Privacy

Privacy Policy

Effective date: 5 September 2026

This Privacy Policy explains how Is The Best Hospital (“ITBH”, “we”, “us” or “our”) collects, uses, shares, retains and protects personal information when you use our public healthcare discovery pages, hospital workspaces and digital marketing tools.

1. Information we collect

Depending on how you use ITBH, we may collect:

2. Facebook and Instagram information

When an authorised hospital user connects Meta services, ITBH may receive the user's Meta authorisation result, managed Facebook Page identifiers and names, a linked Instagram professional account identifier and username, granted permissions and access tokens. ITBH uses this information to show available Pages, establish the selected connection and publish content requested by an authorised user.

ITBH does not ask for or store your Facebook password. Access tokens are protected and used only to provide the connected features. Meta's own privacy policy also applies to information processed by Facebook and Instagram.

3. How we use information

We use information to provide and administer ITBH, authenticate users, maintain hospital listings and workspaces, process enquiries, connect and publish to authorised social accounts, provide support, monitor performance, prevent misuse, secure the service, comply with law and improve our features.

4. How information is shared

Public listing information is visible to website visitors when a hospital chooses to display it. Enquiry information may be shared with the relevant hospital so it can respond. We may use service providers that host, secure, maintain or deliver ITBH under appropriate obligations. Information is sent to Meta when an authorised user asks ITBH to publish content to Facebook or Instagram.

We may disclose information when required by law, to protect rights or safety, to investigate misuse, or as part of a business reorganisation subject to applicable safeguards. We do not sell Facebook or Instagram user data.

5. Retention

We keep information only as long as reasonably needed for the purposes described here, including providing the service, maintaining security and publishing records, resolving disputes and meeting legal obligations. Retention periods vary by the type of information and the hospital's relationship with ITBH. Connected-platform data is deleted after a verified request unless limited retention is legally required.

6. Security

We use reasonable administrative, technical and organisational safeguards designed to protect information, including access controls and protection of connected-account credentials. No online service can guarantee absolute security, and users must keep their ITBH and third-party credentials confidential.

7. Your choices and rights

Subject to applicable law, you may ask to access, correct or delete personal information, withdraw consent where processing relies on consent, or raise a concern about how information is handled. We may need to verify your identity and authority before fulfilling a request.

For Facebook and Instagram information, follow our Data Deletion Instructions. You can also remove ITBH through your Facebook business-integration settings.

8. Children's privacy

ITBH accounts and management tools are not directed to children. Public health information is general information and does not knowingly seek to collect children's personal information without appropriate involvement or authority from a parent, guardian or healthcare provider.

9. Third-party services and links

ITBH may link to hospitals, Facebook, Instagram, mapping services or other third parties. Their privacy practices are governed by their own policies, and ITBH is not responsible for those independent services.

10. Changes to this policy

We may update this policy as ITBH, legal requirements or third-party services change. We will publish the revised policy and effective date on this page.

11. Contact

For privacy questions or requests, contact info@rinasolutions.in. Include your name, account email and hospital, where applicable, but never send a password or access token.