Privacy Policy -

Medicovada Healthcare Solutions (“Medicovada” or “we”) takes the privacy of your information seriously. This privacy notice (“Privacy Notice”) describes the personal information we collect from you through our website (including sub-domains and microsites) and mobile applications. It describes the purpose for collecting that personal information, the sharing with other parties, and the steps we take to protect your information. It also tells you about the rights and choices you have regarding your personal information and how we can be contacted about our privacy practices.

You are advised to read this Privacy Notice carefully before using any of our products or services.

DEFINITIONS

The following definitions are used in this privacy notice:

Cookies
A small file is placed on your device by our website or mobile application when you use or visit certain features of our website or mobile application. A cookie generally allows a website to remember your actions or preferences for some time.

Data
Includes non-personal information, personal information, and sensitive personal information about you that, either directly or combined with other information, enables us to identify you when you visit our stores, website, and/or mobile application.

Data protection laws
Any applicable laws relating to the processing of data.

Partners
Selected third parties (including Medicovada entities) with whom we have contracts, as described in this privacy notice.

Service providers
Includes organizations to whom we or other Tata Group entities disclose your information for processing for a specific purpose.

User or You
The natural person who accesses our stores, website, or mobile application.

What data do we collect from you?

Medicovada collects the data outlined in this privacy notice for various purposes. This data covers the following categories:

Contact information: first and last name, email address, postal address, country, employer, phone number, and other contact data.

Financial information: payment instrument information, transactions, transaction history, payment preferences, method, and spending trends.

Technical information: website, device and mobile app usage, Internet Protocol (IP) address and information collected by automated means.

Transaction information: transaction date, total amount, transaction history and related details.
Health-related information: medical history, health condition, treatment plans and medication information.

Product and service information: Account membership number, registration and payment information.

Personal information: Age, gender, date of birth, marital status, nationality, ethnicity, and other information.
Your reviews and feedback.

Loyalty program information: Your loyalty membership information and account details.

How we Collect Data

We collect data in the following ways:

Information you give us: We receive and store any information you enter on our website or mobile application or give us in any other way (e.g. in outlets, stores, hotels, kiosks). Please see the “Data you share” section for more information.

Automatic information we collect: We receive and store information whenever you interact with us using “cookies”, pixels and similar technologies. Please see the “Data collected automatically” section below for more information.

Email communications: To help us make emails more relevant and interesting, we often receive a confirmation when you open an email you receive from us or click on a link in it. You can opt out of receiving marketing emails by clicking the unsubscribe link in any marketing email.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Data Share By You

Medicovada collects your data in a variety of ways, including when you use our stores, website or mobile application. For example: we collect information from you when you register for our products and services, purchase at one of our locations, or use our website or mobile app; when you fill out surveys we create for you; when you visit our stores, online or mobile app, and when you opt-in to receive communications (including promotional offers).

Data that is automatically collected

We automatically collect certain information when you visit our website or use our mobile applications. This information helps us improve our content and navigation. We collect your IP address.

Our web servers or partners that provide analytics and performance improvement services collect IP address, operating system details, browsing details, device details, and language settings. This information is aggregated to measure average time, number of page views, and other information. Medicovada uses this information to measure site usage, improve content, and enhance security and performance.

We may automatically collect your data through cookies, pixels and other technologies that correspond to your browser settings. For more information about cookies, please see the section titled “Cookies” below.

Our use of data

We may require any of the above data from time to time to provide you with information relating to Medicovada and to improve the experience when using our website or mobile application. Specifically, the data may be used by us for the following reasons:

We carry out obligations arising from any contracts entered into between you and us.

We provide products and/or services to you and communicate with you about our products and/or services.

We enable Medicovada Group entities and partners to provide their products and/or services and communicate with you.

We process, disclose, transmit and/or share data/information with Medicovada Group entities and other third parties with whom we have a business or contractual relationship.

We provide you with offers (including financial products and/or services), personalised services and recommendations and improve your website and mobile application experience.

We operate, evaluate and improve our business, website and mobile application.

We prepare aggregate data to understand customer behaviour, patterns and trends to learn more about your preferences or other characteristics.

We offer you privileges and benefits, conduct marketing and promotional campaigns based on your profile.

We interact with loyalty programmes operated by us or other Medicovada Group entities.

We communicate with you (including responding to your requests, questions, feedback, claims or disputes) and customise and improve our services.

We enhance your shopping experience and provide you access to membership programmes, rewards and offers across Medicovada brands.

We enforce the terms of use of our website and mobile applications.

We protect against fraud, illegal activities, harm and other legal or information security risks.

We use it for other purposes for which we provide specific notice at the time of collection and where required, authorised by applicable law.

We treat these aggregates as personal information, where required under applicable law. Some of the processing grounds described above may overlap with each other and there may be multiple grounds that justify the use of your personal data.

For compliance
Where required under applicable law, we only use your personal information (including sensitive personal information) with your consent; where necessary to provide products and/or services; to comply with legal obligations; or when a legitimate interest requires it.

Our website and mobile application do not provide products or services for children. If you are under 18, you may only use our website or mobile application with the permission of your parent or guardian.

Sharing Data with Partners:

We may offer you access to services, products, or applications provided by partners on or through our website or mobile application. If you use such a service, customer information may be shared with the relevant partner.

Such partners will be required to respect the security of your data and use it following this Privacy Policy and applicable laws.

Sharing Data with Medicovada Entities:

We may offer you access to products, services, and/or applications of Medicovada Entities to send you information related to their programs or campaigns and to respond to your queries. To this end, we may share your data with Medicovada Entities.

We may share your data with Medicovada to streamline our business operations and for the purposes specified in this Privacy Policy.

Sharing Data on the Medicovada Consumer Platform:

Your data may be shared with Medicovada and other partners on the Medicovada Consumer Platform operated by Medicovada to provide you with products, services and benefits on this platform.

As part of integration on this platform, your account information may be integrated across different Medicovada companies.

Sharing Data with Service Providers:

We or other Medicovada Group entities may share your data with service providers. For example, to provide data storage and analysis, system security and to provide customer services.

These service providers must process the data only under our explicit instructions and adopt appropriate security measures.

Information Obtained from Other Sources:

We may obtain information from other sources, such as when you allow a third party website to link to our website.

Service providers will be required to implement appropriate technical and organisational security measures to protect the security and confidentiality of the data.

Protection of Medicovada:

We may release data when we are required to comply with applicable law or legal process, enforce the Website Terms, or investigate potential fraud or illegal activities.

We may exchange data with other companies and organizations to enable fraud protection and dispute resolution.

Business transfers:

If we grow our business and buy or sell subsidiaries or business units, your data may be transferred as part of this transaction.

Sharing data with third parties:

We may share your data with third parties when you request us to do so, or as necessary to comply with applicable laws. We require these third parties to ensure that they process sensitive personal data only under our instructions.

Note: Mediocvada entities and partners may adopt privacy policies different from Medicovada. Your data will be used under their privacy policy when you provide data on their website.

Keeping Data Secure

We will use technical and structured measures to keep your data secure and we will store your data on secure servers. Technical and structured measures include measures to deal with a suspected data breach. If you suspect misuse, loss, or unauthorized access to data, please notify us immediately by contacting us at the email address provided below.

Retention of Data

Medicovada retains your data for as long as necessary to use our products and/or services. This allows us to retain data to comply with our legal obligations, resolve disputes, and enforce agreements. Even when we delete your data, it may remain on backup or archive media for legal, tax, or regulatory purposes.

Your Rights and Choices

When we process data about you, we do so with your consent and to run the business. You have the following rights, and you can exercise them by submitting a request under the “How to Contact Us” section:

Right to access, review, and amend
Right to correction
Right to withdraw consent

Your data must be kept up to date.

Where We Store Data

The data collected under this privacy notice is stored on servers located in India.

Processing Your Data

We implement appropriate written contracts to ensure the security of data.

App Permissions That We Capture

During onboarding we ask for the following app permissions:

Location: Allowing location sharing allows location-specific data to be shown.

Camera: You can take a photo of the prescription and upload it to the app.

Photos/Media/Files: Media permission for uploading files such as prescriptions.

SMS: For automatic OTP confirmation.

Wifi status: Optimize experience based on wifi.

Record Audio: For video consultation with doctors.

Bluetooth: For Bluetooth headset during video consultation.

Severability

If a court finds any provision of the Privacy Notice illegal or invalid, it will be removed.

Changes to This Privacy Notice

Our business is constantly changing, and so our Privacy Notice may change as well. Unless you have requested otherwise, we may send you periodic email reminders about our notices and conditions; however, you should check our website and mobile application from time to time to see if there have been any recent changes. The latest version will become effective as soon as it is available. Any modifications will be posted on our website and mobile application immediately, and you will be deemed to have accepted the terms of the revised Privacy Notice upon your first use of our website or mobile application or your first purchase of items and/or services after the changes are made. We encourage you to review this Privacy Notice regularly to stay informed of how we protect your information.