DOCTOR APPLICATION PRIVACY NOTICE

Last Updated 4/11/2024 

This privacy notice ("Privacy Notice") outlines how Aster DM Healthcare, (hereinafter referred to as "we," "us," or "our") collects, uses, discloses, transfers, and otherwise processes personal data collected from affiliated doctors / healthcare professionals (hereinafter referred to as "you" and "your") through the Aster Health doctor application. This Privacy Notice explains how we process personal data collected from you in accordance with applicable data protection law. 

The Nature and Purposes of Personal Data Collected 

We will require the following personal information (information about you or identifiable in relation to you) for the following specified purposes: 

1. Professional Information: Name, medical qualifications, specialization, registration number, clinic/hospital affiliation, and years of experience for the following purposes:
    
   1. To create and maintain professional profiles on the Aster Health doctor application.
   2. To facilitate patient matching based on specialization and expertise.
   3. To comply with medical and regulatory requirements related to doctors and healthcare professionals.
       
2. Contact information: We collect your email address, phone number, and clinic/hospital address for the following purposes: 
    
   1. To create your account and for authentication of your account at the time of login.
   2. To communicate with healthcare professionals regarding appointments, consultations, or service updates.
   3. To facilitate patient communication and appointment scheduling.
   4. To send notifications about application updates, new features, and regulatory changes.
       
3. Consultation Information: We collect records of consultations undertaken with patients, including audio/video recordings (where applicable), notes on diagnosis, treatment plans, prescriptions, and other consultation-related information for the following purposes: 
    
   1. To enable doctors to manage patient records and track medical histories. 
   2. To maintain compliance with medical record-keeping requirements. 
   3. To provide patients with post-consultation follow-ups, treatment recommendations, and prescriptions.
       
4. Professional feedback and reviews: We collect information relating to you provided by other individuals such as patients and caregivers on their behalf to gain insights from patients seeking healthcare services for the following purposes: 
    
   1. To support healthcare professionals in improving their services based on patient feedback.
   2. To maintain compliance with medical record-keeping requirements. 
   3. To provide patients with post-consultation follow-ups, treatment recommendations, and prescriptions.
   4. Feedback or reviews left by patients regarding the healthcare professional’s services.
       
5. Operational Data: We collect cookies, usage patterns, session logs, usage data including but not limited to location, device type, operating system, browser, date-time, and context usage and other technical data related to the use of the Aster Health doctor application, for the following purposes:
    
   1. To enhance app functionality. 
   2. To improve service performance and usability. 
   3. To monitor app performance and troubleshoot technical issues.

Device Permissions 

We ask for the following device permissions on the Aster Health doctor application while onboarding:

1. SMS: We require access to your SMS messages to provide the following features: (a) Receive and Read SMS: To automatically detect and process OTPs for secure logins; and (b) Send SMS: To send appointment reminders and other important notifications to your contacts.
    
2. Microphone and Camera: We require access to your microphone to provide the following features: (a) Voice Commands: To allow you to interact with the app using voice commands for a hands-free experience; and (b) Audio/Video Calls: To facilitate audio and video consultations with patients.
    
3. Notification: We require permission to send notifications to provide the following features: (a) Appointment Reminders: To receive timely reminders; and (b) App Updates and Promotions: To stay informed about new features, updates, and special offers.
    
4. Files and Images: We require access to files and images to facilitate upload of documents or images for sharing them on Aster Health.
    
5. SSID/BSSID: We require this access for checking the status and strength of Wi-Fi signals and to determine the best possible way to connect for your services.
    
6. GPS location: We require access to GPS location for fetching your address to identify nearby Aster healthcare facilities and personalize availability of services.

Sources of Collection of Personal Data

We collect personal data from the following sources:

1. From users who register on the Aster Health doctor application; and
    
2. From Aster “Hospital Information System” and Aster website for the doctors who choose to register with the Aster Health doctor application.

Your Responsibilities 

You represent that the personal data provided during the registration process is true, accurate, current, and complete. You are required to periodically review and update your registration data to ensure that it is always accurate and correct. We will rely on the last updated version of the personal data as updated by you. While providing your personal data, you agree to ensure not to impersonate another person, and to furnish only such information as is authentic.

Sharing of Personal Data with Third Parties 

1. We may disclose any information to government or law enforcement officials if we believe doing so is required to comply with law enforcement and legal process; to prevent or stop any illegal, unethical, or legally prohibited activity; and to protect your, our or others’ rights and safety.
    
2. We may disclose your personal data on your own request.
    
3. We may disclose your personal information to any third-party contractors, who work on behalf of or with Aster, (a) to provide or improve our services; (b) to communicate with you; or (c) to maintain the Aster Health doctor application.
    
4. We may share anonymised, aggregated data with advertisers, research firms, and other partners.

Security Practices and Procedures

We implement technical and organizational safeguards to protect your data, storing it on secure servers. Data collected under this Privacy Notice is stored only in the servers of our technology vendor. Please note that while we take steps to protect your personal data, no data transmission over the internet is entirely secure, and there is always possibility of risk. 

Your Rights 

1. Right to Withdraw Consent: You have the right to withdraw your consent at any time in the manner provided in the application. Please note that the withdrawal of consent may impact our ability to provide certain services, and we will inform you of any consequences upon withdrawal. 
    
2. Right to Access: Subject to certain conditions, and where we have relied on consent to process your personal data, or where you have voluntarily provided your personal data for a specified purpose, you have the right to obtain information from us as below, as well as such information as may be further prescribed under applicable law: 
    
   1. Summary of personal data and processing activities: You have the right to receive a summary of the personal data that is being processed by us, along with details regarding the processing activities undertaken by us with respect to such personal data.
       
   2. Identities of other data fiduciaries and data processors: You have the right to know the identities of all other Data Fiduciaries and Data Processors with whom your personal data has been shared by us. This includes a description of the personal data shared with these entities. 
       
   3. Right to Correction, Completion and Updation: Subject to certain conditions, you have the right to correction, completion, and updating of your personal data for which you have previously given consent, or voluntarily provided your personal data for a specified purpose, in accordance with any requirement or procedure under any law for the time being in force. This includes the right to: 
       
      1. Correct any inaccurate or misleading personal data.
      2. Complete the incomplete personal data. 
      3. Update your personal data. 
          
3. Right to Erasure: Subject to certain conditions, you have the right to request the deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when you withdraw your consent. 
    
4. Right to nominate an individual for exercising rights: You have the right to nominate any other person to exercise the rights mentioned above in case of your death or incapacity.

Retention of Your Data

We will not retain your personal data for longer than is required for the purposes for which the information may lawfully be used or is otherwise required under any other law for the time being in force. We may process anonymized and aggregated data/ information collected through the Aster Health doctor application, for purposes of evaluating healthcare outcomes, healthcare requirement patterns and to measure the effectiveness of services and content. 

Grievance Redressal / Contact Us 

Towards exercising your rights mentioned under the ‘Your Rights’ section and for grievance redressal/inquiries regarding this Privacy Notice, please reach out to our grievance officer as below: 

Name: Vineeth Sukumaran 

Email Address: [email protected] 

We will respond to your request within the timeframes and manner specified by applicable law.

Changes/ Updates to the Privacy Notice

Please note that this Privacy Notice may change from time to time as we continue to offer evolve our services. In the event of any changes in our Privacy Notice, the updated version will be posted here and take effect from the moment of posting. 

If there are any changes to the purposes for which you have provided your consent under this Privacy Notice, we will seek your consent for such change in the purposes of processing personal data under this Privacy Notice.