Privacy Policy – HealthBloom

HEALTH BLOOM — PRIVACY POLICY

At Health Bloom, we are committed to safeguarding your personal and health information. This Privacy Policy explains how Health Bloom (A Unit of Radical Properties Pvt. Ltd.), (“Company”, “we”, “us”, or “our”) collects, uses, shares, and protects personal information when you access or use our website www.thehealthbloom.in, online consultation services, including in-clinic consultations, online therapy sessions, and blood draw appointments, as well as all interactions via our website and digital platforms and healthcare offerings (“Services”).

Please read this Privacy Policy carefully before using the Website. By accessing or using our Services, you agree to the practices described in this Policy.

Types of Information We Collect

Personal Information includes data that can identify you directly or indirectly. Sensitive Personal Data or Information (SPDI) includes:

● Full Name
● Date of Birth and Gender
● Contact Details (email, phone, address)
● Health conditions and history
● Appointment booking details
● Diagnosis, consultation notes, and therapy records
● Pathology or blood test data
● Payment and insurance information
● Device information (for website analytics and telehealth security)

This information is considered “sensitive personal data or information (SPDI)” under Indian law and is handled with strict confidentiality. By using our Services, you confirm that the information you provide is voluntary and authorized.

How We Collect Your Information

We collect data through:

● Website forms (booking, contact, intake)
● Direct interactions (registration, forms, chats, calls)
● Telehealth platforms (e.g., Zoom, WhatsApp, Google Meet)
● Email, WhatsApp, and SMS communications
● Secure payment and billing portals
● Website analytics and cookies (only for user experience enhancement)
● Diagnostic partners and third-party health systems used for service delivery
● Authorized caregivers (parents/guardians for minors)

Purpose of Data Collection

We collect and process your information to:

● Register, schedule and manage appointments
● Provide personalized medical, diagnostic, and therapeutic services
● Create and maintain electronic health records
● Communicate with you regarding your care (reminders, follow-ups, etc.)
● Process payments and provide receipts
● Facilitate diagnostics and partner services
● Provide emergency or referral care when required
● Maintain communications related to care
● Conduct analytics, quality audits, and service enhancements
● Fulfill legal and regulatory healthcare obligations
● Enhance the functionality and user experience of our website

We will only use your data for the purpose you consent to and never for unauthorized or promotional use.

Sharing of Information

Your data is never sold or shared for marketing purposes. Information may only be shared with:

● Licensed healthcare professionals within our network (for continuity of care)
● Diagnostic labs and partners (for blood test processing, with your consent)
● Technology providers (software for EMR, appointment systems, telemedicine tools)
● Payment service providers
● Insurance companies or payment gateways (only with consent or legal necessity)
● Government regulatory authorities, when legally required
● Third parties for legal compliance, fraud prevention, or business continuity

All partners are contractually required to protect your information.

Rights of Website Visitors and Patients

As per Indian data protection rules, you have the right to:

To exercise your rights, contact us via email or phone (details below). Withdrawal of consent may limit our ability to provide Services.

Minors’ Data

Our services are not intended for individuals under the age of 18 years without parental or guardian consent. Any data collected from minors must be submitted by, or with the verified consent of, a parent or legal guardian. We take special precautions to ensure the privacy and protection of children’s information.

Data Protection & Security

We maintain strong security practices including:

● Encrypted storage of digital records
● Role-based access to sensitive data
● Secure payment gateways for online transactions
● Physical protection of any printed health records
● Firewalls and antivirus software for server security
● We employ encryption, firewalls, and secure storage practices
● Medical and personal data are accessible only to authorized staff
● Payment data is handled by PCI-compliant third-party processors
● We do not store sensitive card details on our servers

We comply with the IT (Reasonable Security Practices and Procedures) Rules, 2011 for handling SPDI. However, no system is fully secure.
Security also depends on you maintaining confidentiality of login credentials and secure device usage.

We are not liable for:

We retain Personal Information:

De-identified and aggregated data may be retained for analytics and research.

Cookies and Website Analytics

We use limited cookies and analytics tools to:

You can control your cookie settings through your browser preferences.

Third-Party Websites & External Services

Our Website may link to third-party services (e.g., payment gateways, health record platforms).
We are not responsible for:

We recommend reviewing their privacy policies before use.

Changes to This Privacy Policy

We may update this policy periodically. Any changes will be posted on this page with the updated effective date. We encourage you to review this page regularly. Continued use of Services after updates will equate to deemed acceptance.

Contact Us

For questions, requests, or concerns regarding this policy or your personal data, please contact: