Effective Date: 1 August 2026
Last Updated: 1 August 2026
Royal Cancer Institute & Research Centre, a unit of Oncocare Medicals Pvt. Ltd. (“RCIRC”, “Hospital”, “Institute”, “we”, “our” or “us”), respects the privacy of patients, attendants, caregivers, learners, students, healthcare professionals, website visitors, job applicants and other individuals who interact with us.
This Privacy Policy explains how we collect, use, store, share and protect personal information through our hospital, website, appointment forms, learning platform, online courses, payment facilities, telephone, email, SMS, WhatsApp and other authorised communication channels.
1. Organisation Details
Royal Cancer Institute & Research Centre
A unit of Oncocare Medicals Pvt. Ltd.
113/103 A, Swaroop Nagar,
Kanpur, Uttar Pradesh 208002, India
Email: consult@royalcancer.com
Phone: +91 8400 333 105
Website: www.royalcancer.com
2. Scope of This Policy
This Privacy Policy applies to information collected through:
- Our hospital website.
- Appointment and consultation forms.
- Online consultation or callback requests.
- Contact and enquiry forms.
- Patient-registration facilities.
- Online course and webinar registrations.
- Learner or student accounts.
- Course assessments and certificates.
- Payment and billing facilities.
- Career and recruitment applications.
- Email, telephone, SMS and WhatsApp communication.
- Live classes, webinars and recorded sessions.
- Any related digital service operated by or on behalf of RCIRC.
Clinical information collected during an in-person consultation, hospital admission, investigation or treatment may also be governed by hospital consent forms, medical-record procedures and applicable healthcare laws.
3. Information We May Collect
3.1 Identity and contact information
We may collect:
- Full name.
- Age and date of birth.
- Gender.
- Postal address.
- Mobile and telephone numbers.
- Email address.
- Photograph.
- Identity documents where verification is required.
- Patient identification number or UHID.
- Professional registration number.
- Organisation, employer or institution information.
3.2 Patient and healthcare information
We may collect:
- Symptoms and health concerns.
- Medical history.
- Diagnosis and treatment information.
- Prescriptions.
- Laboratory and diagnostic reports.
- Medical images.
- Allergies.
- Medicines currently being taken.
- Previous surgeries or treatments.
- Insurance, TPA or government-scheme information.
- Appointment and consultation details.
- Emergency-contact information.
- Information provided by caregivers or authorised representatives.
Health and medical information is confidential and is processed only for legitimate healthcare, legal, operational or safety-related purposes.
3.3 Learner and course information
Where you create an account, purchase a course or attend an educational programme, we may collect:
- Educational qualifications.
- Professional designation.
- Medical or healthcare speciality.
- Professional registration details.
- Work experience.
- Institution or employer.
- Course registrations.
- Learning progress.
- Modules accessed.
- Attendance records.
- Video-viewing activity.
- Quiz and assessment results.
- Assignments and submissions.
- Faculty feedback.
- Certificate and completion information.
- Course-support requests.
- Live-session participation.
3.4 Account and login information
We may collect:
- Username.
- Registered email address.
- Registered mobile number.
- Encrypted or securely stored password information.
- OTP and verification records.
- Login date and time.
- Device information.
- IP address.
- Failed login attempts.
- Account-recovery information.
- Security and access logs.
RCIRC will never ask you to disclose your password, UPI PIN, card PIN, CVV, net-banking password or banking OTP.
3.5 Payment and billing information
Where payment is accepted, we may collect:
- Billing name.
- Billing address.
- GST or tax details.
- Course or service purchased.
- Amount paid.
- Payment status.
- Transaction reference.
- Invoice details.
- Refund status.
- Limited payment-method information provided by the payment gateway.
Payments may be processed by an authorised bank or payment-service provider.
RCIRC does not ordinarily store complete card numbers, CVV numbers, UPI PINs, banking passwords or OTPs.
3.6 Recruitment information
Where you apply for a job or training opportunity, we may collect:
- Resume.
- Qualifications.
- Employment history.
- Skills and experience.
- Professional references.
- Salary information.
- Interview notes.
- Identity and contact details.
3.7 Automatically collected information
When you visit or use our website or learning platform, we may collect:
- IP address.
- Browser type.
- Device type.
- Operating system.
- Pages visited.
- Time spent on pages.
- Referring website.
- Approximate location derived from IP address.
- Cookie identifiers.
- Website errors.
- Security logs.
- Course-platform activity.
- Device and session information.
4. How We Use Personal Information
We may use personal information to:
- Respond to enquiries.
- Arrange and confirm appointments.
- Provide consultations and healthcare services.
- Coordinate treatment and follow-up.
- Maintain medical and administrative records.
- Communicate with doctors, nurses and authorised personnel.
- Process insurance, TPA or government-scheme requirements.
- Provide emergency, referral or ambulance coordination.
- Create and manage learner accounts.
- Verify course eligibility.
- Process course enrolments and payments.
- Provide access to purchased courses.
- Conduct live classes and webinars.
- Track learning progress and attendance.
- Administer assessments.
- Issue and verify certificates.
- Prevent account sharing, fraud, piracy and unauthorised access.
- Process invoices, cancellations and refunds.
- Provide technical and learner support.
- Send appointment, payment, course and security notifications.
- Improve website and course-platform performance.
- Conduct quality improvement and statistical analysis.
- Process job applications.
- Comply with legal, regulatory, accreditation, tax, accounting and record-retention requirements.
- Protect the safety, rights and property of patients, learners, staff and RCIRC.
- Send marketing or awareness communication where separate consent has been obtained.
5. Consent
Where consent is required, we may obtain it through:
- A website checkbox.
- Online form submission.
- Written consent.
- Electronic consent.
- Recorded verbal consent.
- Course enrolment or checkout acceptance.
- Another clear affirmative action.
You may withdraw consent for future consent-based processing by contacting us.
Withdrawal of consent will not affect processing already lawfully completed.
We may continue to retain or process information where necessary for:
- Medical treatment.
- Patient safety.
- Maintaining medical records.
- Course and certificate records.
- Tax and accounting requirements.
- Payment disputes.
- Fraud prevention.
- Insurance requirements.
- Legal claims.
- Compliance with law.
- Public-health or regulatory obligations.
6. Health and Medical Information
Information submitted through appointment, callback or consultation forms may include health concerns.
Submitting health information through the website:
- Does not create an automatic doctor–patient relationship.
- Does not constitute diagnosis or treatment.
- Does not guarantee an appointment.
- Must not be used for emergencies.
For emergencies, call the hospital’s emergency numbers or visit the nearest emergency facility.
7. Information Submitted for Another Person
Where you submit information for a patient, child, dependent, employee, colleague or another individual, you confirm that:
- You are authorised to provide the information.
- The information is accurate.
- You have obtained any required permission.
- You will inform the concerned person about this Privacy Policy where appropriate.
8. Children’s Information
Information relating to a person below 18 years should ordinarily be submitted by a parent, lawful guardian or authorised caregiver.
A learner below 18 years may create or use an account only with appropriate parental or guardian consent.
Certain medical or professional courses may be restricted to adults or qualified professionals.
We do not knowingly use children’s personal information for behavioural advertising.
9. Sharing of Information
We may share information, where reasonably necessary, with:
- Doctors, nurses and authorised hospital personnel.
- Diagnostic centres and laboratories.
- Pharmacies.
- Referral hospitals.
- Ambulance and emergency-service providers.
- Insurance companies and TPAs.
- Government health schemes.
- Course faculty and authorised academic staff.
- Learning-management and video-hosting providers.
- Website and cloud-hosting providers.
- Email, SMS and WhatsApp communication providers.
- Payment gateways, banks and payment networks.
- Accounting, tax, audit and legal professionals.
- Certificate-generation and verification providers.
- Cybersecurity and technical-support providers.
- Government authorities, courts, regulators or law-enforcement agencies where required by law.
- Research or academic institutions, subject to appropriate consent, anonymisation and approvals.
- A lawful successor organisation in connection with restructuring, merger or transfer of business.
Service providers are expected to use information only for authorised purposes and maintain appropriate confidentiality and security.
We do not sell patient, learner or website-user personal information.
10. Clinical Cases, Research and Education
RCIRC may use anonymised or de-identified information for:
- Medical education.
- Quality improvement.
- Statistical analysis.
- Research.
- Clinical discussion.
- Professional training.
Identifiable patient information will not ordinarily be used in educational content without appropriate permission or another lawful basis.
Participation in a clinical trial or formal research study requires a separate eligibility and informed-consent process.
Creating an account or purchasing a course does not constitute consent to participate in medical research.
11. Recorded Classes and Webinars
Live courses, webinars or discussions may be recorded for:
- Learner access.
- Faculty review.
- Quality improvement.
- Attendance verification.
- Security.
- Future educational use.
Participants will be informed where recording occurs.
Learners must not disclose identifiable patient information during recorded sessions unless specifically authorised and legally permitted.
12. Communication
By requesting an appointment, creating an account, purchasing a course or submitting an enquiry, you authorise RCIRC to send necessary communications concerning:
- Appointments.
- Consultations.
- Treatment coordination.
- Account verification.
- Login security.
- Payments.
- Course access.
- Class schedules.
- Assessments.
- Certificates.
- Refunds.
- Support.
- Policy updates.
Marketing communication will be sent only where permitted and may be withdrawn separately.
13. Cookies and Analytics
Our website or learning platform may use cookies and similar technologies for:
- Security.
- Login sessions.
- Account authentication.
- Form submission.
- Remembering preferences.
- Website analytics.
- Course-progress tracking.
- Embedded videos and maps.
- Performance improvement.
- Fraud prevention.
More details are provided in our Cookie Policy.
14. Security
We use reasonable administrative, technical and organisational safeguards, which may include:
- Access controls.
- Password protection.
- Secure password storage.
- OTP verification.
- Encryption where appropriate.
- Security monitoring.
- Device and IP logging.
- Session controls.
- Restricted staff access.
- Data backups.
- Content watermarking.
- Payment-gateway integration.
- Cybersecurity review.
No internet, email or storage system can be guaranteed to be completely secure.
Users should avoid sharing unnecessary health or financial information through unsecured communication channels.
15. Data Retention
We retain information only for as long as reasonably necessary for:
- Patient care.
- Medical-record requirements.
- Course access.
- Certificate verification.
- Academic administration.
- Account security.
- Tax and accounting.
- Insurance.
- Complaint resolution.
- Fraud prevention.
- Legal claims.
- Applicable regulatory obligations.
Medical, financial and certificate records may need to be retained even after an account-deletion or erasure request.
16. Your Rights
Subject to applicable law and identity verification, you may request:
- Access to personal information.
- Correction of inaccurate information.
- Completion of incomplete information.
- Updating of outdated information.
- Withdrawal of consent.
- Closure of a learner account.
- Erasure where retention is not required.
- Information about relevant processing.
- Grievance redressal.
- Nomination of another person to exercise applicable rights in the event of death or incapacity.
Requests concerning medical records may require verification of patient identity or representative authority.
17. Account Closure
You may request closure of your learner account by contacting us.
Account closure may result in loss of:
- Course access.
- Learning progress.
- Downloads.
- Dashboard records.
- Unclaimed certificates.
- Saved preferences.
Certain payment, certificate, assessment, security or legal records may continue to be retained.
18. Cross-Border Processing
Some technology, communication, hosting or learning-platform providers may process information outside India.
Where this occurs, we will take reasonable steps to use appropriate safeguards and comply with applicable legal restrictions.
19. Third-Party Services
Our website may contain links or integrations involving:
- Google Maps.
- Video platforms.
- Social-media services.
- Payment gateways.
- Insurers.
- TPAs.
- Government portals.
- External academic resources.
Third-party services are governed by their own terms and privacy policies.
RCIRC is not responsible for the privacy or security practices of independently operated third-party platforms.
20. Privacy Requests and Complaints
Privacy-related requests may be sent to:
Grievance and Privacy Officer
Royal Cancer Institute & Research Centre
113/103 A, Swaroop Nagar, Kanpur, Uttar Pradesh 208002
Email: consult@royalcancer.com
Phone: +91 8400 333 105
Use the subject:
“Privacy Request – Access, Correction, Withdrawal, Account Closure or Complaint”
Please include:
- Full name.
- Registered mobile number.
- Registered email address.
- Patient ID or course name, where applicable.
- Description of the request.
- Proof of identity or authority where reasonably required.
21. Changes to This Policy
We may update this Privacy Policy due to changes in law, healthcare services, courses, technology or operational practices.
The updated policy will be published with a revised “Last Updated” date.