Privacy
Last updated —
Placeholder. This page is structural only. It has not been drafted or reviewed by a lawyer and must be replaced before launch.
What we collect
TODO: list every category of personal data collected — contact details, health information submitted for second opinions, payment data, and usage analytics — and the lawful basis for each.
Health data
TODO: this needs specific treatment under the Digital Personal Data Protection Act, 2023. Cover consent, purpose limitation, retention and the rights of the data principal.
Who we share it with
TODO: name the categories of recipients — partner providers, the insurer, reviewing clinicians abroad, and processors — and describe cross-border transfer for overseas second opinions.
How long we keep it
TODO: state retention periods per data category.
Your rights and how to exercise them
TODO: access, correction, erasure, grievance redressal, and the contact details of the Data Protection Officer or grievance officer.
