Data Protection Policy

Welcome to VaidyaSathi. VaidyaSathi is committed to protecting the personal data of patients, doctors, healthcare providers, employees, and all other users of our Platform. This Data Protection Policy explains how we collect, process, store, protect, and manage personal data while providing our appointment booking services. By using the Platform, you acknowledge and agree to this Policy.

1. Purpose

The purpose of this Policy is to:

• Protect the personal data of all users.
• Ensure responsible and lawful processing of personal data.
• Maintain confidentiality, integrity, and availability of information.
• Promote transparency in data handling.
• Support compliance with applicable Indian data protection laws.

2. Scope

This Policy applies to:

• Patients
• Doctors
• Clinics
• Hospitals
• Employees
• Vendors and service providers
• Visitors to the VaidyaSathi website
• Any person whose personal data is processed by VaidyaSathi

3. Personal Data We Collect

Depending on the services used, we may collect:

A. Patient Information

• Full Name
• Mobile Number
• Email Address (if provided)
• Date of Birth & Gender
• Appointment details

B. Doctor Information

• Full Name & Qualifications
• Registration Number & Medical Council Registration Details
• Clinic/Hospital Information & Address Proof
• Identity Verification Documents
• Contact Details

C. Technical Information

• IP Address & Device Information
• Browser Information & Cookies
• Usage Logs & Session Information

D. Payment Information

We may collect transaction-related information such as Transaction ID, Payment Status, Payment Date, and Payment Method.

Note: We do not store complete debit card, credit card, UPI PIN, CVV, or net banking credentials.

4. Purpose of Data Processing

Personal data may be processed to:

• Facilitate appointment bookings.
• Verify doctor identities and eligibility.
• Provide customer support.
• Process platform fee payments.
• Prevent fraud and unauthorized activity.
• Improve website performance and user experience.
• Meet legal, regulatory, and compliance obligations.
• Resolve disputes and respond to lawful requests.

5. Lawful Basis for Processing

Where applicable, VaidyaSathi processes personal data based on user consent, performance of requested services, compliance with legal obligations, and legitimate operational interests where permitted by law.

6. Data Security

We implement reasonable administrative, technical, and organizational safeguards to protect personal data against unauthorized access, accidental disclosure, loss or destruction, alteration or tampering, and cybersecurity threats. Security measures may include encryption, access controls, authentication mechanisms, logging, and regular system monitoring.

7. Data Sharing

Personal data may be shared only where necessary with:

• The selected doctor, clinic, or hospital.
• Payment gateway providers.
• Technology service providers acting on our behalf.
• Government authorities or law enforcement agencies when required by applicable law.
• Professional advisors where legally necessary.

We do not sell or rent personal data to third parties.

8. Data Retention

Personal data is retained only for as long as necessary to deliver our services, meet contractual and legal obligations, resolve disputes, maintain financial and operational records, and protect the legitimate interests of the Platform. Data that is no longer required may be securely deleted or anonymized.

9. User Rights

Subject to applicable law, users may request to:

• Access their personal data.
• Correct inaccurate or incomplete information.
• Update personal information.
• Request deletion of personal data where legally permissible.
• Withdraw consent where processing is based on consent.
• Raise concerns regarding data handling.

Certain requests may be limited where retention is required by law or for legitimate business purposes.

10. Responsibilities

VaidyaSathi Responsibilities: We are committed to protecting personal data, limiting access to authorized personnel, maintaining appropriate security controls, responding to legitimate user requests, and continuously improving data protection practices.

User Responsibilities: Users should provide accurate information, keep account credentials secure, notify us of unauthorized account access, and inform us promptly if personal information changes.

11. Data Breach Response

If a personal data breach is identified, VaidyaSathi will take reasonable steps to contain and assess the incident, investigate the cause, mitigate potential harm, notify affected individuals or competent authorities where required by applicable law, and implement corrective measures to reduce the risk of recurrence.

12. Third-Party Services

The Platform may rely on trusted third-party service providers, including payment gateways, cloud hosting providers, email and SMS service providers, and analytics services. These providers are expected to protect personal data in accordance with applicable contractual and legal requirements.

13. International Data Transfers

If personal data is processed or stored outside India, VaidyaSathi will take reasonable steps to ensure that appropriate safeguards are in place and that such transfers comply with applicable laws.

14. Changes to This Policy

We may update this Data Protection Policy from time to time. The latest version will always be published on our website with the updated effective date. Continued use of the Platform constitutes acceptance of the revised Policy.

15. Contact Us

For questions or concerns regarding this Policy or the handling of personal data, please contact:

16. Governing Law

This Policy shall be governed by and interpreted in accordance with the laws of the Republic of India. Any disputes relating to this Policy shall be subject to the jurisdiction of the competent courts having jurisdiction over the registered office of VaidyaSathi.

By using the VaidyaSathi Platform, you acknowledge that you have read, understood, and agreed to this Data Protection Policy.