Privacy Policy

Last updated: [DD Month 2026]

Ebisu Diagnostics (“Ebisu Diagnostics“, “we“, “us“, “our“) is operated by [Registered legal entity name], having its registered office at [registered address]. We provide diagnostic imaging, cardiac & neuro diagnostics, laboratory testing, health packages and home sample collection services across our centres in Bengaluru.

We respect your privacy and are committed to protecting the personal and health information you share with us. This Privacy Policy explains how we collect, use, store, share and protect your personal data when you visit https://ebisudiagnostics.in (the “Website”), book an appointment or home sample collection, purchase a test or package online, visit any of our diagnostic centres, or contact us by phone, email, WhatsApp or social media.

This Policy is published in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and rules made thereunder, and other applicable Indian laws. By using our Website or services, you consent to the practices described in this Policy.

1. Information We Collect

a) Information you provide to us

• Contact & booking details: name, phone number, email address, preferred centre/location, preferred date, services/packages/lab tests selected, and any comments or messages submitted through our forms.
• Account & order details: if you create an account or purchase a test or package on our Website, your login details, billing/shipping address and order history.
• Patient registration details: age, date of birth, gender, address (for home sample collection) and government ID where required by law or test protocol.
• Health information: doctor’s prescription, referral details, medical history, current medications, pregnancy status, implants/devices (for MRI safety screening), allergies, previous reports and other information necessary to perform your test safely and accurately.
• Test data: biological samples, test results, diagnostic images (MRI, CT, X-ray, ultrasound, mammography, OPG, CBCT), ECG/ECHO/EEG/EMG/NCV/TMT/PFT recordings and the reports generated from them.
• Payment information: amount paid, mode of payment and transaction reference. We do not store your full card number, CVV or UPI PIN — these are processed directly by our payment gateway partners.
• Corporate / insurance details: employer, insurer or TPA details if your test is arranged under a corporate, pre-employment or insurance programme.

b) Information collected automatically

When you visit our Website, we may automatically collect your IP address, browser type, device information, pages visited, time spent, and referring URLs through cookies and similar technologies (see Section 8).

c) Information from third parties

We may receive your information from your referring doctor or hospital, your employer or insurer (for corporate/insurance tests), or a family member or caregiver who books on your behalf.

2. How We Use Your Information

We use your information to:

1. Schedule, confirm, reschedule or remind you about appointments and home sample collections;
2. Process online orders and payments, issue invoices and handle refunds;
3. Perform diagnostic tests and prepare, verify and deliver your reports;
4. Carry out safety screening before procedures such as MRI, CT with contrast, X-ray and mammography;
5. Communicate critical or urgent results to you or your referring doctor;
6. Send reports and test-related updates via email, SMS, WhatsApp or phone;
7. Respond to your enquiries, feedback and complaints;
8. Maintain quality standards and comply with NABH accreditation requirements;
9. Comply with legal and regulatory obligations, including record-keeping under the PCPNDT Act, 1994 and notifiable disease reporting to health authorities;
10. Improve our Website, services and patient experience; and
11. Send you information about health packages, offers and health awareness — only with your consent, which you may withdraw at any time.

We will never use your health information for marketing purposes without your explicit consent.

3. Legal Basis for Processing

We process your personal data on the basis of (a) your consent, given when you submit a form, book or purchase a test, or register at our centre; (b) legitimate uses permitted under the DPDP Act, such as responding to medical emergencies, complying with law, or fulfilling court orders and government directions; and (c) the provision of services you have requested.

You may withdraw your consent at any time (see Section 9). Withdrawal will not affect processing already carried out, but may prevent us from providing certain services.

4. Sharing of Information

We do not sell, rent or trade your personal or health information. We share it only as follows:

• Your referring doctor / hospital — when you have been referred by them or request us to share your reports.
• Partner / reference laboratories — for specialised tests (e.g. certain genetic or allergy tests) that are processed outside our centres.
• Service providers — IT and cloud hosting, report delivery (email/SMS/WhatsApp platforms), payment gateways, sample-transport logistics and our website platform providers, who are bound by confidentiality obligations and may use your data only to perform services for us.
• Employer / insurer / TPA — only for corporate, pre-employment or insurance-linked tests you have agreed to, and only to the extent required.
• Government and regulatory authorities — where required by law, such as notifiable disease reporting, PCPNDT records, court orders or law-enforcement requests.
• Nominee / authorised person — a family member or caregiver you have authorised to collect your reports.
• Business transfers — in the event of a merger, acquisition or restructuring, subject to equivalent privacy protections.

5. Data Security

We implement reasonable technical and organisational security measures — including access controls, role-based permissions, secure storage of reports and images, encrypted transmission where possible, staff confidentiality agreements and periodic security reviews — to protect your information against unauthorised access, loss, misuse or alteration.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a personal data breach affecting you, we will notify you and the Data Protection Board of India as required by law.

6. Data Retention

We retain your information only as long as necessary for the purposes described in this Policy, or as required by law, medical guidelines or accreditation standards. For example:

• Medical records and reports are retained for the period prescribed by applicable medical, regulatory and NABH standards.
• PCPNDT records (ultrasound) are retained for the legally mandated period (currently a minimum of two years).
• Website enquiry and marketing data are retained until you withdraw consent or the data is no longer needed.

Biological samples are stored only for the period needed for testing, quality control and possible repeat testing, and are then disposed of in accordance with the Bio-Medical Waste Management Rules.

7. Report Delivery

Reports may be delivered by email, WhatsApp/SMS link or in hard copy at our centre. Please ensure the email address and phone number you provide are accurate. Ebisu Diagnostics is not responsible for disclosure resulting from incorrect contact details provided by you, or from unauthorised access to your personal email, phone or messaging accounts.

8. Cookies and Third-Party Links

Our Website uses cookies and similar technologies to enable website functionality (including the shopping cart and checkout), remember your preferences, understand how visitors use the site (analytics), and improve our services and advertising. You can control or disable cookies through your browser settings; however, some features of the Website may not function properly without them.

Our Website contains links to third-party sites and services (such as Google Maps, Facebook and Instagram). We are not responsible for the privacy practices of these third parties and encourage you to read their privacy policies.

9. Your Rights

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how it is processed;
• Correct and update inaccurate or incomplete data;
• Erase your data, subject to our legal obligations to retain certain medical records;
• Withdraw consent for processing, including opting out of marketing messages;
• Grievance redressal through our Grievance Officer; and
• Nominate another person to exercise these rights on your behalf in the event of death or incapacity.

To exercise any of these rights, write to support@ebisudiagnostics.in. We may need to verify your identity before processing your request.

10. Children’s Data

We collect personal data of children (individuals under 18 years) only with the verifiable consent of a parent or legal guardian, and only for the purpose of providing diagnostic services. We do not track, profile or target advertising to children.

11. Grievance Officer

If you have any concerns or complaints regarding the processing of your data, please contact our Grievance Officer:

Name: [Grievance Officer name]
Designation: [Designation]
Email: [grievance@ebisudiagnostics.in]
Phone: [Phone number]
Address: [Registered address], Bengaluru, Karnataka

We will acknowledge your complaint within [48 hours] and endeavour to resolve it within [30 days]. If you are not satisfied with our response, you may approach the Data Protection Board of India.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically.

13. Contact Us

Ebisu Diagnostics
Email: support@ebisudiagnostics.in | appointments@ebisudiagnostics.in
Phone: 080 2258 5555 / 080 2258 7777

• HSR Layout: 2342, 24th Main Road, Opp. Gayatri Temple, 17th Cross Road, 1st Sector, Bengaluru – 560102
• Dasarahalli: 98/1, Opp. Dasarahalli Metro Station, Tumkur Main Road, Vidya Nagar, Bengaluru – 560057
• BTM Layout: 1033, 1st Block, BTM 4th Stage, Devarachikkanahalli, Bengaluru – 560068