NABH Hospital Accreditation Portal (https://hcoaccreditation.nabh.co) (hereinafter referred to as the "Program Portal") is a customised, IT-enabled digital platform developed, operated and maintained by Quality Council of India (QCI) ("the Company"), acting as Implementing Partner of the National Accreditation Board for Hospitals & Healthcare Providers (NABH). In this Privacy Policy, "we", "our" and "us" mean NABH and the Company; "you" and "your" mean any person who accesses and uses this portal.
This Privacy Policy covers the Program Portal's treatment of personally identifiable information that the Company collects when you are on this portal and when you use its services. It also covers the Company's treatment of personally identifiable information that its partners share with it. This policy does not apply to companies that the Company does not own or control, or to people that the Company does not employ or manage.
Protecting your privacy is important to us, and we are committed to safeguarding it. This policy explains what personal data the Program Portal collects from you (or that you provide), how it is used, and when it may be shared. It should be read together with the Terms & Conditions of the Program Portal. By using the portal you are regarded as having read and accepted this policy; please do not use the portal or its services if you do not accept it. This policy may be updated from time to time; please review this page periodically for the latest version.
"Personal data" means information relating to an identified or identifiable person; an IP address may also be personal data. When you use the portal, it collects data that you provide and data generated through your use.
The portal endeavours to handle your personal data responsibly and in line with applicable Indian law. It processes your data only where it has a lawful reason to do so — for example with your consent, to provide the services you have requested, or to meet a legal or regulatory obligation — and only to the extent necessary for those purposes.
We collect personal information, including but not limited to:
Certain areas and features of the portal are available without providing any information. However, other features — such as registration and creating assessor and other role-based users — require details such as name, address, official email and mobile number. Any information obtained from a third party, based on your consent, is used only in accordance with internal procedures and safeguards, to operate, develop or improve the service.
Before you disclose the personal information of another person, you must obtain that person's consent to both the disclosure and the processing of that information in accordance with this policy. The portal will not sell or rent your personal information to anyone, for any reason, at any time.
The portal collects and uses your personal information only as follows ("the Purpose"):
By registering, you confirm that the information you submit is accurate and that you consent to it being collected, stored and processed for accreditation-related purposes as described in this policy, or as otherwise required by law. Your account details and this consent are stored with NABH and the Program Portal.
As a matter of policy, the portal does not disclose personal information to anyone other than authorised employees, officers, professional advisers and third-party service providers, as reasonably necessary for the purposes set out in this policy.
Some products and services offered by third parties are integrated into the portal, such as email delivery (e.g. SendGrid) and SMS. Where the portal uses such services and discloses information to them, their use of that information is governed by their own privacy policies, and they are responsible for the information they process.
The portal decides how and why your personal data is processed and is responsible for handling it in accordance with applicable law. You can reach the support team using the contact details on the Contact Us page.
Personal data may be shared with government authorities, law-enforcement officials or regulators where required for the purposes above, where mandated by law, or where necessary for the legal protection of our legitimate interests in accordance with applicable laws.
We may retain your personal data for a period consistent with the purpose of collection. We determine the appropriate retention period based on the amount, nature and sensitivity of the data, the potential risk of harm, whether the purpose can be achieved by other means, and applicable legal requirements. Where data cannot, for technical reasons, be fully deleted, we put measures in place to prevent further use.
If the personal information you provided when you applied changes, you may update it through the service. We retain your information for as long as your account is active or as needed to provide you services.
As with most websites, we automatically gather certain information and store it in log files. This may include IP addresses, browser type, internet service provider, referring/exit pages, operating system, date/time stamp and clickstream data. We may combine this with other information to improve our services, functionality and analytics.
If enabled, we may place cookies on your device that store small amounts of data about your visit. Cookies help identify pages viewed and remember preferences on return visits. You can control cookies at the browser level; if you reject cookies you may still use the site, though some features may be limited.
The portal may include links to other websites whose privacy practices may differ from ours. If you submit personal information to those sites, it is governed by their privacy policies, and those sites are responsible for the information you provide to them. We encourage you to read the privacy policy of any site you visit.
The portal reserves the right (and you authorise us) to share or disclose your personal information where it determines, in its reasonable discretion, that disclosure is necessary or appropriate:
The portal provides registered users with periodic emailers and email/SMS alerts. You may opt out of promotional communications by following the instructions in those messages. Opting out will not stop service-related emails/SMS, such as accreditation and account alerts.
You are responsible for maintaining the confidentiality and security of your Login ID and password, and must not share these credentials with any third party. We are not responsible if someone else accesses your account using credentials obtained from you, or through a violation by you of this policy or the portal's Terms & Conditions.
If you have a security-related concern, please contact us at the support email listed on the Contact Us page.
We may update this Privacy Policy to reflect changes in our information practices. We encourage you to review this page periodically for the latest information.
If you have questions, comments, concerns or feedback regarding this Privacy Policy or any privacy or security matter, please write to the support email address listed on the Contact Us page of the Program Portal.