Medical Records & Data Privacy

How we protect, store, and process your health information

SharedOnly with your consent
KeptUp to 12 months
Deleted on requestWithin 30 days

From upload to deletion

  1. 1. You upload

    Your reports travel over an encrypted (HTTPS) connection and are stored outside the public website.

  2. 2. We share

    Only with the international patient desk and specialists of the hospitals you ask us to approach.

  3. 3. We keep

    Up to 12 months, so follow-up consultations and delayed treatment can be coordinated.

  4. 4. We delete

    Stored reports are deleted automatically after 12 months, or within 30 days of your request.

Last updated: September 2026

Our Commitment to Privacy

At Massvaa Care, we recognise that your medical records and diagnostic files contain highly sensitive personal data. We handle them in line with India’s Digital Personal Data Protection Act, 2023, and share them only as described on this page.

1. Secure Transmission & Uploads

Medical files and personal details submitted through our forms are sent over an encrypted HTTPS (TLS) connection, which protects your reports, clinical summaries and passport copies from interception in transit.

We do not share your medical records with any third party without your explicit consent. When you submit your reports through our form, you must tick the consent box. This authorises our coordination team to send your documents to partner hospitals and their specialists for the sole purpose of evaluating treatment options and preparing cost estimates.

3. Data Sharing with Hospital Teams

Records are shared only with the international patient desk and the specialists evaluating your case at the partner hospital. We ask hospitals to handle your information in line with Indian healthcare confidentiality rules. Once a hospital has your records, it holds them under its own privacy policy.

4. Data Retention and Deletion

  • Retention Period: We retain your medical reports and communication history for up to 12 months following your inquiry or treatment completion. This allows us to coordinate follow-up consultations and review historical estimates if your treatment is delayed.
  • Right to Deletion: You can request the deletion of your medical reports and personal details from our local storage at any time by emailing us at info@massvaacare.com. We will process your request and delete files within 30 days, subject to regulatory compliance.

5. Privacy Contact

For any question about how we process your personal data, or to request access, correction or deletion of your records, write to info@massvaacare.com with the subject “Data request”.

6. Your rights under India’s data protection law

Massvaa Care, a partnership firm registered in Delhi (GSTIN 07ACFFM1251Q1ZX), decides how your personal data is used for our coordination service, and is responsible for it under the Digital Personal Data Protection Act, 2023.

  • Access and correction. You can ask what personal data we hold about you, and ask us to correct or complete it.
  • Withdrawing consent. You can withdraw your consent at any time by writing to us. We then stop sharing your records with hospitals; anything already shared with a hospital is held by that hospital under its own policy.
  • Erasure. You can ask us to delete your data, as described in section 4.
  • Nominating someone. You can name a person to exercise these rights for you if you are unable to, for example because of illness.
  • Grievances. Email us with the subject “Data grievance”. If you are not satisfied with our response, you can complain to the Data Protection Board of India. info@massvaacare.com