Privacy Policy
Last updated: 12 October 2026
Introduction
This Privacy Policy explains how MedGold Healthcare ("MedGold," "we," "us," or "our") collects, uses, shares, stores, secures, retains, and disposes of personal and health-related information when you access or use our website at https://medgoldhealthcare.com/ and the services we provide, including Hospital Pharmacy Audit, Healthcare Staffing, Nursing Training, and Patient Feedback System Integration (collectively, the "Services").
We are committed to protecting personal information, including Personal Data, Personally Identifiable Information (PII), and Protected Health Information (PHI), and we implement appropriate administrative, technical, and physical safeguards supported by periodic reviews and continuous improvement.
This Policy is published in compliance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), the Information Technology Act, 2000 and associated rules, and other applicable healthcare and privacy regulations as amended from time to time. Where our Services involve U.S. persons or U.S.-linked contractual obligations, we also align our practices with HIPAA-related healthcare privacy and security principles.
By accessing our website or using our Services, you acknowledge that you have read and understood this Privacy Policy. Where required by law, we will obtain your free, informed, specific, and unambiguous consent before processing your personal data.
1. Definitions
For the purposes of this Privacy Policy:
- "Data Principal": means the individual to whom the personal data relates, including patients, healthcare professionals, trainees, employees, candidates, and website visitors.
- "Data Fiduciary": means the entity that determines the purpose and means of processing personal data. MedGold Healthcare acts as a Data Fiduciary in relation to the personal data it collects through its website and Services.
- "Data Processor": means an entity that processes personal data on behalf of a Data Fiduciary. Third-party service providers engaged by MedGold may act as Data Processors.
- "Personal Data": means any data about an individual who is identifiable by or in relation to such data.
- "Protected Health Information" (PHI): means health-related information that identifies an individual, including medical history, prescriptions, diagnostic reports, and treatment records.
2. Scope of This Privacy Policy
This Privacy Policy applies to:
- Website Visitors: Individuals who visit https://medgoldhealthcare.com/.
- Patients and Healthcare Providers: Individuals and institutions whose data is processed in connection with our Hospital Pharmacy Audit and Patient Feedback System Integration services.
- Healthcare Professionals and Candidates: Nurses, pharmacists, and other healthcare personnel who engage with our Healthcare Staffing services or apply for placements.
- Trainees: Individuals enrolled in or applying for our Nursing Training programs.
- Business Partners and Clients: Hospitals, clinics, and organizations that engage MedGold for any of the Services.
3. Information We Collect
We collect only information that is necessary for legitimate healthcare delivery, business operations, and legal or regulatory purposes. The categories of information we may collect include:
3.1 Personal Identification Information
- Name, contact details, address, gender, date of birth, and photographs
- Government-issued identifiers such as Aadhaar, PAN, passport, or voter ID, where legally required
- Emergency contact details
3.2 Health and Medical Information (PHI)
- Medical history, prescriptions, lab reports, diagnostic data, and consultation notes
- Treatment records and pharmacy-related data (in connection with Hospital Pharmacy Audit services)
- Patient feedback and complaint submissions, including supporting documents and correspondence
3.3 Employment and Professional Information
- Employment details, qualifications, licenses, certifications, and professional registration numbers
- Payroll, benefits, performance, and training information (where applicable)
- Placement history and compliance records for healthcare staffing candidates
3.4 Training and Educational Information
- Academic records, training completion certificates, and assessment results for Nursing Training participants
- Clinical training logs and competency evaluation records
3.5 Technical and Usage Information
- Log data generated through use of our website, applications, systems, devices, and security monitoring tools
- IP address, browser type, operating system, and pages visited
- Cookies and similar tracking technologies
4. How We Use Your Information
We process personal data and PHI for legitimate and lawful purposes, including:
- Service Delivery: Providing Hospital Pharmacy Audit services, including evaluating pharmacy operations, medication management, and compliance with hospital protocols.
- Healthcare Staffing: Recruiting, screening, and placing qualified healthcare professionals, and managing workforce administration.
- Nursing Training: Delivering training programs, assessing competencies, and maintaining training records.
- Patient Feedback System Integration: Collecting, processing, and analyzing patient feedback to improve healthcare quality and patient experience.
- Communication: Responding to inquiries, providing updates, and managing client and candidate relationships.
- Compliance: Meeting legal, regulatory, insurance, and health and safety obligations.
- IT Operations and Security: Managing cybersecurity, access control, monitoring, audit logging, and business continuity.
Personal data is used only for the purposes for which it is collected, unless otherwise permitted or required by law.
5. Legal Basis for Processing
Under the DPDP Act, consent is the default ground for processing personal data, including health data. We obtain consent that is free, specific, informed, unconditional, unambiguous, and given by a clear affirmative action.
We may also process personal data without consent where permitted or required by law, including for:
- Compliance with legal obligations
- Medical emergency or public health response
- Employment-related purposes (where you are our employee or contractor)
- Court orders or statutory reporting requirements
7. Data Security
We implement administrative, technical, and physical safeguards to protect personal data and PHI from unauthorized access, disclosure, alteration, loss, or destruction. These safeguards include:
- Encryption of data at rest and in transit
- Access controls based on role and minimum necessary principles
- Security monitoring and audit logging
- Employee training on privacy and security practices
- Incident response procedures for detecting, reporting, and mitigating data breaches
We conduct periodic reviews and risk assessments to ensure the effectiveness of our security measures.
8. Data Retention and Deletion
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law, regulatory obligations, or contractual commitments. When the purpose of processing has been fulfilled and retention is no longer necessary, we securely erase or anonymize the data.
Retention periods vary depending on the type of data and the service:
- Pharmacy Audit Records: Retained for the duration of the audit engagement and for a period thereafter as required by healthcare regulations.
- Staffing and Employment Records: Retained for the duration of employment or placement and for statutory limitation periods.
- Nursing Training Records: Retained for the duration of the training program and for a reasonable period thereafter for certification and verification purposes.
- Patient Feedback Data: Retained in accordance with healthcare quality monitoring requirements; personal identifiers may be anonymized where appropriate.
10. Your Rights
Under the DPDP Act, you have the following rights in relation to your personal data:
- Right to Access: Request a summary of the personal data we process about you and the identities of Data Fiduciaries with whom it has been shared.
- Right to Correction, Completion, and Updating: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of personal data where retention is no longer necessary for the purpose for which it was collected.
- Right to Grievance Redressal: Raise complaints regarding the processing of your personal data.
- Right to Withdraw Consent: Withdraw your consent at any time, where processing is based on consent. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us using the details provided in Section 14.
11. Children's Privacy
Our Services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete such data promptly.
12. International Data Transfers
Your personal data may be processed and stored in India or in other jurisdictions where our service providers operate. Where we transfer personal data outside India, we ensure that appropriate safeguards are in place, including contractual protections and compliance with applicable legal requirements.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The updated Policy will be posted on this page with a revised "Last Updated" date. We encourage you to review this Policy periodically.
14. Grievance Redressal and Contact Information
If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, please contact our Grievance Officer / Data Protection Officer:
- Name: Sundaramoorthy
- Phone: +91 91509 37804
- Email: sundharmedgold@gmail.com
- Address: Santosh Nagar, Janaki Raman Nagar, Teacher Colony, Kolathur, Chennai, Tamil Nadu 600099