Welcome to Rognidan Pathology Lab – Diagnostics & Healthcare ("Rognidan," "we," "us," or "our"). We are committed to protecting your personal and health information with the highest standards of privacy and security. This Privacy Policy explains what information we collect, why we collect it, how it is used, and your rights regarding your data.

By using our website (www.rognidandiagnostic.com), booking our services, visiting our lab, or contacting us via phone or WhatsApp, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Personal Information You Provide

When you book a test, fill out a form, call us, or send a message, we may collect:

• Full name, age, and gender
• Phone number and email address
• Home address (for home sample collection)
• Preferred appointment date and time
• Test or health package selected
• Any notes or special instructions you provide

1.2 Health Information

• Test results, diagnostic reports, and lab values generated from your samples
• Medical history or symptoms mentioned during booking or consultation
• Doctor's prescriptions or referral information (if provided by you)

1.3 Technical Information (Website Use)

• IP address, browser type, and device information
• Pages visited, time on site, and referring URLs
• Cookie data (see Section 8)

1.4 Communication Records

• WhatsApp message history for booking purposes
• Phone call records (for appointment confirmation)
• Email correspondence

2. How We Use Your Information

We use the information collected for the following purposes:

• Appointment Management: Confirming bookings, scheduling home collections, sending reminders
• Delivering Test Reports: Sending reports via WhatsApp, email, or in-person as requested
• Customer Support: Responding to enquiries, complaints, or clarifications
• Billing & Payments: Processing payment records and issuing receipts
• Service Improvement: Understanding which services are most needed; improving user experience
• Legal Compliance: Maintaining records as required by healthcare regulations in India
• Safety: Preventing fraudulent bookings or misuse of our services

We do not use your personal or health information for targeted advertising, selling to data brokers, or any commercial purpose unrelated to your direct care.

3. How We Share Your Information

We take your privacy seriously. We do not sell, rent, or trade your personal or health information. Information may be shared only in the following limited circumstances:

• With Referring Doctors: If you request that your report be sent to your doctor, we will do so with your explicit consent
• With Laboratory Partners: If certain specialized tests are processed by a partner reference laboratory, your sample and minimal identifying information may be shared with that lab for testing purposes only — under strict confidentiality
• Legal Obligations: If required by Indian law, court order, or government health authority
• Emergency Situations: In life-threatening situations where disclosure is necessary to protect your health or safety

4. Health Information & Confidentiality

Your diagnostic reports and health data are classified as sensitive personal information under India's Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

• Reports are delivered only to the patient's registered contact (phone/email) or to a person explicitly authorized by the patient in writing
• Reports are never displayed, posted, or shared on social media or any public platform
• Staff access to patient health data is limited on a strict need-to-know basis
• All staff members handling patient data are trained on confidentiality and sign non-disclosure agreements

5. Data Security

We implement reasonable technical and organizational measures to protect your information from unauthorized access, alteration, disclosure, or destruction:

• Secure, password-protected lab management systems
• WhatsApp Business (end-to-end encrypted) used for report delivery
• SSL/TLS encryption on our website
• Restricted physical access to lab records and storage systems
• Regular staff training on data privacy and security

While we take all reasonable precautions, no method of electronic transmission is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

6. Data Retention

We retain patient records for a minimum period as required by applicable healthcare laws and regulations in India:

• Lab reports and patient records: Retained for a minimum of 5 years from the date of testing
• Financial records and billing information: Retained for 7 years as required under tax regulations
• Website analytics data: Retained for 12 months, then anonymized or deleted
• WhatsApp/email correspondence: Retained for 2 years for support and audit purposes

After the applicable retention period, data is securely deleted or anonymized.

7. Your Rights

As a patient or website user, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal and health information we hold about you
• Right to Correction: Request correction of inaccurate personal information (e.g., name, contact details)
• Right to Deletion: Request deletion of your non-medical personal data (subject to our legal retention obligations)
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time
• Right to Data Portability: Request your health reports in a standard digital format

To exercise any of these rights, contact us at care@rognidandiagnostic.com or call +91-9021491236. We will respond within 30 working days.

8. Cookies & Website Tracking

Our website may use cookies — small text files placed on your device — to improve your browsing experience. Types of cookies we may use:

• Essential Cookies: Required for the website to function (cannot be disabled)
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics) — data is aggregated and anonymized
• Preference Cookies: Remember your language or regional settings

You can control or disable cookies through your browser settings. Disabling cookies may affect some website functionality. We do not use cookies to collect health or personally identifiable information for marketing purposes.

9. Third-Party Services

Our website may contain links to third-party services or platforms:

• WhatsApp (Meta): Used for booking confirmations and report delivery. Subject to WhatsApp's Privacy Policy
• Google Maps: Used for displaying our lab location. Subject to Google's Privacy Policy
• Google Analytics: Used for anonymized website traffic analysis
• WPForms: Used for contact and booking forms (if integrated)

We are not responsible for the privacy practices of these third-party services. We encourage you to review their respective privacy policies.

10. Children's Privacy

Our diagnostic services are available to patients of all ages, including minors. For patients under 18 years of age:

• A parent or legal guardian must provide consent for testing and share contact information
• Reports for minors are delivered to the parent/guardian's registered contact
• We do not knowingly collect personal information from minors through our website independently — only through the parent/guardian during booking

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. When we make material changes:

• The "Last Updated" date at the top of this page will be revised
• Significant changes will be communicated via a notice on our website or directly to registered patients
• Continued use of our services after the effective date constitutes acceptance of the updated policy

We encourage you to review this policy periodically.

12. Contact Us — Privacy Concerns

If you have questions, concerns, or complaints about this Privacy Policy or how we handle your data, please contact our Privacy Officer:

This Privacy Policy was last reviewed on January 1, 2025. It is governed by the laws of India, including the Information Technology Act, 2000 and the IT (Amendment) Act, 2008 and applicable rules thereunder.