Privacy Policy

HealthNest Clinic (“HealthNest”, “we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the HealthNest Clinic patient portal, book appointments, request lab tests, upload or receive prescriptions, participate in video consultations, or otherwise interact with our services (collectively, the “Service”).

By using the Service, you consent to the practices described in this Policy. If you do not agree, please refrain from using the Service.

• Identity information: full name, age, gender, date of birth, patient ID (HNC/YYMM/####), and family/dependent relationships.
• Contact information: mobile number, email address, and residential address.
• Clinical information: vitals, medical history, allergies, pregnancy details, prescriptions issued by our doctors, lab reports, and any other information voluntarily shared during appointments or video calls.
• Booking & billing information: appointment slots, video consult bookings, invoices, payment status (via Razorpay or the alternate gateway you opt into), and Terms & Conditions acceptance records with timestamp and version.
• Technical information: IP address, device type, browser, and cookies used to keep you signed in and improve usability.

• To provide medical consultation, prescription, and follow-up services.
• To confirm appointments, send reminders (SMS/email), and share prescriptions or bills securely.
• To process payments and issue receipts.
• To maintain your longitudinal health record within HealthNest.
• To improve our services, prevent misuse, and comply with legal obligations.

We share your information only in the following limited ways:

• With treating doctors and clinical staff of HealthNest Clinic strictly on a need-to-know basis for delivering care.
• With UPI payment service providers solely for displaying QR codes and resolving transactions you initiate.
• With communication providers (Twilio for SMS, Google/Gmail for email) to deliver alerts and copies of your documents.
• When required by law, including in response to a valid court order, subpoena, or lawful request by a public authority.

We do not sell your personal or health information to any third party for marketing.

The video call itself is not recorded by default. However, doctors may take structured clinical notes and store screenshots of shared reports in your HealthNest record. By joining a video call, you consent to this note-taking. Please do not record the call without the doctor’s permission.

The video is powered by Jitsi Meet or an alternate meeting platform (e.g., Google Meet) selected by the doctor. These platforms process only the media stream during the call and do not receive your clinical information from us.

Health records are retained for a minimum of 3 years from the date of last consultation, in line with Indian medical record-keeping guidelines. Bills and payment records are retained for as long as required under applicable tax laws. Non-essential data (such as web session cookies) is deleted or anonymised much sooner.

We use industry-standard measures to protect your information, including HTTPS for all traffic, hashed passwords, time-limited share-tokens for public prescription/bill links, and role-based access controls.

No method of transmission over the internet is 100% secure. In the unlikely event of a data breach affecting you, we will notify you and the appropriate authorities in accordance with applicable law.

• Access & portability — you may request a copy of your records at any time via the patient portal or by writing to us.
• Correction — you may correct inaccurate personal details from your profile settings.
• Erasure — you may request deletion of your account. Clinical records that must be retained under law will be anonymised rather than fully deleted.
• Withdraw consent — you may unsubscribe from non-essential communications at any time.

HealthNest Clinic serves patients of all ages. Consultations for minors under 18 years must be booked and attended by a parent, legal guardian, or Family-linked primary account holder. We do not knowingly collect information from minors without adult supervision.

We use a small number of first-party cookies and browser storage items to keep you signed in and remember your preferences. We do not use third-party advertising cookies.

We may update this Policy from time to time. Material changes will be communicated via email or on this page. Continued use of the Service after such updates constitutes your acceptance of the revised Policy.