Privacy Policy
How we collect, use, protect and respect your personal and health information.
Lotus Diagnostics ("Lotus", "we", "us", or "our"), located opposite Holistic Hospital, Nizampet Road, Hydernagar, Hyderabad 500085, is committed to protecting the privacy and confidentiality of every person who uses our diagnostic services or website (thelotuslabs.in). This Privacy Policy explains what information we collect, why, how we protect it, and the rights you have over it. It is intended to align with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law.
By booking a test, using our home-collection service, contacting us on WhatsApp or phone, or using this website, you agree to the practices described in this policy.
On this page
1. Information we collect
We collect only the information needed to provide accurate diagnostic services and to communicate with you about them. This may include:
- Identity & contact details — your name, age, gender, date of birth, phone number, WhatsApp number, email, and home or collection address.
- Health information — the tests or packages you book, samples collected, test results and reports, and any medical details you or your doctor share that are relevant to the test (for example, referring doctor details or a prescription).
- Booking & payment details — records of the services you booked, appointment times, and payment confirmation. We do not store card numbers or banking credentials on our systems.
- Website usage data — when you browse thelotuslabs.in, standard technical data such as your IP address, browser type, and pages visited may be collected to keep the site secure and improve it.
Under the DPDP Act, health information is treated as especially sensitive, and we handle it with correspondingly higher care.
2. How we use your information
We use your information strictly to deliver and support the service you requested:
- To schedule and carry out your test or home sample collection
- To process your sample through our accredited partner laboratories and generate your report
- To deliver your report to you (for example, on WhatsApp) and answer any questions about it
- To confirm bookings, send appointment reminders, and process payment
- To maintain your records for continuity of care and as required by law
- To keep our website and systems secure and functioning
We do not use your personal or health information for advertising, and we do not send marketing messages based on your health data. If we ever wish to contact you about an offer or new service, we will only do so with your clear, separate consent, and you can opt out at any time.
3. Consent
When you provide your information to book a test, receive a report, or make a payment, you consent to us using it for those purposes. If we need your information for any new purpose, we will ask for your consent first. You may withdraw your consent at any time by contacting us (see section 12). Please note that withdrawing consent may prevent us from providing certain services — for example, we cannot deliver a report without the details needed to process your sample.
4. When we may disclose information
We keep your information confidential and disclose it only in the limited, necessary situations below — never for marketing, and never sold or rented to anyone:
- Accredited partner laboratories — your sample and the details needed to test it are shared with the NABL-accredited partner laboratory that processes your test. These labs are bound by confidentiality and handle your data only to produce your report.
- Your referring doctor — where a doctor has referred you for a test, your report may be shared with that doctor for your diagnosis, as is standard medical practice.
- Legal and regulatory requirements — if required by law, a court order, or a lawful request from a government or statutory authority, or to establish or defend legal claims.
- Payment processing — if you pay online, the payment gateway processes your payment under its own security standards. We do not receive or store your full card or banking details.
5. How we protect your data
We follow strict data-management practices to keep your information safe:
- Access to personal and health records is limited to authorised staff who need it to serve you
- Records are stored on controlled, access-restricted systems
- Reports are shared only through the contact details you provide, directly with you
- We apply reasonable security safeguards and review our practices to guard against unauthorised access, misuse, or disclosure
While no method of storage or transmission is ever completely infallible, we take our responsibility for your data seriously and act to protect it at every step. In the unlikely event of a data breach affecting your personal information, we will act promptly and in accordance with applicable law.
6. Data retention
We keep your records only as long as necessary to provide our services, maintain continuity of care, and meet legal or regulatory obligations. When information is no longer needed for these purposes, it is securely deleted or anonymised.
7. Your rights
Under the DPDP Act, you have rights over your personal data. You may:
- Access the personal information we hold about you
- Correct or update inaccurate or incomplete information
- Request deletion of your information, subject to legal retention requirements
- Withdraw consent for future collection or use
- Raise a grievance about how your data has been handled
To exercise any of these rights, contact us using the details in section 12. We will respond within a reasonable time.
8. Minors
For patients under 18, our services should be used with the consent of a parent or legal guardian, who is responsible for providing and managing the minor's information. We handle a minor's health data with particular care, in line with the DPDP Act.
9. Cookies & website data
Our website may use cookies to keep the site working smoothly, remember your session, and understand how visitors use the site so we can improve it. These do not identify you personally on other websites. You can control or disable cookies through your browser settings, though some parts of the site may work less smoothly if you do.
10. Third-party links
Our website and reports may occasionally link to external sites (for example, health information from WHO, ICMR or similar bodies). Once you leave thelotuslabs.in, this Privacy Policy no longer applies, and we are not responsible for the privacy practices of other websites. We encourage you to read their policies.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The latest version will always be posted on this page with its effective date. We encourage you to review it periodically.
12. Contact us
For any question, request, or grievance regarding your personal data or this policy, please contact us:
Lotus Diagnostics — Data & Privacy
Last updated: July 2026. This policy is provided in good faith to explain our data practices. For the most current version, please refer to this page.