Privacy Policy

This Privacy Policy explains how Aarogyam Hospital ("Aarogyam Hospital", "we", "our", "us") collects, uses, shares, stores, and protects personal data when you visit aarogyamhospitalsambhajinagar.com or use our WhatsApp API Services, including implementations/integrations delivered as an independent technology partner with GNext Chat.

This policy applies to:

• Visitors to our website (aarogyamhospitalsambhajinagar.com)
• Business customers ("Clients") who purchase or use our WhatsApp API Services
• End users ("End Users") who receive WhatsApp messages sent by our Clients using solutions built or operated by us

A) Website Data

• Contact details you submit (name, email, phone number, company, message)
• Basic technical data (IP address, browser type, device information, pages visited, timestamps)
• Cookies/analytics data (if enabled)

B) WhatsApp API Services Data

Depending on the project, we may process:

• Phone numbers of recipients (End Users) and/or Client representatives
• Message metadata (delivery status, timestamps, template name/ID, WhatsApp identifiers)
• Customer-support information shared by Clients for troubleshooting
• Limited conversation content only when required for service delivery or support (we aim to minimize access and storage)

We do not intentionally collect sensitive personal data unless required by the Client's use case, and we recommend Clients avoid sending sensitive data over WhatsApp unless legally justified and properly secured.

We use personal data to:

• Provide, maintain, and improve WhatsApp API Services
• Configure integrations, templates, webhooks, and automations requested by Clients
• Deliver WhatsApp notifications and messages on behalf of Clients
• Provide technical support, debugging, incident response, and customer service
• Ensure security, prevent abuse, and comply with legal obligations
• Send service communications (e.g., planned maintenance, security notices)

Depending on jurisdiction and context, we process data based on:

• Contract necessity (to deliver services to Clients)
• Legitimate interests (security, service improvement, fraud prevention)
• Consent (especially for marketing messages and where required by law)
• Legal obligations (compliance, lawful requests)

Clients are responsible for ensuring they have a lawful basis (including required consent/opt-in) to message End Users on WhatsApp.

For WhatsApp messaging, End Users should receive messages only after appropriate opt-in/consent where required, and messages must provide a clear way to opt out. End Users can typically opt out by replying with STOP/UNSUBSCRIBE or by following the Client's instructions.

If you are an End User and want to stop messages, contact the business that messaged you (the Client) or use the opt-out method in the message. If needed, you may also contact us using the details in Section 14, and we will route the request to the relevant Client where appropriate.

We may share data with:

• GNext Chat (as applicable to the service delivery and operational support)
• Meta/WhatsApp platform providers involved in message delivery
• Hosting, cloud, logging, monitoring, and security vendors used to operate our systems
• Professional advisors (legal, accounting) and auditors where required
• Authorities where required by law or to protect rights and safety

We do not sell personal data.

We retain personal data only as long as necessary for the purposes described in this policy, including providing services and meeting legal or contractual obligations. We aim to minimize retention of message content and retain only essential data needed for service delivery, troubleshooting, and compliance.

Retention periods may vary by Client configuration and legal requirements. Clients may request deletion/return of certain data subject to contract and law.

We apply reasonable technical and organizational measures to protect data, such as:

• Access controls and least-privilege permissions
• Encryption in transit (and where applicable, at rest)
• Logging/monitoring for abuse and incidents
• Secure credential handling for API keys and webhooks

No system is 100% secure; however, we work to prevent unauthorized access and respond promptly to incidents.

Our services and vendors may process data in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers.

Depending on your location, you may have rights such as:

• Access to personal data
• Correction of inaccurate data
• Deletion (subject to legal/contract limits)
• Objection or restriction of processing
• Data portability

To exercise rights, contact us (Section 14). If you are an End User, we may direct you to the relevant Client because they control the data use.

We may use cookies and similar technologies for site functionality and analytics. You can adjust cookie settings via your browser. If we use a cookie banner on the site, it will provide more details.

Our services are not intended for children, and we do not knowingly collect data from children. If you believe a child has provided data to us, contact us.

We may update this Privacy Policy from time to time. The updated version will be posted on aarogyamhospitalsambhajinagar.com with a revised "Last updated" date.