Privacy Policy

We collect only what we need to deliver safe diagnostic care:

• Identifying details you provide — name, age, gender, phone number, email, and address used for sample collection and report delivery.
• Booking data — tests and scans you book, centre and time chosen, payment receipts, and prescriptions you upload.
• Clinical information generated during your tests — sample readings, images, and physician interpretations that make up your report.
• Site usage — anonymised analytics such as pages viewed, device type, and approximate location, used to improve the site experience.

We use your information to:

• Schedule appointments, coordinate home sample collection, and run your tests.
• Deliver reports to you via app, email, or WhatsApp and notify you when results are ready.
• Contact you about your bookings — confirmations, reminders, rescheduling, or post-test follow-ups.
• Improve our services and content, troubleshoot issues, and detect fraud or misuse.
• Meet legal, regulatory, and accreditation obligations (including NABL audit requirements).

We do not sell your personal or health data to advertisers or data brokers.

Your data is shared only when necessary, and only with:

• Your referring physician, if you have asked us to send the report to them.
• Our clinical and operations teams, on a role-based, need-to-know basis to complete your booking.
• Trusted service providers — payment gateways, sample logistics, secure cloud hosting, and SMS / email delivery partners — under contract to protect your data and use it only for the service we engage them for.
• Regulators or courts, if we are legally required to disclose specific information.

We use industry-standard safeguards designed for health data:

• Encryption in transit (TLS) and at rest.
• Role-based access for our clinical team, with the minimum privileges needed for each role.
• Audit logs on every record access, reviewed regularly.
• Physical reports stored in secure, access-controlled rooms at our centres.
• Periodic security reviews, vulnerability scans, and staff training on data handling.

No system is perfectly secure. If we ever become aware of a breach that affects your data, we will notify you promptly in line with applicable law.

Clinical records are retained for the periods required under applicable medical-records regulations (typically several years after the last interaction). Non-clinical data, such as marketing preferences, is kept only while it is needed for the purpose we collected it. You can ask us to delete or anonymise data we are not required to keep.

At any time you can:

• Request a copy of the records we hold about you.
• Correct inaccurate or outdated details.
• Withdraw consent for non-clinical communication such as marketing emails or wellness tips.
• Ask us to delete data we are not legally required to keep.

Email info@cadabamsdiagnostics.com with the subject line "Privacy request" and we will respond within 30 days.

If a child is the patient, we collect their clinical details under the consent of a parent or legal guardian. We do not market our services to children directly.

We will update this policy when our practices change or when required by law. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be highlighted at the top.