1. Scope
This policy applies to the MyHospital website, platform administration, hospital tenant applications, demonstration environment, support interactions, commercial quotation/onboarding workflows and related services operated for customers.
A hospital using MyHospital remains responsible for determining which patient, employee, vendor and operational information it is authorized to collect and use in its own operations.
2. Customer & Platform Roles
Hospital customers control the hospital records entered into their tenant environment and determine authorized staff access through the platform's role and permission features. AFCKS Technologies operates the platform infrastructure and processes information as required to provide, secure, support, back up and maintain the subscribed service.
Platform-level support or administration does not remove the hospital's responsibility to maintain appropriate consent, legal basis, confidentiality, staff authorization and record-management practices.
3. Information We Handle
Website and commercial contacts
- Name, hospital name, business contact details and inquiry information.
- Quotation, agreement, implementation, migration, training and payment-verification records.
- Support communications and service requests.
Hospital tenant information
- Patient registration and contact information entered by an authorized hospital.
- Appointments, consultation records and other clinical/operational records used by enabled modules.
- Billing, pharmacy, laboratory, radiology, IPD, HR, procurement, quality and other module information where those modules are enabled.
- Staff accounts, roles, permissions and audit records.
Technical information
- Login, request, security, audit and error information needed to operate and protect the service.
- Device/browser/network information normally transmitted when accessing a web application.
4. How Information Is Used
Information may be used to:
- provide and operate the subscribed hospital platform;
- authenticate users and enforce tenant, module and role permissions;
- process hospital workflows requested by authorized users;
- provide quotations, onboarding, setup, migration and training services;
- support customers and investigate technical or security incidents;
- maintain backups, recovery, auditability, reliability and platform security;
- meet lawful accounting, tax, contractual or regulatory record requirements applicable to the platform operator.
5. Hospital & Health Data
Patient and hospital operational data should be entered only by organizations and users authorized to do so. Access is controlled through hospital tenancy, configured modules and role-based permissions.
The platform is not intended to replace professional judgment, statutory medical record obligations, patient consent processes or a hospital's own clinical governance procedures.
6. Demo Environment
The shared Demo Hospital is a learning and product-exploration environment. It is intended to use synthetic demonstration data and must not be used to store real patient, employee, payment-card or other confidential production information. Demo data may be reset automatically or manually without preservation.
8. Security
The platform uses controls designed to reduce unauthorized access, including authentication, role-based permissions, tenant database separation, audit records, backups and operational release checks. No internet-connected service can guarantee absolute security.
Customers are responsible for protecting their user credentials, promptly removing unnecessary access and notifying support of suspected unauthorized use.
9. Retention
Production records are retained according to customer requirements, configured service behavior, contractual obligations and applicable record-retention needs. Backup copies may continue to exist for their normal backup-retention period after an operational record changes.
Commercial, billing, tax and agreement records may be retained for legitimate business, audit and legal requirements.
10. Requests & Rights
Requests concerning patient or employee records should normally be directed first to the hospital that created or controls the record. Where appropriate, AFCKS Technologies will assist the customer in addressing technically supported access, correction, export or deletion actions.
12. Minors
Hospitals may provide care to minors and may therefore maintain records relating to minors as part of authorized healthcare operations. The public website and commercial onboarding process are not directed at children acting independently as business customers.
13. Changes to This Policy
This policy may be updated as platform features, legal requirements, integrations or operating practices change. The current version will be published at this URL with its updated date.
14. Contact
AFCKS Technologies
G-25, 2nd Floor, Shantikunj
Opposite GPO, Beside Nucleus Mall
Sadhu Vaswani Road, Camp
Pune - 411001
Support: mohammed.raza@afcks.com