Privacy notice

1. Who is responsible

The data fiduciary for the personal data collected through this site is the operator of the site (“we”), which is established outside India.

The person who answers questions about the processing of your personal data can be reached through the contact form, with the subject “Personal data (rights and grievances)”. If you need our full identity and address to exercise your rights, say so in your request and we will send them by email.

2. Who the form is for

The site and its form are meant only for businesses and professionals in the health sector. The form collects the work contact details of a person writing on behalf of an organisation or in a professional capacity.

3. The personal data we process

• Work contact details: organisation, full name, designation, type of business, State or Union Territory, work email and, if you give it, work phone.
• Your request: subject and message, the page you sent it from, the date and time, the referring site if your browser passes it on, and the reference number we assign.
• Briefly, a keyed digest of your IP address, used only to limit automated submissions and deleted within two hours. It is not stored with your request.
• Like any website, the server records each page request, with the IP address and browser, in technical logs used to run and protect the site.

We do not ask for, and you should not send, patient information, health data or identity documents such as Aadhaar, PAN or passport details. The form is not meant for children.

4. Why we process it

To reply to your request by email; to assess a possible regulatory cooperation between your organisation and us; to keep a record of the request; and to protect the site.

We do not use your data for marketing, do not build profiles and do not sell or share it with others for their own purposes.

5. Consent and how to withdraw it

The form is sent only if you tick the consent box. You can withdraw your consent at any time through the contact form, with the subject “Personal data (rights and grievances)”; withdrawing is as simple as giving consent. Withdrawal does not affect processing done before it, and after it we can no longer handle your request.

6. Where the data is processed and who receives it

The site is hosted on servers in Germany. Requests reach our team by email, outside India. The hosting and email providers process the data only on our behalf.

The person who follows up requests also receives a notification without personal data: reference number, type of business, subject and State or Union Territory.

Apart from this, your data is not shared with anyone. By ticking the consent box you agree to your data being processed outside India as described here.

7. Your rights

You can ask for a summary of the personal data we process about you and of what we do with it, with the identities of those who process it on our behalf (our hosting and email providers) and of the data shared with them; ask us to correct, complete, update or erase it; and nominate another person to exercise your rights in the event of your death or incapacity. Send your request through the contact form, with the subject “Personal data (rights and grievances)”, giving your name and the email address you wrote from.

We reply within a reasonable period, and in any case within 90 days. Exercising these rights is free of charge.

8. Grievances and the Data Protection Board

If you think we have not met our obligations, raise a grievance through the contact form, with the subject “Personal data (rights and grievances)”. If our answer does not resolve it, you may complain to the Data Protection Board of India. The law asks you to use our grievance process before approaching the Board.

9. How long we keep the data

The server deletes each request automatically 24 months after receiving it. Copies received by email are kept for as long as the exchange, and any professional relationship that follows from it, lasts, and are then deleted. If you ask, they are deleted sooner.

10. Security

The site works only over an encrypted connection (HTTPS). Requests are stored outside the server’s public folders and only authorised people can read them. If a personal data breach affects you, we will tell you.

11. Language

You may ask, through the form, to receive this notice in English or in any language specified in the Eighth Schedule to the Constitution of India.

12. The law this notice follows

This notice is written for the Information Technology Act, 2000 and its rules, and already follows the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, several of whose provisions come into force in stages up to May 2027.

13. Cookies and browser storage

This site uses no cookies, no browser storage and no analytics. The fonts are served from the site itself and nothing is loaded from another domain.

14. Changes to this notice

If this notice changes, the new version is published on this page with its date. Current version: 2026-11-10.1.