Privacy Policy

What we collect

We collect only what we need to book your visits and run your membership.

• Contact details: name, email address and phone number.
• Date of birth, for you and for each family member on a membership, to apply age-based rules.
• Appointment details: the doctor, date and time, and any reason for the visit you choose to write.
• Payment records: amount, date and Razorpay reference. We never see or store your card or UPI details.
• Technical data such as your IP address, used for security and to limit abuse.

Why we use it

To confirm and manage your appointments, to create and run your Prime Care membership (benefits, family members, invoices and receipts), to sign you in with an emailed code, to send service messages, and to meet legal and accounting duties.

Consent (DPDP Act)

We ask for your consent to process your details for the membership when you buy it. This consent is required for the membership and is recorded with the date and wording you accepted.

Contact for marketing (offers and health tips) is a separate, optional consent. You can switch it off at any time in My account, and it stops immediately.

You can withdraw your consent at any time by contacting us; we will tell you what this means for your membership.

Who we share it with

We share data only with service providers that help us run the service, such as our payment provider, email delivery provider and hosting providers, under contracts that limit their use. We do not sell your data.

Analytics

On public pages we measure aggregate usage (for example, which pages are visited). We do not run analytics on the signed-in account area and never send your name, email, phone number or health details to analytics.

How long we keep it

We keep membership and invoice records for as long as the law requires for accounting and tax, and other data only as long as needed for the purpose above.

Your rights

You can ask to see the data we hold about you, correct it, have it erased where the law allows, and nominate someone to exercise these rights for you. You can also complain to us, and to the Data Protection Board of India.

Children

A parent or guardian must add a child to a membership and give consent on the child’s behalf.

Security and contact

We protect data with encryption in transit, access controls and audit logs. To exercise your rights or ask a question, contact the hospital using the details on the Contact page.