Telemedicine Consultation Information

Technical and Digital Information

When accessing our website or digital platforms, we may collect:

IP Address
Device Information
Browser Information
Login Records
Appointment Records
Telemedicine Usage Data
Website Usage Information
Cookies and Analytics Data

3. How Information is Collected

Health information may be collected through:

Patient Registration Forms
Online Appointment Forms
Telemedicine Consultations
Video Consultations
Contact Forms
Email Communications
WhatsApp Communications
Telephone Conversations
In-Person Consultations
Diagnostic Investigations
Medical Reports Submitted by Patients
Insurance and TPA Documentation
Healthcare Providers and Referring Doctors

4. Purpose of Collecting Health Information

Your information may be collected and processed for purposes including but not limited to:

Clinical Care

Medical Evaluation
Diagnosis
Treatment Planning
Prescribing Medication
Monitoring Health Conditions
Follow-Up Care
Emergency Care

Hospital Operations

Patient Registration
Appointment Scheduling
Medical Record Management
Clinical Documentation
Care Coordination
Hospital Administration

Telemedicine Services

Video Consultations
Online Medical Advice
Remote Follow-Up Care
Digital Prescription Services
Medical Record Review

Diagnostic and Laboratory Services

Test Processing
Report Generation
Medical Imaging
Clinical Assessments

Billing and Payments

Consultation Billing
Insurance Claims
TPA Processing
Payment Verification
Financial Auditing

Legal and Regulatory Compliance

Medical Record Retention
Government Reporting Requirements
Healthcare Compliance Obligations
Court Orders and Legal Proceedings
Public Health Reporting

5. Consent for Telemedicine Services

By participating in telemedicine consultations, you expressly consent to:

Collection of health information through electronic means.
Processing of consultation-related information.
Storage of telemedicine consultation records.
Review of uploaded reports and medical documents.
Communication through approved digital platforms.

Telemedicine services are subject to the Hospital’s Telemedicine Consent Policy.

6. Consent for Medical Record Maintenance

You authorize the Hospital to create, maintain, update, and retain medical records relating to your healthcare services.

Medical records may include:

Consultation Notes
Diagnostic Reports
Laboratory Results
Prescriptions
Treatment Records
Surgical Records
Discharge Summaries
Telemedicine Records

These records may be retained in accordance with applicable legal and regulatory requirements.

7. Sharing of Health Information

The Hospital may disclose health information only when necessary and appropriate for legitimate purposes.

Information may be shared with:

Authorized Healthcare Professionals

Doctors
Consultants
Specialists
Nurses
Allied Healthcare Providers

for treatment and continuity of care.

Insurance Companies and TPAs

Where necessary for:

Claims Processing
Insurance Verification
Reimbursement Procedures
Authorization Requests

Diagnostic and Laboratory Service Providers

For conducting investigations, tests, imaging, and diagnostic services.

Government Authorities

Where disclosure is required by:

Applicable Law
Court Orders
Regulatory Authorities
Public Health Requirements

Authorized Representatives

Information may be shared with family members, guardians, or authorized representatives where consent has been provided or where permitted by law.

8. Data Storage and Security

The Hospital takes reasonable administrative, technical, and physical measures to safeguard health information.

Security measures may include:

Access Controls
Password Protection
User Authentication
Data Encryption (where applicable)
Secure Servers
System Monitoring
Staff Confidentiality Obligations

Despite reasonable safeguards, no electronic system can guarantee absolute security.

9. Retention of Health Information

Health information and medical records may be retained for periods required by:

Applicable Laws
Healthcare Regulations
Hospital Policies
Insurance Requirements
Medical Record Retention Standards

Records may continue to be retained after treatment has ended.

10. Patient Rights Regarding Health Information

Subject to applicable laws and hospital policies, patients may request:

Access to their health records
Correction of inaccurate information
Updating of personal information
Clarification regarding data processing activities

Certain requests may require verification of identity and supporting documentation.

11. Accuracy of Information

Patients are responsible for ensuring that information provided to the Hospital is:

Accurate
Complete
Current
Truthful

The Hospital shall not be responsible for decisions made based on incomplete or inaccurate information supplied by the patient.

12. Consent for Electronic Communication

You consent to receiving healthcare-related communications through:

Telephone Calls
SMS Messages
Email Communications
WhatsApp Messages
Patient Portals
Telemedicine Platforms

Such communications may include:

Appointment Confirmations
Appointment Reminders
Follow-Up Notifications
Diagnostic Updates
Prescription Information
Health Service Communications

13. Consent for Digital Storage and Processing

You acknowledge and agree that health information may be:

Stored electronically.
Processed through hospital information systems.
Managed through authorized healthcare software platforms.
Accessed by authorized personnel involved in your care.

Such processing shall be carried out only for legitimate healthcare and operational purposes.

14. Withdrawal of Consent

Patients may request withdrawal of consent for certain processing activities where legally permissible.

However, withdrawal of consent may impact the Hospital’s ability to:

Provide healthcare services.
Maintain medical records.
Process insurance claims.
Comply with legal obligations.

Certain information may continue to be retained where required by law.

15. Limitation of Liability

While the Hospital employs reasonable safeguards to protect health information, the Hospital shall not be liable for:

Unauthorized access beyond reasonable control.
Internet-related security incidents.
Cyberattacks despite reasonable safeguards.
Technical failures of third-party systems.
Events beyond the Hospital’s reasonable control.

16. Modifications to this Consent

Sapra Multispeciality Hospital reserves the right to amend, update, modify, or replace this Consent at any time.

Changes shall become effective immediately upon publication on the website.

Continued use of Hospital services constitutes acceptance of any revised version.

17. Governing Law

This Consent shall be governed by and interpreted in accordance with the laws of India.

Any disputes arising from this Consent shall be subject to the exclusive jurisdiction of the courts located in Hisar, Haryana, India.

18. Contact Information

For questions regarding the collection, processing, storage, disclosure, or protection of health information, please contact:

Sapra Multispeciality Hospital
Rajgarh Road, Sector 15A, Near Court Complex, Hisar, Haryana, India

Phone: 01662-233230
Email: info@saprahospital.com
Website: saprahospital.com

Patient Consent Declaration

By registering as a patient, booking an appointment, participating in a telemedicine consultation, uploading medical records, submitting health information, making online payments, clicking “I Agree”, “Submit”, “Continue”, “Book Appointment”, or otherwise using any services offered by Sapra Multispeciality Hospital, I hereby provide my voluntary, informed, and explicit consent for the collection, use, storage, processing, maintenance, transmission, and disclosure of my personal and health information as described in this Consent for Collection & Processing of Health Information.