Effective Date: 08 June 2026
Infoforte Technologies Pvt. Ltd. ("Infoforte", "HEAL", "we", "our", or "us") is committed to protecting the privacy, confidentiality, and security of personal information and health data processed through the HEAL EMR & Digital Health Platform.
This Privacy Policy explains how we collect, use, store, share, protect, retain, and delete information when you access or use HEAL's web applications, mobile applications, APIs, and related services.
By using HEAL, you acknowledge that you have read and understood this Privacy Policy.
2. ScopeThis Privacy Policy applies to Patients, Healthcare providers, Hospitals and clinics, Administrative users, Employees and contractors, and Business partners using HEAL services.
3. Information We CollectDepending on the services used, we may collect the following information:
Personal Information
Full name, Date of birth, Gender, Address, Email address, Mobile number, Emergency contact information, and government-issued identifiers where required by law.
Healthcare Information
Medical history, Consultation records, Diagnoses, Prescriptions, Laboratory reports, Radiology and imaging reports, Vital signs and clinical observations, Allergies and immunization records, Treatment plans, and discharge summaries.
Account Information
Username, Password credentials (encrypted), User roles and permissions, and authentication information.
Billing and Insurance Information
Insurance details, Payment information, Invoices and billing records.
Technical Information
Device information, Browser information, IP addresses, Operating system details, Application usage information, Audit logs and security events.
HEAL may collect, process, store, and share health information necessary for healthcare delivery and healthcare operations.
Types of Health Data Collected
We may collect Medical records, Clinical notes, Prescriptions, Diagnostic reports, Laboratory results, Vital signs, Treatment history, Healthcare provider notes, Appointment and consultation information.
How Health Data Is Used
Health information may be used for Providing healthcare services, Clinical decision-making, Patient treatment and care coordination, Maintaining electronic medical records, Generating prescriptions and reports, Appointment scheduling and reminders, Healthcare operations and administration, Regulatory compliance, Consent-based information exchange, Security, fraud prevention, and auditing, and improving platform functionality and reliability.
Health information is not sold to third parties.
5. Legal Basis for ProcessingWe process information based on User consent, Healthcare service delivery requirements, Contractual obligations, Legal and regulatory requirements, Legitimate business and operational purposes, and protection of vital interests where applicable.
6. Information Sharing and DisclosureWe may share information only with authorized parties including:
Healthcare Providers
Doctors, Nurses, Hospitals, Clinics, Diagnostic laboratories, and pharmacies.
Service Providers
Authorized vendors providing Cloud hosting, Infrastructure management, Technical support, Security monitoring, and communication services.
Regulatory and Legal Authorities
Where required by law, regulation, court order, or governmental request.
Business Transfers
In connection with mergers, acquisitions, restructuring, or sale of assets, subject to applicable privacy protections.
We do not sell personal information or health data.
7. Data SecurityHEAL implements administrative, technical, and physical safeguards including Role-based access control, Multi-factor authentication, Encryption in transit using TLS, Encryption at rest where applicable, Audit logging, Security monitoring, Vulnerability assessments, Penetration testing, Secure backups, and disaster recovery procedures.
No system can guarantee absolute security; however, we take reasonable measures to protect information against unauthorized access, disclosure, alteration, or destruction.
8. Data RetentionHow Long We Retain Data
We retain personal information and healthcare records only for as long as necessary to Provide healthcare services, Maintain medical records, Fulfill contractual obligations, Meet legal and regulatory requirements, Resolve disputes, Enforce agreements, and protect against fraud and misuse.
Healthcare Record Retention
Medical records and related healthcare information may be retained for periods required by applicable healthcare laws, professional standards, contractual obligations, and regulatory requirements.
Audit and Security Logs
Audit logs, access records, and security logs may be retained for compliance, security, and operational purposes.
Backup Retention
Backup copies are retained according to established backup and disaster recovery schedules.
When retention is no longer required, information will be securely deleted, anonymized, or archived as permitted by law.
9. Data DeletionUser Deletion Requests
Users may request deletion of their personal information by contacting:
Email: info@infoforte.com
Processing of Deletion Requests
Upon receiving a valid request, we will review and process the request in accordance with applicable laws and regulatory requirements.
When Data Cannot Be Deleted Immediately
Certain information may need to be retained where required for Medical record retention obligations, Legal and regulatory compliance, Fraud prevention and security investigations, Dispute resolution, Contract enforcement, and public health obligations.
Deletion Methods
Where deletion is permitted, Data will be securely deleted from active systems, Data may be anonymized where appropriate, and backup copies will be removed according to backup retention schedules.
Subject to applicable laws, users may have the right to Access their information, Correct inaccurate information, Update personal details, Withdraw consent where applicable, Request deletion of information, Request information regarding data processing, and submit privacy-related complaints or grievances. Requests may be submitted using the contact information below.
11. International Data TransfersInformation may be processed or stored in jurisdictions where HEAL or its authorized service providers operate.
Where such transfers occur, appropriate contractual, organizational, and technical safeguards are implemented to protect personal information.
12. Children's PrivacyHEAL does not knowingly collect information directly from children except where healthcare services are provided through a parent, guardian, authorized representative, or healthcare organization.
13. Changes to this Privacy PolicyWe may update this Privacy Policy periodically.
Updated versions will be posted on our website and applications with a revised effective date.
Continued use of HEAL following publication of changes constitutes acceptance of the updated Privacy Policy.
14. Contact InformationPrivacy Officer
For privacy-related inquiries, access requests, correction requests, consent withdrawal requests, or deletion requests, please contact the Privacy Officer using the details above.