Gift of Sight Eye Hospital - Privacy Policy
Last updated: 16 August 2026
MediFlow is a hospital appointment-management service operated by Fordawn Innovations Private Limited("Fordawn", "we") on behalf of Gift of Sight Eye Hospital("the Hospital"). This policy explains what information we process when you book or manage appointments at Gift of Sight Eye Hospital, including over WhatsApp, and your rights under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").
1. Information we collect
We collect only the minimum needed to manage your appointment:
- Your name
- Your phone number (WhatsApp number)
- Your appointment details (doctor, type, date, time, payment status)
We do not collect or store medical records, diagnoses, or treatment history.
2. How we use it
- To create, confirm, reschedule, and cancel your appointments
- To send you booking confirmations and reminders
- To help the Hospital's front desk manage its schedule
3. Your consent & our role
Under the DPDP Act, the Hospital is the Data Fiduciary - it decides how your information is used - and Fordawn is the Data Processor, handling it only on the Hospital's instructions. You provide your consent when you book or message us to manage an appointment, for the purposes described in this policy. You can withdraw that consent or exercise your other rights at any time (see Your rights below).
4. WhatsApp messaging
Appointment booking is offered over the WhatsApp Business Platform (Meta). Messages are used solely to process your request. We do not keep your WhatsApp conversation history as a record; any in-progress booking conversation is automatically deleted after 90 days, and only the resulting appointment details are retained.
Reply STOP at any time to stop promotional messages. Appointment confirmations and reminders continue, because they are part of the service you booked. Your use of WhatsApp is also subject to WhatsApp's Privacy Policy.
5. Data ownership & sharing
All appointment and contact information belongs to the Hospital. We do not sell your information or share it for advertising. We share it only with the Hospital you are booking with, and with service providers strictly necessary to deliver the service (e.g. secure cloud hosting and, where applicable, the payment processor for online payments).
6. Payments
Where online payment is offered, it is processed by Razorpay. Fordawn does not store your card or banking details.
7. Data retention & security
Information is stored in a secured, access-controlled database and retained only as long as needed for the Hospital's operations and legal obligations. Access is limited to authorised personnel. In-progress WhatsApp booking conversations are deleted automatically after 90 days.
8. Children's data
If the patient is a child, a parent or legal guardian must provide consent on their behalf, as required by the DPDP Act. Where a child is booked, the Hospital obtains this consent from the accompanying parent or guardian.
9. Your rights
Under the DPDP Act you have the right to:
- access a summary of the personal data we hold about you;
- request its correction, completion, updating, or erasure;
- withdraw your consent at any time;
- nominate another person to exercise your rights on your behalf; and
- a grievance redressal mechanism.
To exercise any of these, contact the Hospital's front desk or email us at the address below. We aim to respond within 30 days. Where the Hospital must keep an appointment record, erasure removes the details that identify you while the de-identified record is retained.
10. Contact
Gift of Sight Eye Hospital
16/1A, David Colony, Simco Meter Road, Trichy - 620021
Email: drvinod@drvarunasgiftofsight.in
Phone: +91-431-2459275
Grievance Officer: Dr. Vinod Nathaniel · drvinod@drvarunasgiftofsight.in · +919843720348
You can contact them about how your information is used, or to raise a complaint.
This policy may be updated from time to time. Continued use of the service after changes constitutes acceptance of the updated policy.