Privacy Policy

This policy concerns the HEFCORP website and enquiries handled by HEFCORP Diagnostic Centre LLP. It also explains the intended handling of information used to arrange diagnostic services. The contact address is our Okhla centre; privacy requests can be sent to support@hefcorp.com.

Medical records, prescriptions and information about a person’s health require particular care. This notice should be read with the information and consent provided at registration or sample collection. A third-party website or reporting service may have its own privacy notice.

Information is used to respond to your request, arrange the agreed service, communicate about samples and reports, manage billing and address concerns. Permission to respond to an enquiry is not permission to send marketing.

The website sends form details to the configured HEFCORP staff mailbox through an email service. An uploaded prescription is attached to that email. Hosting and email providers process information as part of delivering those services.

Where a referral laboratory or another service provider is needed, the centre should explain the recipient and purpose and obtain permission where required. Results should be shared with the patient or an authorised recipient, not automatically with an employer, family member or referring organisation. A legal reporting duty or valid legal demand may require disclosure without separate permission.

Contact the team before submitting sensitive information if you need details of the receiving laboratory or a different communication method.

Website enquiries are recorded on the server and sent by email. The server record contains submitted contact details, messages, selected tests and prescription-file metadata; the prescription itself is sent as an email attachment. Mailboxes, hosting logs and backups may retain separate copies.

Information should be kept only for the service, complaint handling, applicable medical-record and accounting requirements, or a justified legal need. There is no single deletion period for every type of record. Ask the team which retention rule applies to your information; any record that must legally be retained cannot be erased immediately.

Access should be limited to authorised people who need the information for their work, supported by suitable technical and organisational safeguards. No online service can promise absolute security. Do not send passwords, OTPs, full card numbers or unnecessary identity documents. Report a suspected disclosure promptly through Grievance Redressal.

You may choose not to submit an optional prescription or message. If information essential to a service is not provided, the team will explain whether the request can still be handled. You may withdraw consent for future optional processing by writing to support@hefcorp.com.

1. Use the subject “Privacy request — HEFCORP”.
2. Give your contact details, a booking reference if available, and say whether you seek access, correction, deletion, consent withdrawal or an explanation.
3. Do not attach full medical records or identity documents at this stage. We may ask for proportionate verification or evidence that you can act for the patient.
4. The response should explain the action taken and any legal reason information must be retained.

Withdrawal does not undo processing already carried out lawfully. Requests concerning clinical results may require review and an amended report rather than alteration of the original record. Raise unresolved concerns through the grievance process.

A parent, lawful guardian or authorised representative should contact the centre when arranging services for a child or a person who cannot act independently. Appropriate authority and consent must be checked before collection or disclosure. Booking on someone’s behalf does not give unrestricted access to their reports.

The current site loads fonts and some images from third-party hosts. Those hosts receive ordinary connection information when the files are requested. Social links and WhatsApp open external services when selected; their own privacy policies apply.

The optional city-picker code can save a preferred city in browser local storage and use IP-based location services when that feature is enabled. Browser controls can remove stored site data. No advertising or analytics tracking has been identified in the reviewed website code; that is not a statement about unreviewed hosting or future integrations.

This site does not ask for payment-card details through its enquiry form. Any separately provided payment or reporting service should identify itself and provide its own privacy information before use.

This notice will be updated when collection methods, recipients or service arrangements change. The date at the top identifies the latest review. A material new purpose for health information requires appropriate notice and permission where required; continued browsing is not a substitute for that permission.

Indian privacy requirements apply according to their scope and commencement dates. The Digital Personal Data Protection framework has a phased commencement; this page does not claim that every provision is already in force or that HEFCORP has a privacy certification. Contact support@hefcorp.com for a privacy question.