Privacy Policy

1. Introduction

Mission 100 Hospital ("we," "us," or "our") operates the website https://www.mission100hospital.com and associated healthcare appointment scheduling, pathology test bookings, and wellness memberships. We are committed to protecting the privacy and security of your personal and health information. This Privacy Policy explains how we collect, use, and safeguard your data.

2. Scope

This policy applies to all personal information, diagnostic details, and transaction data collected through our website booking forms, registration widgets, and checkout systems. It does not govern offline physical consultations, except where records are unified for coordinate care.

3. Information We Collect

We collect only the details necessary to schedule consultations, perform diagnostics, and process your wellness memberships:

• Patient Demographics: First name, Last name, Date of Birth (DOB) or age, and gender.
• Contact Details: Email address, mobile contact number, and WhatsApp number.
• Residential & Collection Address: House number, street name, state, city, landmark, and pin code (for home sample collection and communications).
• Health & Medical Profiling: Blood group, existing medical conditions, and clinical reasons for consultation.
• Emergency Information: Emergency contact name, relationship, and contact number.
• Payment & Order Signatures: Razorpay order ID, payment ID, and transaction signature hash to verify bookings. We do not store credit/debit card numbers, CVVs, UPI PINs, or bank account credentials.

4. How We Use Your Information

We use your information solely for functional healthcare and administrative purposes:

• To schedule and confirm doctor appointments and wellness consultations.
• To log and coordinate pathology lab tests and home sample collection visits.
• To manage your Silver Care, Gold Care, Platinum Care, or Pro Fitness memberships.
• To process secure payments through our payment gateway partner, Razorpay.
• To auto-generate PDF receipts, summaries, and digital cards, and email them to you via Gmail SMTP (Nodemailer).
• To store administrative logs securely in our Google Sheets backend database.
• To comply with clinical logging, healthcare standards, and tax/financial obligations.

5. Payment Information Security

All monetary checkouts on our platform are processed securely by Razorpay, which is certified as a PCI-DSS Level 1 compliant service provider. Mission 100 Hospital does not capture, store, log, or inspect raw credit card numbers, card expiration dates, Card Verification Values (CVV), or bank logins. Transactions occur through secure tokens-based overlays hosted by Razorpay.

6. Cookies and Storage

We do not load third-party analytics pixels or ad trackers on our platform. We use minimal functional cookies and storage technology:

• Session Storage: Used to temporarily save scroll position keys during user navigation to optimize rendering.
• Payment Overlay Tokens: Set securely by checkout.razorpay.com to verify transaction sessions.

For more detailed information, please review our Cookie Policy.

7. Third-Party Integrations

We integrate with trusted service platforms to run our services:

• Payment Gateway: Razorpay (secures transactions).
• Notification: Gmail SMTP/Nodemailer (sends receipts/updates).
• Database: Google Sheets API (stores booking sheets).
• Communications: WhatsApp API web links (initiates support chats).

8. Data Sharing

Mission 100 Hospital does not sell, rent, or trade your personal data. We only share specific patient profile and collection details with our affiliated diagnostic laboratories to execute the pathology tests you book, or with statutory authorities as required by legal mandates.

9. Data Security

We implement technical safeguards, including HTTPS encryption for all form transmissions and private Google Cloud Service tokens, to prevent unauthorized access or interception of your details. While we take comprehensive precautions, no digital transmission over the internet can be guaranteed as 100% secure.

10. Data Retention

We retain your booking information, contact details, and transaction histories in our Google Sheets backend as required for health tracking, membership validity verification, financial audits, and regulatory compliance.

12. User Rights

You have the right to request updates, corrections, or erasure of your personal contact records stored in our spreadsheets. To exercise these rights, please contact our support team at info@mission100hospital.com.