Privacy Notice
Last updated: October 2026 · Compliant with the Digital Personal Data Protection Act (DPDP), 2023
HospiCareers is built on the principle that healthcare professionals must retain total ownership and dignity over their credentials and personal contact information.
1. Information We Process
Account Credentials
Email address, cryptographically hashed passwords (scrypt), device login metadata, and multi-factor authentication secrets.
Clinical Qualifications
Council registrations (NMC, SMC, INC), degrees, clinical experience history, verified certificate uploads, and specialty preferences.
Hospital Organizational Data
Institution registration, address, authorized signatory credentials, departmental contact points, and subscription billing details.
Recruitment Records
Job applications, interview invitations, status transitions, confirmed joining logs, and dispute records.
2. Processing Principles & Candidate Agency
- Granular Discoverability: You can toggle your profile off search at any moment. Hidden profiles immediately vanish from hospital candidate search views.
- Shielded Contact Info: Hospitals never see your personal phone number or email address until an interview invitation is mutually accepted.
- Encrypted Document Vault: Uploaded medical diplomas and council registrations are stored in private encrypted storage; every access event is recorded in immutable audit logs.
- Right to Erasure & Portability: You can export your full profile data or request account deletion directly from your settings.
3. Grievances & Data Protection Officer
For privacy inquiries, data subject access requests, or grievance escalations, contact:
HospiCareers Data Protection & Regulatory Compliance Cell
Email: grievance@hospicareers.in
Statutory response window: within 24–48 business hours.