Patient Privacy Statement

Medifalcon Diagnostics, a unit of Medifalcon India Pvt. Ltd. ("Medifalcon Diagnostics", "Company", "we", "our", or "us"), is committed to safeguarding the privacy, dignity, confidentiality, and security of every patient who entrusts us with their personal and health information. As a healthcare service provider engaged in pathology, laboratory medicine, preventive health check-ups, diagnostic investigations, home sample collection, corporate wellness programmes, and allied healthcare services, we recognise that medical information is among the most sensitive categories of personal data and therefore deserves the highest standards of protection.

This Patient Privacy Statement ("Privacy Statement") describes the manner in which Medifalcon Diagnostics collects, receives, stores, processes, uses, shares, retains, and protects the personal information and medical information of patients who avail themselves of our services through our diagnostic centres, collection centres, mobile collection services, websites, mobile applications, patient portals, digital communication platforms, or any other facilities operated by or on behalf of Medifalcon Diagnostics.

For the purpose of this Privacy Statement, the expressions "you", "your", or "patient" shall include any individual receiving services from Medifalcon Diagnostics, as well as any parent, guardian, caregiver, authorised representative, legal heir, or any other person lawfully acting on behalf of the patient wherever applicable.

By registering with Medifalcon Diagnostics, visiting any of our facilities, scheduling an appointment, requesting home sample collection, accessing our digital services, submitting medical samples for investigation, or otherwise availing any service provided by us, you acknowledge that you have read and understood this Privacy Statement and consent to the collection and processing of your information in accordance with the provisions contained herein and the applicable laws of India.

22. Scope of this Privacy Statement

This Privacy Statement applies to every patient, visitor, customer, corporate client, authorised representative, healthcare professional, or any other individual whose information is collected by Medifalcon Diagnostics in connection with the services provided by us.

The Privacy Statement governs all information collected through physical registration forms, laboratory requisition forms, referral forms, websites, online portals, mobile applications, customer care services, home collection requests, email communications, telephonic interactions, social media communications, digital payment platforms, and any other lawful mode through which information is provided to Medifalcon Diagnostics.

This Privacy Statement shall also apply to information collected through our affiliated laboratories, authorised collection centres, franchise partners, logistics partners, technology service providers, and other service providers acting on our behalf under appropriate contractual and confidentiality obligations.

33. Information We Collect

In order to provide accurate diagnostic services and maintain appropriate standards of patient care, Medifalcon Diagnostics may collect various categories of information relating to you:

44. Sensitive Personal Information

Certain categories of information constitute sensitive personal information due to their intimate nature, including medical history, laboratory reports, pathology findings, prescriptions, diagnostic images, genetic data, biometric info, reproductive health details, HIV status, communicable disease status, and insurance records.

Medifalcon Diagnostics acknowledges the confidential nature of such information and undertakes to process it only for legitimate healthcare, operational, legal, regulatory, scientific, or public health purposes as permitted under applicable law.

55. Purpose of Collection and Processing of Information

Your information is collected and processed for the following primary healthcare and operational purposes:

• Patient registration & identity verification
• Sample collection & laboratory testing
• Report generation & critical value communication
• Coordination with referring physicians
• Quality assurance, audits & accreditation
• Billing, insurance claims & reimbursement

66. Consent for Collection and Processing of Information

By registering, scheduling appointments, or availing services from Medifalcon Diagnostics, you voluntarily consent to the collection, storage, processing, use, disclosure, and retention of your personal information.

Withdrawal of Consent: Consent may be withdrawn at any time by submitting a written request to our Grievance Officer. However, withdrawal shall not affect prior processing and may prevent us from continuing certain healthcare services where information is essential.

77. Disclosure and Sharing of Information

Medifalcon Diagnostics considers patient confidentiality to be a fundamental obligation. Personal and medical information is never sold, rented, traded, or disclosed for commercial gain.

Information may be shared only under legitimate healthcare or legal requirements:

• Referring medical practitioners and treating hospital specialists directly involved in your care.
• Specialised partner laboratories for complex assays under strict confidentiality agreements.
• Insurance companies and TPAs for authorized claim processing.
• IT, cloud hosting, courier, and logistics service providers bound by contractual data protection obligations.
• Judicial, statutory, or regulatory authorities pursuant to lawful orders or public health mandates.

88. Use of De-identified and Anonymised Information

We may convert patient records into anonymised or de-identified datasets for scientific research, quality improvement, development of AI diagnostic tools, disease trend analysis, and academic publications, provided no individual patient can be identified.

99. Access to Medical Records

Patients or their authorized representatives are entitled to obtain copies of laboratory reports and medical records upon written request and identity verification, within reasonable administrative timelines.

1010. Correction and Updating of Information

Patients may request corrections to inaccurate personal details. Historical medical records, clinical findings, or pathologist observations that accurately reflected clinical findings at examination time cannot be altered retroactively.

1111. Retention of Information

Information is retained for statutory periods mandated under Indian healthcare laws, quality accreditation standards, and legal compliance requirements, after which it is securely destroyed or permanently anonymised.

1212. Security of Information

Medifalcon Diagnostics deploys physical access controls, password authentication, role-based access restrictions, firewall protections, anti-malware systems, encrypted communications, and secure server backups.

1919. Grievance Redressal Officer