Arkonex Healthcare Pvt Ltd (“Company”/We”/ “Us”/ “Our”) is engaged in the business of being a comprehensive one stop solution for medical services through different services offered by Us (“Services”) to the Users and/or patients (who shall hereinafter be referred to as “You”, “Your” “User” as applicable), through experts. The Services shall be rendered either through its website at www.mymeddy.com (“Website”) or the mobile application that is made available to you (“Application”) from time to time (the Website and Application shall be collectively referred to as “Platform”).  

This privacy policy ("Privacy Policy") explains how We collect, use, share, disclose and protect Personal information about the Users of the Services, and the visitors of Website (jointly and severally referred to as “You” or “Users” in this Privacy Policy). 

BY USING THE SERVICES OR BY OTHERWISE GIVING US YOUR INFORMATION, YOU WILL BE DEEMED TO HAVE READ, UNDERSTOOD AND AGREED TO THE PRACTICES AND POLICIES OUTLINED IN THIS PRIVACY POLICY AND AGREE TO BE BOUND BY THE PRIVACY POLICY. 

YOU HEREBY CONSENT TO OUR COLLECTION, USE AND SHARING, DISCLOSURE OF YOUR INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY. WE RESERVE THE RIGHT TO CHANGE, MODIFY, ADD OR DELETE PORTIONS OF THE TERMS OF THIS PRIVACY POLICY, AT OUR SOLE DISCRETION, AT ANY TIME. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY AT ANY TIME, DO NOT USE ANY OF THE SERVICES OR ACCESS OUR PLATFORM. IF YOU USE THE SERVICES ON BEHALF OF SOMEONE ELSE (SUCH AS YOUR CHILD) OR AN ENTITY (SUCH AS YOUR EMPLOYER), YOU REPRESENT THAT YOU ARE AUTHORISED BY SUCH INDIVIDUAL OR ENTITY TO (I) ACCEPT THIS PRIVACY POLICY ON SUCH INDIVIDUAL’S OR ENTITY’S BEHALF, AND (II) CONSENT ON BEHALF OF SUCH INDIVIDUAL OR ENTITY TO OUR COLLECTION, USE AND DISCLOSURE OF SUCH INDIVIDUAL’S OR ENTITY’S INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY.           

COLLECTION OF PERSONAL INFORMATION

1. When you access our Platform, we collect, store and retain certain potential information for provision of Services, when you create an account on the Platform (“Account”), including but not limited to the following:

(i)Your personal details such as Name, Date of Birth/Age and Gender, (ii) Contact Details such as Residential Address, contact number, email address, (iii) Pre-existing health conditions along with any personal medical records and history, (iv) Login ID and password (we do not store or have access to your password), (v) User details as provided at the time of registration or any time thereafter to the Company, (vi) Your usage details such as time, frequency, duration and pattern of use, features used and the amount of storage used and any other information that is willingly shared by You or is essential for rendering our Services. We are at liberty to request for any other information as may be required to be collected under applicable laws, including but not limited to the Drugs and Cosmetics Act, 1945 and its applicable Rules. 

2. In addition to the above, the following information is defined as “Personal Information” is defined under Information Technology (Reasonable Security Practices & Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”) to mean any information that relates to a natural person, which, either directly or indirectly, in combination with other information available or likely to be available with a body corporate, is capable of identifying such person. 

The SPDI Rules further define “sensitive personal data or information” of a person to mean personal information about that person relating to the following: (i) passwords; (ii) financial information such as bank accounts, credit and debit card details or other payment instrument details; (iii) sexual orientation; (iv) medical records and history; (v) biometric information; (vi) information received by body corporate under lawful contract or otherwise; (vii) visitor details as provided at the time of registration or thereafter; and (viii) call data records. 

(Points (A) and (B) shall collectively referred to as "Personal Information").

3. To improve the responsiveness of the Platform, as you navigate through a website, certain information can be passively collected (that is, gathered without your actively providing the information) using various technologies and means, such as Internet Protocol addresses, cookies, internet tags, and navigational data collection. An IP Address is a number assigned to your computer by your Internet service provider so you can access the Internet and is generally considered to be non-personally identifiable information, because in most cases an IP address is dynamic (changing each time you connect to the Internet), rather than static (unique to a particular User's computer). We use your IP address to diagnose problems with our server, report aggregate information, determine the fastest route for your computer to use in connecting to our site, and administer and improve the site. Navigational data is used for system management, to improve the content of the site, market research purposes, and to communicate information to visitors. A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. The Company uses cookies to help it identify and track visitors, their usage of the Application, Website, and their website access preferences. Users who do not wish to have cookies placed on their computers should set their browsers to refuse cookies before using the Company’s websites, with the drawback that certain features of the Company’s websites may not function properly without the aid of cookies.

4. You are responsible for maintaining the accuracy of the information you submit to us, such as your all information provided as part of Account registration. If your Personal Information changes, you may correct, delete inaccuracies, or amend information by notifying us of change.  If you provide any information that is untrue, inaccurate, out of date or incomplete (or becomes untrue, inaccurate, out of date or incomplete), or the Company has reasonable grounds to suspect that the information provided by you is untrue, inaccurate, out of date or incomplete, Company may, at its sole discretion, discontinue the provision of the Services to you. Company shall retain the right not to correct, delete or update your Personal Information, including (a) where the Personal Information is opinion data that is kept solely for evaluative purpose; and (b) the Personal Information is in documents related to a prosecution if all proceedings relating to the prosecution have not been completed.

CONSENT TO USE PERSONAL INFORMATION

By providing your Personal Information (including any changes thereto as may be provided by you from time to time) and / or accessing the site, you are consenting to collection, storage, use and disclosure of your Personal Information by the Company for the purposes and to the persons (as applicable) outlined in this Privacy Policy (as amended from time to time). Collection of information which has been designated as ‘sensitive personal data or information’ under the SPDI Rules requires your express consent and by affirming your assent to this Privacy Policy, you provide your consent to such collection as required under applicable law. Our Services may be unavailable to you in the event such consent through an email is not given or choose to withhold Personal Information. In such cases, the Company will not be liable and/or responsible for the denial of its Services to you on account of inadequacy of Personal Information provided by you. 

As outlined in this Privacy Policy, we will not process your Personal Information without a lawful basis to do so. In general, We may process your Personal Information on the legal basis of: (i) consent (ii) contract (if you have either availed Services and/or entered into an agreement with the Company and such processing is a necessary part thereof); (iii) compliance with Applicable Laws (as set forth below); (iv) to protect the vital interests of any individual.

ACCESS, RETENTION AND DELETION OF PERSONAL INFORMATION

1. When you sign up for the Services, you are opting in to receive emails from the Company. The Company will take reasonable steps to accurately record the Personal Information that you provide to the Company and any subsequent updates. As a User, you have the right to access, correct, delete or transfer your Personal Information that the Company holds, including registration details.

2. You can log in to manage your email preferences and follow the "unsubscribe" instructions in commercial email messages. If required by You, the Company will delete the Personal Information provided by You in connection with the Services and the Company will remove your public posts from view and/or dissociate them from your account profile, but the Company may retain information about you for the purposes authorized under this Privacy Policy, unless prohibited by law. Thereafter, the Company will either delete your Personal Information or de-identify it so that it is anonymous and not attributed to your identity. Upon deletion of your Personal Information, copies of your Personal Information may remain viewable in cached and archived pages.

3. We can retain Personal Information for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with Applicable Law. The criteria for determining the duration for which the Company will keep your Personal Information are as follows: (i) the Company will retain copies of your Personal Information in a form that permits identification only for as long as is necessary in connection with the purposes set out in this Privacy Policy, including for the length of time the Company have an ongoing relationship with you and provide the Services to you; (ii) if there is a legal obligation to which the Company are subject (for example, certain laws require the Company to keep records of your transactions for a certain period of time before the Company can delete them); or (iii) keeping in view the legitimate interests of the Company (litigation or regulatory investigations). Company will not be responsible or held liable in any manner whatsoever for the retention of Personal Information of Users of Services by any of the health care providers or similar institution listed, on the Website. 

4. We may further store your Personal Information as may be required mandatorily by any other applicable laws of the land.      

SECURITY AND CONFIDENTIALITY OF PERSONAL INFORMATION

1. Your Personal Information is maintained by the Company and such information may also be converted to physical form from time to time. The Company takes all necessary precautions to protect your Personal Information both online and off-line, and implements reasonable security practices and measures including certain managerial, technical, operational and physical security control measures that are commensurate with respect to the information being collected and the nature of Company’s business.
2. No administrator at the Company will have knowledge of your password. It is important for you to protect against unauthorized access to your password, your computer and your mobile phone. The Company does not undertake any liability for any unauthorised use of your account and password. If you suspect any unauthorized use of your account, you must immediately notify the Company by sending an email to admin@mymeddy.com . You shall henceforth indemnify the Company against any loss suffered by it due to such unauthorized use of your account and  password.
3. The Company makes all User information accessible to its employees, agents or partners and third parties only on a need-to-know basis, and binds only its employees to strict confidentiality obligations. Some of those employees, contractors and affiliated organizations may be located outside of your home country; by using the Company’s Platform, you consent to the transfer of such information to them. The Company will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to its employees, contractors and affiliated organizations, as described above, the Company discloses potentially personally-identifying and personally-identifying information only in response to a subpoena, court order or other governmental request, or when the Company believes in good faith that disclosure is reasonably necessary to protect the property or rights of the Company, third parties or the public at large.
4. The Company is not responsible for the confidentiality, security or distribution of your Personal Information by our partners and third parties outside the scope of our agreement with such partners and third parties. Further, the Company shall not be responsible for any breach of security or for any actions of any third parties or events that are beyond the reasonable control of the Company including but not limited to, acts of government, computer hacking, unauthorised access to computer data and storage device, computer crashes, breach of security and encryption, poor quality of Internet service or telephone service of the User etc.

PURPOSES FOR WHICH YOUR INFORMATION MAY BE USED BY THE COMPANY[Peritum 2] 

Company will retain Personal Information only to the extent it is necessary to provide Services to the Users. The information which the Company collects from you may be utilized for various business and/or regulatory purposes including for the following purposes:

1. Registration of the User on the Platform
2. Processing the User’s requests and provision of Services
3. Processing, disclosing, transmitting, and/or sharing the data/information with other third parties which have business or contractual dealings with the Company
4. Technical administration and customization of the Platform
5. Ensuring that the Platform content is presented to the Users in an effective manner
6. Delivery of personalized information to the User
7. Improvement of Services, features and functionality of the Platform
8. Research and development and for User administration (including conducting user surveys)
9. Dealing with requests, enquiries, complaints or disputes and other customer care related activities including those arising out of the Users’ request of the Services and all other general administrative and business purposes
10. Verification of identity of Users and perform checks to prevent frauds
11. Investigating, enforcing, resolving disputes and applying our Terms of Use and Privacy Policy, either ourselves or through third party service providers

DISCLOSURE AND TRANSFER OF YOUR PERSONAL INFORMATION

Company may need to disclose/ transfer User’s Personal Information to the following third parties:

1. To other service providers appointed by the Company for the purpose of carrying out services on Company’s behalf under contract. Generally these contractors do not have any independent right to share this information, however certain contractors who provide services on the Platform, including the providers of online communications services, will have rights to use and disclose the Personal Information collected in connection with the provision of these services in accordance with their own privacy policies.
2. To our affiliates in India who may use and disclose your information for the same purposes as us.
3. To government institutions/ authorities to the extent required a) under the laws, rules, and regulations and/ or under orders of any relevant judicial or quasi-judicial authority; b) to protect and defend the rights or property of the Company; c) to fight fraud and credit risk; d) to enforce Company's Terms of Use ; or e) when the Company, in its sole discretion, deems it necessary in order to protect its rights or the rights of others.
4. If otherwise required by an order under any law for the time being in force including in response to enquiries by Government agencies for the purpose of verification of identity, or for prevention, detection, investigation including cyber incidents, prosecution, and punishment of offences.

Company makes all User Information accessible to its employees and data processors only on a need-to-know basis. All Company employees and data processors, who have access to, and are associated with the processing of User Information, are obliged to respect its confidentiality.

POLICY TOWARDS CHILDREN 

We do not knowingly collect Personal Information from children under eighteen (18) years of age. If You become aware that Your child has provided Us with Personal Information without Your consent, please contact Us at admin@mymeddy.com . If We learn that We have collected Personal Information of a child under eighteen (18) years of age, we will take steps to delete such information from Our records and terminate the child’s account as soon as possible.

BUSINESS TRANSFERS

If the Company, or substantially all of its assets, were acquired, or in the unlikely event that the Company goes out of business or enters bankruptcy, the acquired Personal Information would be one of the assets that is transferred or acquired by a third party. You hereby acknowledge and consent to such transfers that may occur, and that any acquirer of the Company may continue to use your Personal Information as set forth in this policy.

CHANGES TO THIS PRIVACY POLICY

Any changes to our Privacy Policy will be posted on the Platform and will become effective as of the date of posting without any requirement of notice to the User. Please review the Privacy Policy from time to time to make sure you are aware of any changes. If you do not agree with any such revised terms, please refrain from using our Services and contact us to close any account you may have created. Any use of the Privacy Policy shall amount to acceptance of the changes made to the same therein.

GREIVANCE REDRESSAL

In case of any questions, queries, feedback, comments, or concerns about any of the terms of this Privacy Policy and/or Our and treatment of any information shared with Us by You, You are requested to contact our Grievance Redressal Officer, at admin@mymeddy.com .

ACCEPTANCE

By access and use of the Platform, it is hereby agreed that you have read the terms of this Privacy Policy, understood its contents, and have chosen to executed and accepted it of your own free will and the terms of the Privacy Policy are made in good faith and are fair and reasonable and shall be binding upon you.