1. Information We Collect

We collect the following types of information:

1.1 Website & App Usage

• Contact Information: Name, email, phone (inquiry forms)
• Technical Data: IP address, browser type, pages visited, timestamps
• Marketing Preferences: Newsletter subscriptions, webinar registrations

1.2 Business Partners

• Healthcare Providers: Doctor details, clinic/hospital affiliation
• Corporate Clients: Employee health screening data (aggregate only)
• Vendors: Supplier contact information, payment details

2. How We Use Your Information

We use personal information for legitimate business purposes:

Healthcare Services:

• Accurate test reporting and result delivery
• Patient follow-up and treatment monitoring
• NCD screening programs (Ayushman Bharat compliance)
• Quality control and proficiency testing

Business Operations:

• Appointment scheduling and reminders
• Billing and insurance claims processing
• Laboratory workflow management (LIS integration)

Marketing & Communications:

• Service updates, new test menu notifications
• Educational webinars, diabetes management programs
• Corporate wellness program promotions (opt-in only)

3. Information Sharing and Disclosure

We share information only when necessary:

We NEVER sell patient data or share with unauthorized third parties.

4. Data Security Measures

• Physical Security: Biometric access, CCTV surveillance, locked servers
• Technical Security: AES-256 encryption, TLS 1.3, two-factor authentication
• Access Controls: Role-based access (doctor/lab tech/patient portal)
• Audit Trails: All access logged, tamper-proof records
• Data Backup: Encrypted offsite backups, disaster recovery tested

5. Cookies and Tracking

Our website uses:

• Essential Cookies: Session management, security
• Analytics Cookies: Google Analytics (anonymized IP)
• Preference Cookies: Language selection, login remember

You can manage cookies through browser settings.

6. Children's Privacy

We do not knowingly collect data from individuals under 18 without parental consent.

7. International Data Transfers

Business data may be processed by cloud providers with Standard Contractual Clauses and DPDP compliance certification.

8. Changes to This Policy

We may update this policy to reflect regulatory changes or business needs. Material changes will be notified via email and website notice.