1. Your Privacy Matters
Welcome to the official website of Krishna Institute of Medical Sciences Limited ("KIMS Hospitals™", "KIMS", "we", "our" or "us").
KIMS Hospitals™ respects your privacy and, acting as a Data Fiduciary under the Digital Personal Data Protection Act, 2023, is committed to protecting the Personal Data collected through our website and associated digital services.
This Website Data Privacy Notice explains how we collect, use, disclose, store and protect your Personal Data when you:
- visit our website;
- book appointments online;
- submit enquiries;
- communicate through online forms;
- subscribe to newsletters;
- apply for employment;
- access patient-facing digital services;
- interact with our chatbot (where available); or
- otherwise use our online services.
This Notice applies only to our website and associated online services. Healthcare services provided within our hospitals are governed by our Patient Data Privacy Notice, while employment-related processing is governed by our Employee Data Privacy Notice.
2. About KIMS Hospitals™
Krishna Institute of Medical Sciences Limited ("KIMS Hospitals™")
Registered Office: 1-8-31/1, Minister Road, Secunderabad – 500 003, Telangana, India
Website: www.kimshospitals.com
Telephone: 040-44885000
3. Information We Collect
Depending on how you interact with our website, we may collect the following categories of information.
A. Information You Provide
You may voluntarily provide:
- your name;
- email address;
- telephone number;
- city;
- preferred hospital;
- preferred doctor;
- appointment requests;
- enquiry details;
- feedback;
- uploaded documents;
- curriculum vitae (CV);
- job applications;
- newsletter subscription details; and
- any information you choose to include in your communications.
B. Technical Information
When you visit our website, we may automatically collect:
- IP address;
- browser type and version;
- operating system;
- device type;
- device identifiers;
- language settings;
- referring website;
- pages visited;
- date and time of access;
- session information;
- clickstream data;
- website performance data; and
- security logs.
C. Cookies and Similar Technologies
Our website may use:
- cookies;
- session cookies;
- persistent cookies;
- web beacons;
- pixels;
- local storage;
- analytics technologies; and
- similar technologies.
4. Why We Collect Your Information
We collect Personal Data to:
Provide Website Services
- operate our website;
- improve website functionality;
- respond to enquiries;
- enable online appointment requests;
- facilitate patient communications;
- provide healthcare information.
Manage Your Requests
We use your information to:
- respond to enquiries;
- process appointment requests;
- contact you regarding your request;
- provide requested information;
- assist customer support.
Improve User Experience
We analyse website usage to:
- understand visitor behaviour;
- improve navigation;
- optimise website performance;
- improve accessibility;
- develop new digital services.
Where analytics technologies involve cookies or similar identifiers, they will be used in accordance with your cookie preferences and applicable law.
Information Security
We process information to:
- detect cyber threats;
- prevent fraud;
- identify malicious activity;
- maintain website security;
- investigate security incidents;
- protect our IT infrastructure.
Legal Compliance
We may process Personal Data to:
- comply with legal obligations;
- respond to lawful requests;
- protect legal rights;
- investigate misuse of our website.
5. Legal Basis for Processing
Depending upon the nature of the processing, we may rely upon one or more of the following lawful grounds recognised under the Digital Personal Data Protection Act, 2023:
- your consent;
- your request for information or services;
- provision of healthcare-related services;
- compliance with legal obligations;
- protection of our website and systems; or
- other lawful grounds available under applicable law.
6. Online Appointment Requests
Where you submit an online appointment request, we may process:
- your name;
- contact details;
- preferred hospital;
- preferred doctor;
- requested appointment date;
- speciality required;
- information voluntarily provided by you.
Submission of an appointment request does not guarantee appointment confirmation.
7. Online Enquiries
If you contact us using our online enquiry forms, we may use your information to:
- respond to your enquiry;
- contact you;
- provide requested services;
- improve our customer service.
8. Careers Page
Where you submit an employment application through our website, we may process:
- your CV;
- qualifications;
- employment history;
- contact information;
- professional registrations;
- supporting documents.
Recruitment-related processing is governed by our Recruitment Data Privacy Notice.
9. Chatbot Services
Where our website offers AI-enabled or live-chat services, information submitted through the chatbot may be processed to:
- respond to your queries;
- improve customer support;
- provide appointment assistance;
- improve chatbot performance.
The chatbot should not be used to communicate medical emergencies or highly sensitive health information unless expressly indicated as appropriate for that service.
10. Marketing Communications
If you choose to receive newsletters, health updates or promotional communications, we may process your contact information for those purposes. You may unsubscribe at any time using the unsubscribe link provided in our communications or by contacting us directly.
11. Sharing Your Information
We may share Personal Data with:
- KIMS Hospitals entities;
- authorised IT service providers;
- cloud service providers;
- website hosting providers;
- analytics service providers;
- payment gateway providers (where applicable);
- cybersecurity providers;
- government authorities where required by law.
We do not sell or rent your Personal Data.
12. International Transfers
Some technology providers supporting our website may process Personal Data outside India. Where such transfers occur, KIMS Hospitals™ implements appropriate contractual, organisational and technical safeguards in accordance with the Digital Personal Data Protection Act, 2023. Transfers will not be made to any country or territory restricted by the Central Government by notification under Section 16 of the Act.
13. Security
We employ appropriate security measures including:
- encrypted communications (HTTPS/TLS);
- firewalls;
- intrusion detection and prevention systems;
- vulnerability management;
- access controls;
- audit logging;
- secure hosting;
- regular security assessments.
While we implement reasonable security safeguards in accordance with applicable law, including the Digital Personal Data Protection Act, 2023, no website or internet transmission can be guaranteed to be completely secure. In the event of a personal data breach, KIMS Hospitals™ will notify the Data Protection Board of India and affected individuals in accordance with the Digital Personal Data Protection Act, 2023. KIMS Hospitals™ remains committed to continuously improving its security measures.
14. Third-Party Websites
Our website may contain links to third-party websites, including:
- payment providers;
- insurance portals;
- social media platforms;
- government websites;
- healthcare partners.
KIMS Hospitals™ is not responsible for the privacy practices, security or content of third-party websites. Users should review the Data Privacy Notices of those websites before providing Personal Data.
15. Children's Privacy
Our website is not intended to knowingly collect Personal Data directly from children (individuals below the age of 18 years as defined under the Digital Personal Data Protection Act, 2023) without verifiable parental or guardian consent. KIMS Hospitals™ does not undertake tracking, behavioural monitoring or targeted advertising directed at children through its website.
Parents or guardians who believe that a child has submitted Personal Data through our website may contact us to request its review or deletion, subject to applicable legal requirements.
16. Your Privacy Rights
Subject to applicable law, you may have the right to:
- receive information about the processing of your Personal Data;
- access your Personal Data;
- request correction of inaccurate information;
- request erasure where legally applicable;
- withdraw consent for processing based on consent, provided that the withdrawal of consent shall not affect the lawfulness of processing carried out before such withdrawal;
- manage your cookie preferences;
- lodge a privacy complaint, including approaching the Data Protection Board of India where applicable.
17. Changes to This Notice
We may update this Website Data Privacy Notice periodically to reflect changes in our website, technology, legal obligations or business operations.
The latest version will always be available on the KIMS Hospitals™ website. Material changes will be communicated through appropriate online channels where required.
18. Contact Us
Data Privacy Officer
Krishna Institute of Medical Sciences Limited (KIMS Hospitals™)
Email: assistance@kimshospitals.com
Address: 1-8-31/1, Minister Road, Secunderabad – 500 003, Telangana, India
19. Grievance Redressal
If you have questions or concerns regarding this Website Data Privacy Notice or the processing of your Personal Data through our website, you may contact the Data Privacy Officer using the details above.
If you are not satisfied with our response, you may pursue the remedies available under applicable law, including those provided under the Digital Personal Data Protection Act, 2023.