1Information recorded automatically

Like every website, our host records limited technical information each time a page is served. It is collected in aggregate and is not used to identify you personally:

• IP address of the connecting network
• Browser type and version, operating system, device type
• Date and time of the visit, and the pages viewed
• The website or search term that brought you here

We use this only to understand which pages and specialities are useful to visitors, to detect abuse, and to improve the site. We do not attempt to link it to a named individual, and we never sell it.

2Information you give us

bawahospital.com offers two ways to reach us, and they behave differently. This matters, so we set it out plainly.

The enquiry form asks for:

This information is used only to respond to the enquiry you submitted and to arrange your appointment. It is not used for anything else without asking you first.

3Health information

Under Indian law, information about your physical or mental health and your medical records is sensitive personal data. Where you choose to describe a health concern in the enquiry form, we treat it accordingly:

• Access is limited to the front-desk and clinical staff who need it to respond to you
• It is never used for advertising, audience targeting or profiling
• It is never sold, rented, or shared with data brokers or marketing agencies
• It is not disclosed to any third party except as described in section 5

4Cookies, analytics and embedded content

A cookie is a small file placed on your device so a website can remember your session. The cookies and third-party content on bawahospital.com fall into these groups:

Analytics and advertising tools record events such as "an enquiry was submitted for Orthopedics". They never receive your name, mobile number, email address, or any description of your medical concern.

Two parts of this website load content directly from Google, which means Google receives your IP address when the page opens:

• the map on our contact section, embedded from Google Maps
• the typefaces used across the site, served by Google Fonts

We do not control what Google does with that request; it is governed by Google's own privacy policy. Our pages also link out to hernia.institute and to our social media profiles — once you follow such a link, this policy no longer applies.

You can block or delete cookies at any time in your browser settings. Refusing analytics and advertising cookies will not prevent you from using the site or sending an enquiry.

5Who your information is shared with

We do not sell your personal information, and we do not share it with third parties for their own marketing. It is disclosed only in these situations:

• Our own doctors and staff — the consultant's team and front-desk staff handling your enquiry
• Service providers acting on our instructions — our website host, our email provider and our telephony provider, who process the data only to deliver that service and may not use it for anything else
• Diagnostic partners — only where an investigation you have requested or consented to must be performed externally
• Insurers or TPAs — only where you are making a cashless or reimbursement claim and have authorised it
• Legal and regulatory requirements — where disclosure is required by law, court order or a lawful request from a statutory authority, including mandatory disease notification and medico-legal reporting
• Medical emergency — where disclosure is necessary to protect your life or the life of another person

6How we contact you

By submitting the enquiry form and ticking the consent box, you agree that Bawa Hospital may contact you by telephone call, SMS, WhatsApp and email about your enquiry — including where your number is registered under DND (Do Not Disturb) or NDNC. The exact wording you agreed to, along with the date and time, is stored with your enquiry.

Please note that ordinary email and messaging are not fully secure and can be intercepted in transit. We keep such messages brief and avoid including clinical detail in them.

You can withdraw this consent at any time by writing to info@bawahospital.com or telling our staff, and we will stop contacting you about that enquiry. Withdrawal does not affect communications we are legally obliged to make, or messages about an appointment you have already booked.

7How long we keep it

Once a retention period ends, records are securely deleted or destroyed.

8How we protect your information

• The website is served over an encrypted HTTPS connection
• Enquiry data is accessible only to authorised staff, on a need-to-know basis
• Physical records are held in restricted-access areas of the hospital
• Staff are bound by confidentiality obligations as a condition of employment
• Form submissions are rate-limited and bot-protected to prevent bulk harvesting

No method of transmission or storage is completely secure. We take reasonable and appropriate measures to protect your information, but we cannot guarantee absolute security.

9Your rights

You may contact us to:

• Ask what we hold — request confirmation of the personal data we process about you and who it has been shared with
• Correct it — have inaccurate or incomplete information corrected or updated
• Have it erased — request deletion, subject to records we are legally required to keep
• Withdraw consent — as easily as it was given, at any time
• Nominate someone — appoint another person to exercise these rights on your behalf in the event of your death or incapacity
• Raise a concern — tell us if you are unhappy with how your information has been handled

We will respond within 30 days. We may ask you to confirm your identity first, so that we do not disclose your information to someone else.

10Children's information

We provide paediatric and other services to children, but this website is not directed at children, and a person under 18 should not use the enquiry form themselves. An enquiry about a child must be submitted by a parent or legal guardian, who is treated as consenting on the child's behalf. We do not knowingly use a child's data for advertising or behavioural tracking. If you believe a child has sent us information directly, contact us and we will delete it.

11Links to other websites

bawahospital.com links to external sites — including hernia.institute, our social media profiles, mapping services and health information resources. Those sites operate under their own privacy policies, which we do not control. Once you leave our website this policy no longer applies, and we encourage you to read the privacy statement of any site you visit.

12Contact us

For any question about this policy, to exercise any of the rights in section 9, or to tell us about a concern:

13Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The revised version will appear on this page with a new "last updated" date. Where a change materially affects how we use information you have already given us, we will make reasonable efforts to tell you directly. Please review this page from time to time.

14Governing law

This policy is governed by the laws of India. Any dispute arising from it is subject to the exclusive jurisdiction of the courts at Ludhiana, Punjab.