NY Medical ConsultancyPrivacy policy
Last updated:
This policy explains what personal information NY Medical Consultancy collects, why we collect it, who we share it with, and the choices you have. We have written it in plain language. If anything is unclear, contact us using the details at the end.
Who we are
NY Medical Consultancy is the brand name of Nobleyield Medical Consultancy LLP, a limited liability partnership registered in India.
- Registered address: VJ Indilife, 924, Sus - Pashan Rd, Vardayani Society, Pashan, Pune, Maharashtra 411021, India
- Privacy contact: [email protected]
We coordinate treatment at partner hospitals in India for patients from other countries. We decide how and why your personal information is used. That makes us:
- the data fiduciary under India's Digital Personal Data Protection Act, 2023
- the data controller under UK and EU data protection law
What this policy covers
This policy covers:
- this website
- our online forms: the patient enquiry form and the doctor registration form
- our conversations with you on WhatsApp, by email and by phone
It does not cover the websites of our partner hospitals or other organisations we link to. They have their own privacy policies.
Information we collect
From patients, and family members acting for them
- Contact details: your name, WhatsApp number, email address and country.
- Health information:
- the treatment you are looking for
- the medical reports, scans and prescriptions you send us
- anything you tell us about your condition
- Travel details, if you decide to go ahead: the details needed for the hospital's visa invitation letter and your travel arrangements, such as passport details, travel dates and the details of anyone travelling with you.
From doctors
- Your registration details: your name, contact details, specialty, place of work and anything else you enter in our doctor registration form.
- Information about patients you refer to us, including their medical reports.
When you visit this website
Our hosting provider, Cloudflare, processes technical information to deliver the website and protect it from attacks. This includes your IP address, your browser type and the pages you request.
- We do not use advertising cookies or tracking pixels.
- We do not currently use analytics tools on this website.
- The website may save a small setting in your browser, for example when you close a language suggestion, so that it does not show you the same message again.
How we use your information
We use your information to:
- reply to your enquiry
- send your medical reports to specialists at our partner hospitals, so they can give an opinion and a cost estimate
- arrange the hospital's visa invitation letter and, if you ask us, flights, accommodation and airport pickup
- support you during treatment, and help arrange follow-up after you return home
- for referring doctors: manage the referral and, with the patient's permission, keep you informed about their treatment
- keep this website secure, and meet our legal obligations
We do not sell your personal information. We do not use it for advertising, and we will not add you to a mailing list without your permission.
Our legal basis
Under India's Digital Personal Data Protection Act, 2023
We process your personal information:
- with your consent, which you give when you send it to us
- for the other lawful uses the Act allows
Under UK and EU data protection law
- Your explicit consent. This is our basis for your health information. You give it when you tick the consent box on our form, or when you send us your reports after reading this policy.
- Steps you ask us to take. When you ask us to coordinate your treatment, we use your information to do so.
- Our legitimate interests. We run and secure this website, and work with referring doctors.
- Legal obligations. We keep records where the law requires it.
You can withdraw your consent at any time. Withdrawing does not affect anything we did before you withdrew. It may mean we can no longer coordinate your treatment.
Who we share your information with
- Our partner hospitals in India. We share your reports and details with the hospitals reviewing your case, so their specialists can give an opinion and, if you choose, treat you. Each hospital handles your information under its own privacy policy. Our partner hospitals are listed on our About page.
- Your referring doctor. If a doctor referred you to us, we keep them informed about your treatment, with your permission.
- Service providers who handle information for us:
- Zoho, which runs our forms and stores what you submit
- Cloudflare, which hosts this website
- WhatsApp, which carries our messages
- our email provider
- These providers may use your information only to provide their service to us.
- Travel and accommodation providers. When you ask us to arrange travel, accommodation or airport pickup, we share only the details they need.
- Authorities. We share information when the law requires it.
Where your information is stored
We are based in India, and so are our partner hospitals. Zoho stores our form submissions in its data centre in India.
If you contact us from another country, your information is transferred to India. Data protection law in India may differ from the law where you live. For your health information, we rely on two things:
- your explicit consent
- the transfer being necessary to arrange the treatment you ask for
WhatsApp and Cloudflare may process information in other countries, under their own safeguards.
How we protect your information
- Our forms. Zoho, which provides our forms, is independently audited every year. It holds a SOC 2 Type II report and ISO/IEC 27001 certification for information security, and ISO/IEC 27701 certification for privacy management.
- The website. It is served only over an encrypted connection (HTTPS).
- Our team. Only team members who need your information to coordinate your care can see it.
- Email. Email is not always encrypted. If you prefer, send your reports through our form or on WhatsApp instead.
No system is completely secure. If a data breach is likely to affect you, we will tell you and the relevant authorities as the law requires.
How long we keep your information
| Information | How long we keep it |
|---|---|
| Enquiries that do not lead to treatment | 2 years after our last contact with you, then deleted |
| Information about patients whose treatment we coordinated | 5 years after our last contact with you, for follow-up care and to meet our legal and accounting obligations, then deleted |
| Referring doctors' registration details | While you are part of our referral network, and 2 years after you leave, then deleted |
| Technical information processed by Cloudflare | For short periods, under Cloudflare's own policies |
Hospitals keep their own medical records under their own rules.
Your rights
Depending on where you live, you can ask us to:
- give you a copy of the personal information we hold about you
- correct information that is wrong or incomplete
- delete your information
- stop or limit how we use it, or withdraw your consent
- send your information to you, or to another organisation, in a common format
Under Indian law, you can also nominate someone to exercise these rights for you if you die or become unable to.
How to make a request:
- Contact our privacy contact or grievance officer (details below).
- We may ask you to confirm your identity before we act.
- We will reply within 30 days.
If you are unhappy with how we handle your information:
- Please contact us first.
- You can also complain to your data protection authority:
- the Information Commissioner's Office in the UK
- the data protection authority in your country in the EU
- the Data Protection Board of India
Children
If the patient is under 18, a parent or legal guardian must contact us and give consent on the child's behalf. We use a child's information only to coordinate their treatment. We do not knowingly collect information directly from children.
Information about other people
If you send us information about someone else, you confirm that you have their permission, or that you are their parent or legal guardian. This applies, for example, to a family member you are helping, or, if you are a doctor, a patient you are referring.
Grievance officer
- Name: Vaibhav Rathi, Director of Operations
- Email: [email protected]
- Address: VJ Indilife, 924, Sus - Pashan Rd, Vardayani Society, Pashan, Pune, Maharashtra 411021, India
We aim to resolve complaints within 30 days.
Changes to this policy
When we change this policy, we will update it on this page and change the date at the top. If a change significantly affects how we use information you have already given us, we will tell you before it applies.
Contact us
- Privacy requests: [email protected]
- WhatsApp and email: as shown on our Contact page
- Post: Nobleyield Medical Consultancy LLP, VJ Indilife, 924, Sus - Pashan Rd, Vardayani Society, Pashan, Pune, Maharashtra 411021, India
Talk to us
Send your reports whenever you are ready, or ask us a question first.