Privacy Policy

Who we are

CASE Diagnostics & MultiCare operates this website and the hospital at Address line 1, Area, City - 000000, Tamil Nadu, India. This policy explains what information we collect through this website, how we use it, and what rights you have over it. It covers the website only — information collected during your clinical care is governed by our hospital medical-records policy, which you can request at the front desk.

Information we collect through this website

We only collect what a booking or an enquiry actually needs:

• Appointment bookings: patient name, mobile number, and optionally email, age and gender; the department, doctor, date and time you select; and the reason for your visit if you choose to give one.
• Enquiries and callbacks: your name, mobile number, and optionally email, along with your subject, chosen department, and message.
• Phone verification: your mobile number and a one-time code. The code itself is stored only as an irreversible hash and is never retained in readable form.
• Technical data: your IP address, kept briefly to rate-limit forms and prevent abuse of our SMS service.

Health information and sensitive data

The department you select and any reason for visit you enter tell us something about your health, and India's Digital Personal Data Protection Act 2023 treats that as sensitive. We handle it accordingly: it is visible only to front-desk and clinical staff who need it to schedule and prepare for your visit, and it is never used for advertising or sold to anyone. Please do not enter detailed medical history, test results, or clinical images into any web form — a website form is not a secure channel for that, and your consultation is the right place for it.

How we use your information

We use what you give us to:

• Schedule, confirm, reschedule, and remind you about your appointment.
• Prepare for your visit — for example, telling you whether a test requires fasting.
• Verify that a mobile number belongs to the person booking, to prevent fraudulent bookings.
• Respond to your enquiry, feedback, or complaint.
• Meet our legal, regulatory, and medical record-keeping obligations.

Who we share it with

We do not sell your personal data, and we do not share it for advertising. We share it only where it is necessary:

• Our clinical and front-desk staff, to deliver your care.
• Our SMS and email providers, to send you appointment confirmations and verification codes — they process the message on our instruction and may not use your data for their own purposes.
• Your insurer or TPA, only when you ask us to process a cashless claim on your behalf.
• Regulators, courts, or public health authorities, where the law requires it.

Cookies and analytics

We do not set advertising cookies of our own, and we do not sell or share your browsing data for advertising. Your light or dark theme preference is stored locally in your browser and never reaches our servers. Where site analytics are enabled we use Google Analytics 4 to understand which pages are useful, configured deliberately: your IP address is anonymised, Google advertising and ad-personalisation signals are switched off, and page addresses are sent without their query string — so the department or health package you were reading about is never attached to you.

Video embedded from YouTube

Our homepage plays a short facility video hosted on YouTube. Because the video is embedded rather than served from our own servers, your browser contacts Google to load it — and it does so as the page opens, before you have clicked anything. Google may therefore receive your IP address, your browser and device details, and the fact that you visited our homepage, and may store information on your device. We have limited that as far as an embed allows, and we want you to know exactly what it does:

• We use YouTube's no-cookie domain (youtube-nocookie.com), which does not set Google's advertising or personalisation cookies for viewing.
• The video is muted, has no clickable player controls, and shows no related videos or advertisements.
• It does not load at all on phones, on connections where Data Saver is on, or if your device asks for reduced motion — in those cases no request is made to Google for it.
• We receive nothing from Google about you through the embed, and we do not use it to identify or track you.
• What Google itself does with the request is governed by Google's own privacy policy, not by ours. If you are signed in to a Google account, Google can associate the request with that account.

If you would rather not load the video

You can stop the video with the pause button in the corner of the homepage banner, though by then it will already have loaded. To avoid the request entirely, turn on Data Saver or reduced-motion in your device settings, browse from a phone, or use a browser extension that blocks third-party embeds. Nothing about the video is required to use this site: every page, including appointment booking, works with it blocked. Booking, enquiry and verification pages embed no third-party content of any kind.

How long we keep it

Appointment and enquiry records are retained for as long as needed to provide your care and to meet the record-keeping periods that apply to healthcare providers in India. One-time verification codes are deleted within 24 hours. If you ask us to delete website enquiry data we will do so, except where we are legally required to keep a medical record.

How we protect it

Access to the website's administrative system is restricted to authorised hospital staff, protected by individual accounts, hashed passwords, session expiry, and lockout after repeated failed logins. The site is served over HTTPS so data in transit is encrypted. No system is perfectly secure, but we review these controls and will tell you promptly if a breach affects your data.

Your rights

Under the Digital Personal Data Protection Act 2023 you may ask us to:

• Confirm what personal data of yours we hold and how we have used it.
• Correct or complete anything inaccurate or out of date.
• Erase data we no longer have a lawful reason to keep.
• Withdraw a consent you previously gave — for example, to appointment reminders.
• Nominate someone to exercise these rights on your behalf if you are unable to.

Children's information

Appointments for children are booked by a parent or guardian, who provides the child's details and consents on their behalf. We do not knowingly collect information directly from a child through this website.

Changes to this policy

If we change how we handle your information we will update this page and revise the date below. Where a change is significant, we will make that clear rather than relying on you to notice it.