PATIENT DATA & CLINICAL CONSENT
Know what you are agreeing to.
This notice is designed to stand on its own. It explains what information GICare Clinics (“GICare”) collects during secure patient intake, why it is needed, how it is used, and the choices available to you.
Version: gicare-in-intake-2026-09-08-v1Effective: 8 September 2026India-first service
1. Information collected
- Authentication email and account identifier held by the secure authentication service.
- Pseudonymous patient reference; selected care pathway; symptoms; free-text health history; duration; severity; safety-screen answers; and the structured summary.
- Your consent choices, consent version and timestamps.
- Security and operational logs generated by the hosting, authentication and database services.
- Reports, prescriptions and investigation results only when report upload is introduced and you choose to provide them.
2. Specific purposes
GICare processes this information only to authenticate you; organize the concern you submit; identify potential safety signals; prepare a clinician-reviewable summary; route the intake into the clinical queue; coordinate requested care; communicate service information; protect accounts and systems; investigate misuse or incidents; and keep records required by healthcare, tax, insurance, professional or other applicable law.
3. Access and service providers
Information may be accessed by authorized GICare clinicians and staff who need it for the purposes above, and by contracted technology providers that supply hosting, database, authentication, email, security or support services. GICare does not sell patient information or permit its use for behavioural advertising. The primary patient database is hosted in India; essential providers may process limited account or technical information under their contractual and legal arrangements.
4. AI-assisted processing
Automated tools may structure, classify, translate or summarize the information you provide and may help surface potential safety concerns. These tools can be incomplete or wrong. They do not make an autonomous diagnosis, prescribe treatment or replace professional judgment. Every clinical output requires review by an authorized clinician.
5. Remote-care limitations
Submitting an intake is a request for remote clinical review. It is not emergency care and does not by itself establish a diagnosis, prescription or treatment plan. A clinician may decide that telephone, video, physical examination, testing or urgent in-person care is necessary. You remain responsible for seeking emergency assistance without waiting for an online response when symptoms are severe or rapidly worsening.
6. Retention and security
GICare uses access controls, encrypted transport, database row-level security and separated clinical roles. No system can be guaranteed risk-free. Information will be retained only while needed for the stated purposes or for a period required by applicable healthcare, professional, limitation, tax, insurance, security or other law. A formal retention schedule and processor register must be approved before full clinical launch.
7. Your choices and rights
You may decline and leave before submitting. After submission, you may request access, correction, completion, updating or erasure of personal data, raise a grievance, or withdraw consent as easily as it was given. Withdrawal does not invalidate earlier lawful processing and may not require deletion where retention is legally necessary. A rights request will require secure identity verification. The monitored privacy contact and escalation process will be displayed here before enrollment opens beyond invited beta users.
8. Your declarations
By selecting each required checkbox and submitting, you confirm that you initiated or requested this intake; the information is accurate to the best of your knowledge; you understand the data-processing, remote-care and AI limitations above; and you consent specifically to the processing required to provide this service. Your acceptance is stored with this notice version and timestamp.
9. What consent does not do
Your consent does not waive statutory consumer, privacy or patient rights. It does not excuse negligence, professional misconduct, inadequate security, unauthorized processing or a failure to comply with applicable law. It records informed permission for the specific processing and remote-care activities described above.
Clinical beta notice: This operational draft must be reviewed by an Indian healthcare and data-protection lawyer and completed with the registered entity, clinician registration and grievance-contact details before wider patient enrollment.