Privacy Policy & Patient Confidentiality

1. Introduction

Welcome to Nidaan Polyclinic ("we," "our," or "us"). We are committed to protecting the privacy and security of your personal and medical information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our healthcare services, primarily focused on serving the community in Northeast India.

We strictly adhere to the confidentiality and privacy guidelines set forth by the National Medical Commission (NMC) and the Medical Council of India (MCI), specifically the Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002. Furthermore, our practices comply with the Digital Personal Data Protection Act, 2023 (DPDP), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules).

2. Information We Collect

• Personal Information: Name, age, gender, address, phone number, email address, and government-issued ID (if required for registration).
• Sensitive Personal Data or Information (SPDI): Physical, physiological, and mental health conditions; medical records, diagnosis, and medical history; test results; and biometric information.
• Technical Data: IP address, browser type, operating system, and usage patterns when you interact with our digital platforms.

3. Medical Confidentiality & Use of Information

As per NMC/MCI ethical guidelines, all consultations, diagnoses, and medical records are maintained with the utmost confidentiality. We use the collected information solely for the following purposes:

• To provide accurate medical diagnosis, treatment, and healthcare services.
• To maintain electronic medical records (EMR) as mandated by clinical establishment standards.
• To schedule appointments and send vital healthcare reminders.
• To improve our services, website functionality, and patient experience.
• To comply with statutory legal and regulatory requirements in India.

4. Disclosure of Information (NMC Guidelines)

A registered medical practitioner shall not disclose the secrets of a patient that have been learnt in the exercise of their profession. Disclosure is only permitted under the following strict circumstances as per MCI guidelines (Chapter 7.14):

• Court of Law: Under explicit orders of a presiding judge in a court of law.
• Risk to Community: In circumstances where there is a serious and identified risk to a specific person and/or community.
• Notifiable Diseases: For reporting specific communicable or notifiable diseases to public health authorities as required by state laws in Assam and India.
• Healthcare Team: With internal doctors, nurses, and referred specialists directly involved in your treatment to ensure continuity of care.

5. Data Security

We implement robust physical, technical, and administrative security measures as mandated by the DPDP Act and IT Act to protect your Sensitive Personal Data from unauthorized access, misuse, alteration, or disclosure. Patient records are stored securely, and access is restricted only to authorized medical personnel.

6. Your Rights (Patient Autonomy)

You have the right to access, review, and request corrections to your medical records and personal data. Under the DPDP Act, you also possess the right to withdraw your consent for non-essential data processing, though this may limit our ability to provide optimal medical care.

7. Grievance Officer

In accordance with the DPDP Act, 2023, and the IT Act, 2000, privacy-related concerns or grievances can be addressed to our Grievance Officer:

8. Contact Us

If you have any questions about this Privacy Policy or our adherence to NMC/MCI guidelines, please contact us at:

Contact Support