Sylhet Kidney Foundation Hospital (SKFH)
Website: https://kidneyfoundationsylhet.com
Document No. : SKFH-ISMS-POL-001
Version : 1.0
Effective Date : 01 August 2026
Review Date : 01 August 2027
Approved By : General Secretary, Sylhet Kidney Foundation Hospital
Policy Owner : Hospital Director / IT & Information Security Committee
Classification : Public

1. Purpose

Sylhet Kidney Foundation Hospital (SKFH) is committed to protecting the privacy, confidentiality, integrity, and security of personal and medical information entrusted to us by our patients, visitors, donors, and website users. This Privacy Policy explains how we collect, use, store, protect, disclose, and retain personal information through our healthcare services and our website.

2. Scope

This policy applies to:

• Patients
• Patient attendants and guardians
• Website visitors
• Online appointment requests
• Contact forms
• Donation forms
• Healthcare service enquiries
• Employees handling patient information
• Third-party service providers working on behalf of SKFH

3. Information We Collect

Depending on the services you request, SKFH may collect:

Personal Information

• Full name
• Date of birth
• Gender
• National ID/Passport (where applicable)
• Address
• Mobile number
• Email address
• Emergency contact details

Medical Information

• Medical history
• Diagnosis
• Laboratory reports
• Imaging reports
• Prescription history
• Treatment records
• Dialysis records
• Allergies
• Medication history
• Insurance information (if applicable)

Website Information

When visiting our website we may automatically collect:

• IP address
• Browser type
• Device information
• Operating system
• Pages visited
• Access date and time
• Cookies and similar technologies

4. How We Use Your Information

Patient information is collected only for legitimate healthcare and administrative purposes, including:

• Providing medical diagnosis and treatment
• Appointment scheduling
• Patient registration
• Laboratory and diagnostic services
• Pharmacy services
• Billing and payment processing
• Medical record management
• Emergency patient care
• Improving healthcare quality
• Internal quality management
• Legal and regulatory compliance
• Responding to patient enquiries submitted through the website

We do not sell patient information to any third party.

5. Legal Basis

SKFH processes personal information only when necessary for:

• Providing healthcare services
• Fulfilling legal obligations
• Protecting patient safety
• Hospital administration
• Patient consent where applicable

6. Confidentiality of Medical Records

Medical records are treated as confidential. Access is restricted only to authorized healthcare professionals and hospital staff who require the information to perform their official duties. All employees are expected to maintain strict confidentiality.

7. Information Sharing

Patient information may be disclosed only under one or more of the following circumstances:

• With the patient’s consent
• To authorized treating physicians
• To diagnostic laboratories
• To pharmacies involved in treatment
• When required by law
• By court order
• To government authorities where legally required
• During medical emergencies where disclosure is necessary to protect life

SKFH does not disclose personal medical information for marketing purposes.

8. Data Security

SKFH implements reasonable administrative, technical, and physical safeguards to protect patient information, including:

• Role-based access control
• User authentication
• Password protection
• Secure servers
• Firewalls
• Anti-malware protection
• Encrypted communications where applicable
• Regular software updates
• Backup procedures
• Audit logging
• Restricted physical access to servers and medical records

Although no internet transmission can be guaranteed 100% secure, SKFH continuously works to protect patient information against unauthorized access, alteration, disclosure, or destruction.

9. Website Security

Our website uses industry-standard security measures including:

• SSL/TLS encrypted connections (HTTPS)
• Secure hosting environment
• Security monitoring
• Malware protection
• Access controls
• Periodic security updates

Users are encouraged not to submit confidential medical information through unsecured email.

10. Cookies

Our website may use cookies to:

• Improve website functionality
• Remember user preferences
• Analyze website performance
• Enhance user experience

Users may disable cookies through their browser settings; however, some website features may not function properly.

11. Data Retention

Patient records are retained in accordance with applicable laws, healthcare regulations, medical record retention requirements, and hospital operational needs. After the retention period expires, records may be securely archived or permanently destroyed following approved procedures.

12. Patient Rights

Patients may request, subject to applicable law:

• Access to their personal information
• Correction of inaccurate information
• Updating contact information
• Information regarding how their data is used
• Withdrawal of consent where legally applicable

Certain requests may be limited where disclosure could affect patient safety, legal obligations, or the rights of others.

13. Third-Party Services

Our website may contain links to external websites or use trusted third-party service providers. SKFH is not responsible for the privacy practices of external websites. Users are encouraged to review the privacy policies of those websites separately.

14. Children’s Privacy

Where healthcare services are provided to minors, personal information is collected and processed through parents, legal guardians, or authorized representatives in accordance with applicable legal and medical requirements.

15. Data Breach Response

In the event of a suspected or confirmed data breach involving patient information, SKFH will:

• Investigate the incident promptly.
• Contain and mitigate the impact.
• Restore affected systems where applicable.
• Notify affected individuals and relevant authorities when required by applicable law.
• Implement corrective actions to prevent recurrence.

16. Policy Updates

This Privacy Policy may be updated periodically to reflect changes in legal requirements, technology, hospital operations, or security practices. The latest version will always be published on the SKFH website.

17. Contact Information

For questions regarding this Privacy Policy or your personal information, please contact:

Sylhet Kidney Foundation Hospital (SKFH)
Website: https://kidneyfoundationsylhet.com
Email: sylhetkf2018@gmail.com
Telephone: +8801789444958, +88-0821-719598

Address: Sylhet, Bangladesh

---

By using the SKFH website or receiving healthcare services from Sylhet Kidney Foundation Hospital, you acknowledge that you have read and understood this Patient Data Privacy Policy.