Is employee health data kept confidential?

Absolutely. Individual health data is never shared with employers. TGHC only provides anonymised, aggregated population-level insights. All data handling follows DPDP Act and applicable Indian healthcare privacy standards.

How is employee data privacy handled?

TGHC is compliant with India's Digital Personal Data Protection Act. All health data is encrypted at rest and in transit, stored on ISO-certified infrastructure, and never sold or shared with third parties.

How is employee health data kept private from HR?

All individual health records are fully confidential. HR receives only anonymised aggregate dashboards — no personal data, diagnoses, or prescriptions are ever shared with employers.

Who do I contact about my records?

Write to our Data Protection Officer at privacy@tghclinic.com. You retain rights to request an export of your medical records, update contact details, revoke marketing permissions, or request deletion subject to statutory medical record retention.

Data Privacy

Privacy by
Design.

Individual health records stay between the member and licensed clinicians. Employers see only anonymised, aggregate insights.

Partner With Us HOW WE PROTECT DATA

Encrypted, role-restricted health records on the TGHC platform

Individual clinical records are never shared with employers or corporate HR without explicit written patient authorization.
Our core commitment

Confidential by Default

Medical Confidentiality Is Sacrosanct

Consultations, electronic medical records, lab reports, and therapy discussions stay between the member and licensed healthcare practitioners.

TGHC earns no revenue from data sharing. Health data is never sold to labs, pharmaceutical companies, insurers, or any third party without explicit consent. HR receives only anonymised population-level indices to guide organisational wellbeing investments.

See How We Protect Data

How Data Is Governed

Zero Employer Access to Individual Records

Privacy by design on ISO-certified infrastructure — so members can be honest with their care team, and HR can still see organisational outcomes.

Members

Records stay with the care team

Consultations, EMR, labs, and therapy notes are confidential between the patient and licensed practitioners. Never sold. Never shared without consent.

Employers

Only anonymised, aggregate insight

HR sees platform usage, health trends, and ROI metrics — never personal data, diagnoses, or prescriptions. Dashboards update without exposing individuals.

Core Privacy & Governance Standards

DPDP Act

All data handling follows India’s Digital Personal Data Protection Act and applicable Indian healthcare privacy standards.

Encryption

Electronic protected health information is encrypted at rest using AES-256 and in transit via TLS 1.3.

Access control

Medical records are restricted to authorised treating physicians, nurses, and laboratory personnel via role-based access.

No third parties

TGHC does not share data with labs, pharma, insurers, or other vendors for their commercial use. We earn nothing from data.

Your rights

Request an export, update contact details, revoke marketing permissions, or ask for deletion subject to statutory medical record retention.

Your Data Rights

Under Indian data protection law you stay in control of access, correction, marketing, and deletion — with a named officer to write to.

Access

Export your records

Request a complete export of medical records held by TGHC. We respond through the Data Protection Officer.

Correction

Update contact details

Keep email, phone, and address current so care teams and appointment notices reach the right person.

Marketing

Revoke permissions

You can stop marketing messages at any time. Clinical care communications stay separate from promotions.

Deletion

Request erasure

Ask for deletion subject to statutory medical record retention. Clinical files may be kept where Indian law requires.

The Privacy Journey

From First Record to Member Control

Collection, encryption, clinical use, your rights, and a named officer — the same transparent sequence for every member.

Collect

Only What Care Requires

Contact details, clinical history, vitals, labs, and prescriptions are collected to deliver care. Telehealth streams are encrypted. We do not record video consultations without prior explicit consent.

Protect

Encrypt in Transit & at Rest

ePHI is encrypted at rest (AES-256) and in transit (TLS 1.3), stored on ISO-certified infrastructure, with role-based access for treating clinicians only.

Use

Care First, Insights Second

Information is used to facilitate consultations, prescriptions, labs, and reversal milestones. Corporate clients receive anonymised aggregate indices — never named records.

Rights

You Stay in Control

Under Indian data protection law you can request an export, update details, revoke marketing, or request deletion subject to statutory medical record retention.

Escalation

A Named Privacy Officer

Questions or grievances go to privacy@tghclinic.com — Attn: Chief Compliance Officer, The Good Health Clinic.

All stages strictly adhere to India's DPDP Act 2023 and ISO 27001 data governance standards.

Who Handles Your Data

Access is narrow on purpose. Members, clinicians, and a named privacy officer — not an open employer file.

Data Protection Officer

privacy@tghclinic.com

Questions, exports, deletion requests, and grievances. Attn: Chief Compliance Officer, The Good Health Clinic.

Treating clinicians

Role-based access only

Physicians, nurses, and laboratory personnel who need the record to deliver care — not HR, not third-party marketers.

Platform security

AES-256 and TLS 1.3

ePHI encrypted at rest and in transit on ISO-certified infrastructure. TGHC earns nothing from selling data.

Employer dashboards

Aggregate insight only

HR sees usage, trends, and ROI metrics. No names, diagnoses, or prescriptions — ever — without written authorisation.

Frequently
Asked
Questions.

: TGHC offers end-to-end corporate healthcare including Virtual Care, Onsite Clinics, Health Transformation Programs, Health Camps, Mental Health Support, Employee Engagement Programs, and Workplace Wellness Events — all designed to improve employee health and measurable business outcomes.
: Yes. Every organisation has different workforce needs. TGHC designs tailored healthcare solutions based on employee demographics, health risks, company size, industry, and business objectives — so no two programmes are identical.
: Virtual Care can typically be live within days. Onsite clinics, health camps, and transformation programmes are planned and deployed on a timeline aligned with your operational requirements.
: Yes. TGHC supports organisations across India through a combination of digital healthcare services and onsite programmes delivered by experienced clinical teams in your city.
: Every programme is tracked against clinical and engagement metrics — HbA1c reduction, blood pressure control, absenteeism rates, and member satisfaction scores. You receive regular outcome reports with data you can share with leadership.
: Absolutely. Individual health data is never shared with employers. TGHC only provides anonymised, aggregated population-level insights. All data handling follows DPDP Act and applicable Indian healthcare privacy standards.
: Schedule a consultation with our team. We'll understand your workforce, recommend the right healthcare strategy, and create a customised implementation plan aligned with your goals — at no cost to explore.

Ready To Take Charge Of Your Health Story?

Help us write the next chapter. Sign up, take charge of your health, or partner with us as an employer, doctor, or insurance plan.

No commitment required. We respond within 24 hours.

Also explore

Health Transformation Programs — 3–6 month outcome-focused care →Virtual Care Platform — 24/7 digital health support →Onsite Clinics — clinical infrastructure at your workplace →Individuals — personal plans and home care →

Your data is never shared with third parties

Science-led care trusted by employers across India