Privacy Policy

ICA Healthcare Private Limited (“eMedHub”, “we”, “us”, or “our”) is committed to protecting the privacy and security of the personal and health information entrusted to us. This Privacy Policy describes how we collect, use, store, and protect your data when you use our hospital management software and related services.

1. Information We Collect

Personal Information

When you register for our services or request a demo, we may collect your name, email address, phone number, hospital/clinic name, city, and professional role.

Health Data

Our software processes patient health information on behalf of healthcare providers (our clients). This includes patient demographics, medical history, diagnoses, prescriptions, lab results, radiology images, billing records, and treatment plans. Healthcare providers are the data controllers for this information.

Usage Data

We automatically collect information about how you interact with our platform, including IP addresses, device information, browser type, pages visited, and feature usage patterns.

2. How We Use Your Information

• To provide, maintain, and improve our hospital management software
• To process and manage patient records as directed by healthcare providers
• To communicate with you about your account, updates, and support
• To send service notifications and product updates
• To analyze usage patterns and improve our services
• To comply with legal obligations and regulatory requirements
• To facilitate ABDM integration and health record sharing (with explicit consent)

3. Data Storage and Security

We implement industry-standard security measures to protect your data:

• AES-256 encryption for data at rest and TLS 1.3 for data in transit
• Role-based access controls with granular permissions
• Complete audit trails of all data access and modifications
• IP blacklisting and brute-force protection
• Regular security assessments and penetration testing
• Data hosted on SOC 2 compliant infrastructure within India
• Automated backups with point-in-time recovery

4. ABDM Compliance

eMedHub is verified under the Ayushman Bharat Digital Mission (ABDM). When processing ABHA-linked health records, we adhere to ABDM's consent framework. Health data is shared between providers only with the explicit, informed consent of the patient through the ABDM consent manager. Patients can revoke consent at any time.

5. Data Retention

Patient health records are retained for as long as required by the healthcare provider and applicable regulations. Indian medical record retention guidelines require a minimum of 3 years for outpatient records and 5 years for inpatient records. Account information is retained for the duration of the service agreement plus 1 year.

6. Third-Party Sharing

We do not sell your data. We may share data with:

• ABDM ecosystem partners (with patient consent) for health record exchange
• Payment processors (Cashfree, Razorpay) for billing transactions
• Cloud infrastructure providers (AWS) for hosting services
• Communication partners (WhatsApp, SMS) for patient notifications
• Law enforcement when required by valid legal process

7. Your Rights

You have the right to:

• Access your personal data held by us
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for data processing
• Receive your data in a portable format
• Lodge a complaint with the relevant data protection authority

8. Legal Compliance

This Privacy Policy complies with applicable Indian laws including:

• Information Technology Act, 2000 and IT Rules, 2011
• Digital Personal Data Protection Act, 2023 (DPDP Act)
• ABDM Health Data Management Policy
• Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a notice on our platform. Your continued use of the service after changes constitutes acceptance.

10. Contact Us

For any privacy-related questions or requests, contact us at:

ICA Healthcare Private Limited
4th Floor, Door No.3, Laas Rd, R.S. Puram
Coimbatore - 641002, Tamil Nadu, India
Email: info@emedhub.in
Phone: +91 9500468802