Governance & Ethical Data Charter

Evergreen Health Solutions Private Limited

Beyond Compliance. Beyond Borders.

In critical moments — when a patient is moved across cities, countries, and continents — what travels with them is not just medical equipment.

It is identity. It is the medical truth. It is human dignity.

At Evergreen Health Solutions Private Limited, we operate at the intersection of clinical intensity, aviation precision, and international coordination. In such an environment, data governance is not administrative — it is ethical stewardship.

This Charter defines how we protect, process, and honour the information entrusted to us.

1. Our Governance Philosophy

We do not view privacy as a regulatory obligation.We view it as an extension of care.

Every medical summary, passport copy, ICU note, doctor prescription and diagnostic record shared with us represents a moment of vulnerability. That vulnerability is treated with the same seriousness as clinical responsibility.

Compliance is the minimum. Ethical leadership is the standard.

2. Global Legal Compliance Framework

Evergreen Health Solutions Private Limited operates internationally and aligns its data governance framework with globally recognised privacy and data protection regimes, including:

• EU General Data Protection Regulation (GDPR)
  
• UK GDPR
  
• India Digital Personal Data Protection Act, 2023
  
• California Consumer Privacy Act (CCPA/CPRA)
  
• Applicable cross-border aviation and medical confidentiality standards
  

Where jurisdictional requirements differ, we adopt the higher standard.

3. Categories of Data We Process

Given the nature of aeromedical and repatriation services, we may process:

Identity Information

• Full name
  
• Date of birth
  
• Government-issued ID (Passport / National ID)
  
• Contact information
  

Medical & Clinical Information

• Medical summaries and discharge notes
  
• Diagnostic reports
  
• Medication lists
  
• ICU documentation / Doctor prescriptions
  
• Fit-to-fly assessments
  
• Oxygen and Life-support requirements
  

Operational & Aviation Data

• Flight details
  
• Airport and airline medical clearances
  
• State offices coordination records
  
• Insurance documentation
• National registries
  

We collect only what is necessary for safe clinical and operational execution.

4. Lawful Basis for Processing

We process personal and medical data under any one or more of the following:

• Explicit informed consent
  
• Performance of contract
  
• Vital interests (life-saving circumstances)
  
• Legal and aviation compliance obligations
  
• Legitimate interest (clinical safety and quality assurance)
  

Medical data is never processed casually. It is handled under heightened safeguards.

5. International Transfers & Cross-Border Safeguards

As a global medical transfer organisation, data may cross borders for:

• Airline approvals
  
• Hospitals’ coordination
  
• Insurance processing
  
• Border Office / Customs’ clearances
  

We implement:

• Encrypted communication protocols
  
• Restricted access controls
  
• Data Processing Agreements where required
  
• Standard Contractual Clauses when applicable
  

Geography never weakens our confidentiality standards.

6. Minimal & Dignified Marketing Practices

Our outreach philosophy is educational, not exploitative.

Evergreen Health Solutions Private Limited commits to the following non-negotiable principles:

• We do not sell personal or medical data, without consent.
  
• We do not monetise patient conditions.
  
• We do not use patient stories or images, without consent.
  

We use:

• Essential website cookies
  
• Security-related digital tools
  
• Privacy-conscious analytics
  

We avoid:

• Aggressive retargeting
  
• Behavioural medical profiling
  
• Intrusive tracking technologies
  

Patients are never targeted based on illness.

7. Data Security Architecture

We maintain a layered security framework including:

• Encrypted data transmission
  
• Secure cloud infrastructure
  
• Role-based access controls
  
• Internal confidentiality agreements
  
• Periodic security audits
  
• Controlled document-sharing channels
  

Access to sensitive medical information is limited strictly to authorised personnel on a need-to-know basis.

8. Data Retention & Destruction

We retain data only for:

• Operational necessity
  
• Legal and medico-legal compliance
  
• Regulatory recordkeeping
  

Upon completion of retention obligations, data is securely archived or destroyed in accordance with applicable law.

9. Arbitration & Governing Law

This Charter and associated Privacy Policy shall be governed by the laws of India.

Any dispute arising from data governance or privacy matters shall be resolved through arbitration in Hyderabad, Telangana, India, in accordance with the Arbitration and Conciliation Act, 1996.

The seat and venue of arbitration shall be Hyderabad.

10. Accountability & Continuous Improvement

Evergreen Health commits to:

• Periodic internal governance review
  
• Ongoing staff confidentiality training
  
• Documented incident response protocols
  
• Continuous policy refinement aligned with evolving international standards
  

Ethics is not static. Governance is not ceremonial.

11. The Evergreen Declaration

We operate in moments when families are making urgent decisions across continents.

When a passport copy and an ICU summary are sent to us, it is not paperwork.

It is trust. And trust demands more than compliance.

At Evergreen Health Solutions Private Limited,  privacy is not a legal shield.

It is a clinical responsibility. It is an ethical promise.

And it travels with every patient — across oceans, across borders, without compromise.