Privacy Policy

1. Who controls your information

Personal information submitted through this website is received and used by the professional practice of Dr. Girish Godbole, Director and Senior Consultant, Interventional Cardiology, Krishna Institute of Medical Sciences (KIMS) Hospital, Electronic City, Bangalore.

If your enquiry proceeds to hospital-based care, relevant details may also be handled by KIMS Hospital (or another treating facility) under that institution’s own records and privacy practices. This website is not the hospital’s official site.

2. Information we collect

We collect information you choose to provide, and limited technical data needed to run the site securely.

• Contact and appointment enquiries: name, email address, optional cardiac condition (for example coronary artery disease, heart attack, heart failure, arrhythmias, peripheral artery disease, or structural heart disease), message, and optional PDF medical records.
• Second opinion requests: the same categories of details, typically including a description of your condition and PDF records you upload to support the review.
• Professional collaboration enquiries: name, email address, organisation, area of interest (research, academic partnership, speaking, media, or industry collaboration), and message.
• Direct contact: if you telephone or email the practice, we receive the information you include in that call or message.
• Technical data: to reduce automated spam, the enquiry service may record a network address for a short period as part of rate limiting. Server logs may also record standard request data such as browser type and pages requested.

3. Medical records and health information

Health information and medical records are sensitive. Please share only what is needed for your enquiry. The website accepts medical records as PDF files only, up to three files per submission, with a maximum size of 5 MB per file.

Records you upload are transmitted so that the practice can review your request (including a second opinion) and reply to you. They are not published on the website. You should not upload another person’s records unless you are authorised to do so (for example as a parent, guardian, or with the patient’s informed permission).

A website upload is a convenient channel for an initial request. It is not a hospital medical-records system. Original films, full imaging studies, or irreplaceable documents should not be sent through the form if a more secure clinical channel has been arranged.

4. How we use information

We use personal information to:

• Read and respond to appointment, contact, and second opinion requests, including follow-up by email or telephone.
• Review submitted records where a second opinion or clinical enquiry requires it, and discuss findings if a review is accepted.
• Consider professional collaboration proposals.
• Send an acknowledgement email confirming that your submission was received, including a copy of the non-file details you entered.
• Operate, secure, and improve the website, including preventing spam and abuse.
• Comply with legal, professional, and ethical obligations that apply to medical practice in India.

We do not sell your personal information. We do not use enquiry details for unrelated marketing lists.

5. Legal basis (India)

We process personal data in line with the Digital Personal Data Protection Act, 2023 and other applicable Indian law. In practice this means we rely on your consent when you submit a form, and on legitimate uses necessary to respond to your request, provide or arrange care, protect the security of the site, and meet professional and legal duties. You may withdraw consent for website communications by emailing the practice; withdrawal does not affect processing already completed, or records that must be kept for clinical or legal reasons.

6. Sharing

Information is shared only as needed to fulfil your request or as required by law, including:

• The practice team who read and respond to enquiries.
• Email delivery: submissions are sent by email to the practice, and a confirmation may be sent to the address you provide, using an email service configured for this website.
• The hospital or another treating facility, if your request proceeds to an appointment, investigation, or procedure.
• Professional advisers or authorities where disclosure is required or permitted by law (for example a lawful request, or to protect vital interests in an emergency).

7. Cookies and similar technologies

This website is built to present information and receive forms. It does not use advertising or analytics cookies. The site may use strictly necessary technical storage required for the pages to function (for example as provided by the hosting platform). You can control cookies through your browser settings; blocking all cookies may affect some features.

8. Third-party services on the site

Some pages include content or links operated by others. Those parties process data under their own policies. In particular:

• The contact page may embed a Google Map of KIMS Hospital, Electronic City, Bangalore. Google may collect technical data from the embed according to Google’s policies.
• Links to LinkedIn, news publishers, PubMed, hospital pages, and similar sites take you off this website.
• Some images may be served from third-party image hosts. Those hosts may receive a request when the image loads.

9. Retention

Enquiry emails, attachments, and related correspondence are kept for as long as needed to handle your request, follow up, and meet clinical, professional, and legal record-keeping requirements. Technical rate-limit data is kept only for a short window. When information is no longer required, it is deleted or archived in line with those obligations.

10. Security

Forms are submitted over an encrypted connection when you use the public website on HTTPS. Access to enquiry email is limited to those who need it to respond. No method of transmission or storage is completely secure; please avoid including unnecessary sensitive identifiers (such as full government ID numbers) in free-text messages unless they are required.

11. Your rights

Subject to the Digital Personal Data Protection Act, 2023 and other applicable law, you may request access to personal data we hold about you from this website, correction of inaccurate data, and erasure where we are not required to retain it. You may also withdraw consent for further website communications.

To make a request, email or write to the practice using the details below. We may need to verify your identity before fulfilling a request, especially where health information is involved. If you are not satisfied with our response, you may have the right to approach the Data Protection Board of India or another competent authority.

12. Children

This website describes adult cardiology services and is not directed at children. A parent or guardian who submits information on behalf of a minor should only do so where they have authority to seek care or a second opinion for that child.

13. Changes

This policy may be updated to reflect changes in the website, the law, or how the practice handles information. The “Last updated” date at the top of this page will change when it does. Material changes will be reflected on this page.

14. Contact

For privacy questions, access requests, or concerns about how your information is handled, please contact the practice using the details below or the contact form on this website.