Trust
Security and privacy of employee health data
Health information is among the most sensitive data a company handles. This page describes how we treat it.
Confidentiality by default
- Employees see their own reports; clinicians see what they need to provide care.
- HR and management receive fitness opinions a role requires and anonymised, aggregate data — not diagnoses.
- Anything beyond that is shared only with the employee's consent or where law requires.
Consent
- We explain what is collected and why before an examination or assessment.
- Consent is recorded, and employees can ask questions or withdraw where the law allows.
- Data is used only for the purpose it was collected for.
Access control
- Role-based access: employees, clinicians, company admins and our team each see only their part.
- Company data is kept separate from other companies' data.
- Administrative actions are logged.
Storage and handling
- Records are stored digitally with access restricted by role.
- We collect the minimum data needed for the service.
- Paper forms, where used, are digitised and handled under clinical supervision.
Alignment with India's DPDP Act
- Our practices are designed around the principles of India's Digital Personal Data Protection Act: notice, consent, purpose limitation, data minimisation and reasonable security safeguards.
- Employees can request access to or correction of their data through their employer or by writing to us.
- We do not claim any security certification on this page.
Privacy questions: info@planmyhealth.in
Request a proposal
Tell us your headcount, cities and the services you need — we reply within one working day.