Privacy Policy

Last Updated: August 12, 2026

Introduction

Critical Care Unified ("CCU," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ccucare.com (the "Website") or use our healthcare services.

This policy complies with

  • The Digital Personal Data Protection Act, 2023 (DPDP Act)
  • Information Technology Act, 2000, and its amendments
  • Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
  • Health Insurance Portability and Accountability Act (HIPAA) standards for international patients
  • Applicable medical ethics and confidentiality obligations

Information We Collect

2.1 Personal Information

  • Identity Data: Name, date of birth, age, gender, photograph
  • Contact Data: Address, email address, telephone number
  • Emergency Contact: Names and contact details of family members or designated persons
  • Government IDs: Aadhaar number, PAN card, passport, driver's license (as applicable)

2.2 Sensitive Personal Health Information

  • Medical History: Previous and current medical conditions, diagnoses, allergies
  • Treatment Information: Medications, procedures, care plans, progress notes
  • Clinical Data: Vital signs, laboratory reports, imaging results, test outcomes
  • Mental Health Information: Psychological assessments and related treatment
  • Lifestyle Information: Diet, exercise, smoking/alcohol consumption
  • Genetic Information: When relevant to treatment

2.3 Financial Information

  • Insurance details and policy numbers
  • Payment information and billing records
  • Bank account details for refunds (processed securely)

2.4 Technical Information

  • IP address, browser type and version
  • Device information and operating system
  • Cookies and similar tracking technologies
  • Website usage data, pages visited, time spent
  • Location data (with your consent)

2.5 Communications

  • Correspondence via email, phone, or chat
  • Appointment requests and inquiries
  • Feedback, testimonials, and reviews
  • Complaints and grievance communications

How We Collect Information

We collect information through:

  • Direct Interactions: Forms submitted on the Website, phone calls, emails, in-person consultations
  • Automated Technologies: Cookies, web beacons, analytics tools
  • Healthcare Delivery: During service provision by our medical professionals
  • Third Parties: Hospitals, referring physicians, insurance companies (with your consent)
  • Medical Devices: IoT-enabled monitoring equipment used during care

Purpose of Data Collection

We use your information for:

4.1 Healthcare Service Delivery

  • Providing critical care at home and related medical services
  • Assessing patient eligibility and care requirements
  • Coordinating with healthcare professionals
  • Setting up ICU equipment and monitoring systems
  • Creating and managing treatment plans
  • Emergency medical interventions

4.2 Administrative Purposes

  • Scheduling appointments and service coordination
  • Billing, invoicing, and payment processing
  • Insurance claims processing and verification
  • Maintaining medical records and documentation
  • Complying with legal and regulatory requirements

4.3 Communication

  • Responding to inquiries and service requests
  • Sending appointment reminders and follow-ups
  • Providing health education and care instructions
  • Notifying about service updates or changes
  • Marketing communications (with opt-in consent)

4.4 Quality Improvement

  • Monitoring service quality and patient outcomes
  • Training and supervising healthcare staff
  • Conducting internal audits and accreditation processes
  • Research and analytics (using anonymized data)

4.5 Legal Compliance

  • Meeting healthcare regulatory obligations
  • Responding to legal processes (court orders, subpoenas)
  • Protecting against fraud and illegal activities
  • Defending legal claims

Legal Basis for Processing

We process your personal data based on:

  • Consent: You have explicitly consented to processing for specific purposes
  • Contract Performance: Processing is necessary to provide requested Services
  • Legal Obligation: Compliance with healthcare laws, tax regulations, and court orders
  • Vital Interests: Emergency medical situations requiring immediate intervention
  • Legitimate Interests: Business operations, fraud prevention, improving services (balanced against your rights)

Data Sharing and Disclosure

We may share your information with:

6.1 Healthcare Providers

  • Attending physicians, nurses, and medical specialists providing your care
  • Diagnostic laboratories and imaging centers
  • Hospitals and clinics for coordinated care
  • Pharmacies for medication management

6.2 Business Associates

  • Medical equipment suppliers and maintenance providers
  • IT service providers managing our systems securely
  • Payment processors and financial institutions
  • Insurance companies for claims processing

6.3 Legal and Regulatory Authorities

  • Government agencies when required by law
  • Medical councils and healthcare regulators
  • Law enforcement in case of legal investigations
  • Courts pursuant to legal orders

6.4 Third Parties with Consent

  • Family members designated by you
  • Legal guardians or power of attorney holders
  • Medical value travel coordinators (for international patients)

Important Notice

WE DO NOT SELL YOUR PERSONAL INFORMATION TO THIRD PARTIES.

Data Retention

We retain your information for:

  • Medical Records: As required by Indian Medical Council regulations (minimum 3-7 years, often longer)
  • Financial Records: 7 years as per Income Tax Act requirements
  • Legal Claims: Duration of limitation periods under applicable laws
  • Operational Data: Until no longer needed for business purposes

Your Rights

Under the DPDP Act, 2023 and applicable laws, you have the right to:

8.1 Access and Portability

  • Request access to your personal and medical information
  • Obtain copies of your medical records
  • Receive data in a structured, commonly used format

8.2 Correction and Completion

  • Update incorrect or incomplete personal information
  • Request amendments to medical records

8.3 Erasure and Restriction

  • Request deletion of personal data
  • Restrict processing in certain circumstances

8.4 Objection and Withdrawal

  • Object to processing based on legitimate interests
  • Withdraw consent for marketing communications
  • Opt-out of non-essential data processing

8.5 Complaints

  • Lodge complaints with our Data Protection Officer
  • File complaints with the Data Protection Board of India

Data Security

We implement robust security measures:

9.1 Technical Safeguards

  • End-to-end encryption for data transmission
  • Secure servers with firewalls and intrusion detection
  • Regular security audits and vulnerability assessments
  • Access controls and authentication protocols
  • Encrypted storage for sensitive health information
  • Secure backup and disaster recovery systems

9.2 Organizational Safeguards

  • Staff training on data protection and confidentiality
  • Confidentiality agreements with all personnel
  • Role-based access controls (minimum necessary principle)
  • Regular compliance monitoring and audits
  • Incident response and breach notification procedures

9.3 Physical Safeguards

  • Secure facilities with restricted access
  • Safe storage of physical medical records
  • Secure disposal of documents containing personal information

Cookies and Tracking

Our Website uses cookies to:

  • Enable essential Website functionality
  • Remember your preferences and settings
  • Analyze Website traffic and user behavior
  • Improve user experience

Types of Cookies

  • Essential Cookies: Necessary for Website operation (cannot be disabled)
  • Functional Cookies: Remember preferences (can be disabled)
  • Analytics Cookies: Google Analytics and similar tools (can be disabled)
  • Marketing Cookies: Advertising and retargeting (can be disabled)

You can manage cookie preferences through your browser settings. Disabling cookies may affect Website functionality.

International Data Transfers

For international patients using our Medical Value Travel services:

  • Data may be transferred internationally as necessary for care coordination
  • We ensure adequate safeguards through contractual clauses and security measures
  • Transfers comply with DPDP Act requirements and international standards

Children's Privacy

While we provide pediatric care, we do not knowingly collect information from children under 18 through the Website without parental consent. Parents/guardians provide information on behalf of minor patients.

Third-Party Websites

Our Website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing information.

Changes to Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be notified via email or prominent Website notice. Continued use after changes constitutes acceptance.

Data Protection Officer

For privacy-related inquiries, requests, or complaints:

Data Protection Officer

Critical Care Unified (CCU)

G-43, 4th Floor, Noida, 201301

Email: info@ccucare.com

Phone: +91 9540645645

We will respond to requests within 30 days as required by law.

Grievance Redressal

If you have concerns about data processing:

  • Contact our Data Protection Officer using details above
  • We will investigate and respond within the statutory timeframe
  • If unsatisfied, you may file a complaint with the Data Protection Board of India

Consent

By using our Website or Services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. For sensitive health information, we obtain explicit written consent during service enrollment.

You may withdraw consent at any time by contacting us, though this may affect our ability to provide Services.

Acknowledgment: I have read and understood the Privacy Policy of Critical Care Unified.