Privacy statement
Manorama Infosolutions Pvt. Ltd (herein after referred as “ MIPL “ owns the website viz. www.manoramahealthcare.com and its subpages (hereinafter collectively referred to as “website”). As a registered company under the Indian Companies Act, 1956 (No. 1 of 1956) and that company is private limited, the system is assessed and certified for Information Security Management System, so safeguarding your data privacy remains indispensable to us. In an interconnected world, information and related data become an integral part of business and therefore also carries potential ambiguity due to probable e-threats. We at MIPL ensure the protection and safety of your personal data seriously and remain committed in maintaining its confidentiality, availability and integrity of information and data as part of our business process. We ensure that personal data collected during visits to our website is processed by us strictly in accordance with applicable law.
Definition of Privacy Statement at MIPL
A privacy affirmation as a policy build represents as a legal document of www.manoramahealthcare.com. It significantly talks about company establishment and therefore personal data received through various sources and applied procedures to protect and perform its privacy. The privacy policy at MIPL is comprehensive so even a layman can gain the appropriate understanding.
Preface
Manorama Infosolutions Pvt. Ltd. is on a mission to develop patient centric, world-class solutions serving the needs of healthcare. The scope of work includes design, development, testing, implementation and support of Hospital Information Management System – an ERP solution we deploy at our customer premises and render further associated services. We carry a team of leadership and identified consultants or associates each having deep expertise in its own work space ranging from technology, management, administration and more. During the course of work; consequent to operational requirements, MIPL receives various enquiries from the external sources ranging from individuals to group of people or institutions. The enquiries are expressly the self-interest of individuals or institutions contact MIPL for various reasons. Therefore, it further involves exchange of data, information, material that necessarily may or may not be identified as a confidential information in nature. Thus while Manorama Infosolutions Pvt. Ltd. is a registered under the Ministry of Corporate Affairs, Indian Companies Act, 1956 (No. 1 of 1956) and that company is private limited; the company and its members ensure (as necessarily) to safeguard and protect the data (personal, proprietor, customer, patient information) in nature.
Scope of external data privacy
The scope of data treated under the privacy norms ranges from below enumerated sources
Objective of data privacy
The objective of data privacy is to build an abstract relations of trust, assurance, credibility and certainty to our customers, partners and other business counterparts. References: International Standards – Information Security Management System ISO 27001-1-2018
References:
International Standards – Information Security Management System ISO 27001-1-2018
Data generation and its privacy:
Sr.No |
Source of data |
Data specifications |
Access by |
Scope & limitation of use |
1 |
Customer enquiries |
Hospital details as in departments, bed size, facilities, stakeholders, business requirements, commercials etc. |
Presales |
The data received is used for serving the prospect enquiry. The KYC of customer establishment helps the presales team to position right product, demonstration test cases etc. to serve as per the stated customer requirement. |
Privacy assurance: The customer enquiries are controlled and managed by the appointed personnel from Sales & Marketing. |
||||
2 |
Customer Master data |
Department wise customer attributes, SOP’s, Work Flows etc. |
Project team |
The data is necessary to be configured in the product for the software i.e. HIMS to work as per the requirements and expectations in the intended environment. Master data is a part of project deliverable from customer to MIPL project team. |
Privacy assurance: The master data is handled by project resource (employees) as a part of task force. The data is handled through company authorized email communication. The data is stored on a company authorized laptops and desktop system with disabled USB ports. The laptops are screened by the system administration team to identify suspected or possible unfair practices. The back of laptop is retrieved at central data storage repository owned by the system administration team. A signed NDA is undertaken from all employees handling the customer data or similar details and needs to be treated as a confidential information. |
||||
3 |
Patient record |
Demographic details, diagnosis, sensitive clinical details etc. |
Customer Access |
The data is stored at the customer data centre or cloud platform where MIPL has no direct access. |
4 |
Student & Career enquiries |
Personal information as in Name, Address, CTC’s, Education qualification |
HR |
The data is received through
|
Privacy assurance: The CV’s are stored in a laptop secured with disable USB ports. |
||||
5 |
Partner enquiries |
Customer requirements, |
Presales role, |
|
|
|
|
|
|
Privacy assurance: As a requisite of partner appointment; the partner management engages an NDA to be signed between the partner and MIPL to safeguard both company’s mutual privacy matters communicated through the exchange of information during the course of pre-sale engagement of potential business opportunities. |
||||
6 |
Supplier enquiries |
Commercials, methodologies, procedures |
Administration |
The information is communicated through the source of proposal and other specific agreements shared during the supplier appointment or as a part of project management. |
Privacy assurance: The data is handled through company authorized email communication. The data is stored on a company authorized laptops and desktop system with disabled USB ports. The laptops are screened by the system administration team to identify suspected or possible unfair practices. The back of laptop is retrieved at central data storage repository owned by the system administration team. |
||||
7. Cookies Policy: Cookies may be placed on your Internet-enabled device whenever you engage in our online Activities. This allows our websites, applications or collaboration platforms to remember your device and serves several purposes. Although most web browsers automatically accept cookies, you may be able to choose whether to accept cookies via your web browser's settings. You may also be able to delete cookies from your device. However, please be aware that if you do not accept cookies, you may not be able to fully experience some of the features of our online Activities. |