Privacy Policy

1. INTRODUCTION

This Privacy Policy describes our practices regarding the collection, use, and disclosure of information that we receive through our Platform. We take the privacy of our users seriously and ensure that all data processing is conducted in a transparent and secure manner.

2. CONSENT

By accessing our Platform or commencing our clinical program, you provide your express and informed consent to the collection, use, and processing of your Personal Information and Sensitive Personal Data or Information (SPDI) as described herein. You have the right to withdraw this consent at any time, subject to legal or contractual restrictions.

3. INFORMATION WE COLLECT

We collect several types of information from and about users of our Platform:

• Identity Data: Name, age, gender, and date of birth.
• Contact Data: Email address, phone number, and residential address.
• Account Data: Login credentials and profile settings.
• Sensitive Personal Data or Information (SPDI): Medical history, lab results (blood markers), metabolic assessments, and symptom reports.
• Technical Data: IP address, browser type, operating system, and usage patterns.

4. HOW WE COLLECT DATA

Data is collected through various channels:

• Direct Interaction: Information you provide via forms, onboarding questionnaires, or communications with our Care Team.
• Third-Party Partners: Diagnostic reports received directly from our NABL-accredited laboratory partners.
• Automated Technologies: Use of cookies, server logs, and other tracking technologies as you navigate the Website.

5. PURPOSE OF DATA PROCESSING

We process your data for specific, limited purposes:

• Clinical Eligibility: To assess whether you are medically fit for our weight loss programs.
• Care Delivery: To enable doctors to issue prescriptions and nutritionists to provide dietary guidance.
• Monitoring: To track your progress and manage any reported side effects.
• Technical Performance: To monitor, analyze, and improve the functionality of our Platform.

6. DISCLOSURE OF INFORMATION

We do not sell your personal data. We share information only with:

• The Care Team: Affiliated doctors and nutritionists providing your treatment.
• Diagnostic Partners: Labs facilitating your blood tests.
• Pharmacy Partners: Licensed e-pharmacies for fulfilling prescriptions upon your request.
• Legal Authorities: When required by law to comply with judicial proceedings or government requests.

7. THIRD-PARTY SERVICES AND LINKS

Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third parties. We encourage you to read the privacy policies of every website you visit.

8. DATA SECURITY

We implement robust technical and organizational security measures:

• Encryption: AES-256 bit encryption for data at rest and TLS 1.2+ for data in transit.
• Access Control: Restricted access to clinical data based on the principle of "least privilege."
• Monitoring: Regular security audits to identify and mitigate potential vulnerabilities.

9. DATA RETENTION

In compliance with the Telemedicine Practice Guidelines, 2020, we retain clinical records, prescriptions, and consultation logs for a minimum of 3 years. Non-clinical data is retained only as long as necessary to fulfill the purposes outlined in this policy.

10. DATA LOCALIZATION AND STORAGE

All Personal Information and SPDI are stored and processed exclusively on secure servers located within the territory of India, ensuring compliance with local data localization mandates.

11. YOUR RIGHTS: ACCESS AND REVIEW

You have the right to request a copy of the personal and health data we hold about you. We will provide this information in a structured, commonly used format within a reasonable timeframe.

12. YOUR RIGHTS: CORRECTION AND UPDATES

You are responsible for ensuring your data is accurate. You can update your profile or health information through our Website or by contacting our support team.

13. YOUR RIGHTS: WITHDRAWAL OF CONSENT

You may withdraw your consent for data processing at any time. However, withdrawing consent for health data processing will lead to the immediate termination of your medical program, as this data is essential for safe clinical management.

14. YOUR RIGHTS: ERASURE AND DELETION

You may request the deletion of your account. We will erase your personal data unless retention is required by law (e.g., for medical record-keeping or tax purposes).

15. CHILDREN’S PRIVACY

Our Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware of such data collection, we will take steps to delete it immediately.

16. COOKIES AND TRACKING TECHNOLOGIES

We use cookies to enhance your browsing experience and analyze Website traffic. You can manage your cookie settings through your browser, though some features of the Platform may not function correctly without them.

17. BUSINESS TRANSFERS

In the event of a merger, acquisition, or sale of assets, your information may be transferred as a business asset. We will ensure the acquiring entity maintains protections at least as stringent as those in this policy.

18. MARKETING COMMUNICATIONS

We may send you marketing or promotional communications if you have opted in. You can unsubscribe at any time using the "unsubscribe" link in our emails or by contacting us directly.

19. MODIFICATION OF POLICY

We reserve the right to modify this Privacy Policy at any time. Changes will be effective immediately upon posting to the Website. Your continued use of the Platform signifies acceptance of the updated policy.

20. GRIEVANCE REDRESSAL AND CONTACT

In accordance with the IT Act, 2000 and the DPDP Act, 2023, grievances should be directed to our Grievance Officer:

21. GOVERNING LAW

This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the courts in Bengaluru, Karnataka.