Privacy Statement

Welcome, and thank you for your interest in Vedavi (“Vedavi Medic”, "Vedavi Health", “we”, or “us”), our website at https://vedavimedic.com (the “Site”), and all related websites (including the parent website https://vedavihealth.com), downloadable software, mobile applications (including web application), and other services provided by us on which a link to this Privacy Policy is displayed, and all other communications with individuals though from written or oral means, such as email or phone(collectively, together with the Site, our “Service”)

You are advised to carefully read the Privacy Notice before using this website.

Collection of Personal Information

Vedavi Medic collects personal information from or about you in the following manner,

  • When you as a healthcare provider register, your personal, clinical information that you provide us; and
  • When you use Vedavi Medic services such as Patient registration, consented patient information

Processing of Personal Information

We process Personal Information to fulfill our contractual obligations to you, comply with legal obligations and regulatory requirements, or as may be reasonably necessary to conduct our business. In all cases where we process Personal Information, we will uphold your rights under Section 43A of the Information Technology Act, 2000, Regulation 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 (the “SPI Rules”), Regulation 3(1) of the Information Technology (Intermediaries Guidelines) Rules, 2011.

Consent Form

By using our Service and indicating your personal information herein, you authorize Vedavi Medic to collect and store any personal information such as but not limited to, your name, address, mobile phone number, age, gender, birthdate, marital status, email address, phone number, profile picture, medical records, professional details, accreditations, hospital affiliation (if any), or any other details relative to the practice of your profession, or any other information necessary to create or modify your account, request medical services, contact customer support, or otherwise communicate with us through electronic or automated means, for the period allowed under the applicable law and regulations. It may also refer to any other information whether recorded in a material form or not, from which your identity is apparent or can be reasonably and directly ascertained by us, or when put together with other information would directly and certainly identify you.

You are aware of your rights under the Right to Privacy Under the Indian Constitution, including the right to be informed, to access, to object, to erasure or blocking, to damages, to file a complaint, to rectify and to data portability and understand that there are procedures, conditions and exceptions to be complied with in order to exercise or invoke such rights.

User of Personal Information

We use the information that we collect in a variety of ways in providing the Service and operating our business, including the following:

Operations

We use the information to operate, maintain, enhance and provide all features of the Service, to provide the services and information that you request, to respond to comments and questions and to provide support to users of the Service. We process Client Data solely in accordance with the directions provided by the applicable Client or User.

Improvements

We use the information to understand and analyze the usage trends and preferences of our Visitors and Users, to improve the Service, and to develop new products, services, feature, and functionality.

Communications

We may use a Visitor’s or User’s email address or other information – other than Client Data – to contact that Visitor or User (i) for administrative purposes such as customer service, to address intellectual property infringement, right of privacy violations or defamation issues related to the Client Data or Personal Data posted on the Service or (ii) with updates on promotions and events, relating to products and services offered by us and by third parties we work with. You have the ability to opt-out of receiving any promotional communications.

Cookies and Tracking Technologies

We use automatically collected information and other information collected on the Service through cookies and similar technologies to: (i) personalize our Service, such as remembering a User’s or Visitor’s information so that the User or Visitor will not have to re-enter it during a visit or on subsequent visits; (ii) provide customized advertisements, content, and information; (iii) monitor and analyze the effectiveness of Service and third-party marketing activities; (iv) monitor aggregate site usage metrics such as total number of visitors and pages viewed; and (v) track your entries, submissions, and status in any promotions or other activities on the Service. You can obtain more information about cookies by visiting http://www.allaboutcookies.org.

Analytics

We use Google Analytics to measure and evaluate access to and traffic on the Public Area of the Site, and create user navigation reports for our Site administrators. Google operates independently from us and has its own privacy policy, which we strongly suggest you review. Google may use the information collected through Google Analytics to evaluate Users' and Visitors’ activity on our Site. We take measures to protect the technical information collected by our use of Google Analytics. The data collected will only be used on a need to know basis to resolve technical issues, administer the Site and identify visitor preferences; but in this case, the data will be in non-identifiable form. We do not use any of this information to identify Visitors or Users.

WE WILL NEVER SELL OR SHARE YOUR INFORMATION THAT IDENTIFIES YOU

We will never sell, publish or share information that identifies you or many person without your permission.

There is certain information that we collect and require in order for us to give you support, grant you access to Vedavi Medic and improve Vedavi Medic experience.

  • Information about the business such as business name, billing address, e-mail, phone, website, sector and user information like name and email.
  • Your username and password to allow access to Vedavi Medic
  • Your usage details such as time, frequency, duration and pattern of use, features used and the amount of storage used will be recorded by us in order to enhance your experience with Vedavi Medic.

We may disclose information to third parties if you consent to us doing so, as well as in the following circumstances:

Unrestricted Information

Any information that you voluntarily choose to include in a Public Area of the Service, such as a public profile page, will be available to any Visitor or User who has access to that content.

Service Providers

We work with third party service providers who provide website, application development, hosting, maintenance, and other services for us. These third parties may have access to, or process Personal Data or Client Data as part of providing those services for us. We limit the information provided to these service providers to that which is reasonably necessary for them to perform their functions, and our contracts with them require them to maintain the confidentiality of such information.

Non Personally Identifiable Information

We may make certain automatically-collected, aggregated, or otherwise non-personally-identifiable information available to third parties for various purposes, including (i) compliance with various reporting obligations; (ii) for business or marketing purposes; or (iii) to assist such parties in understanding our Clients’, Users’ and Visitors’ interests, habits, and usage patterns for certain programs, content, services, and/or functionality available through the Service.

Law Enforcement, Legal Process and Compliance

We may disclose Personal Data or other information if required to do so by law or in the good-faith belief that such action is necessary to comply with applicable laws, in response to a facially valid court order, judicial or other government subpoena or warrant, or to otherwise cooperate with law enforcement or other governmental agencies.

We also reserve the right to disclose Personal Data or other information that we believe, in good faith, is appropriate or necessary to (i) take precautions against liability, (ii) protect ourselves or others from fraudulent, abusive, or unlawful uses or activity, (iii) investigate and defend ourselves against any third-party claims or allegations, (iv) protect the security or integrity of the Service and any facilities or equipment used to make the Service available, or (v) protect our property or other legal rights, enforce our contracts, or protect the rights, property, or safety of others.

Change of Ownership

Information about Users and Visitors, including Personal Data, may be disclosed and otherwise transferred to an acquirer, successor or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets and only if the recipient of the User or Visitor Data commits to a Privacy Policy that has terms substantially consistent with this Privacy Policy. Client Data may be physically or electronically transferred to an acquirer, or successor or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets, for the sole purpose of continuing the operation of the Service, and only if the recipient of the Client Data commits to a Privacy Policy that has terms substantially consistent with this Privacy Policy.

Rights of the Data Subject

Access, Correction, Deletion

Under the Data Privacy / SPDI Act, data subject refers to an individual whose personal information is collected and processed. We are duly bound to observe and respect your privacy rights, including your right to information, right to access, right to correct, right to remove, right to damages, and right to data portability.

We respect your privacy rights and provide you with reasonable access to the Personal Data that you may have provided through your use of the Services. If you wish to access or amend any other Personal Data we hold about you, or to request that we delete any information about you that we have obtained from an Integrated Service, you may contact us as set forth in the “How to Contact Us” section. At your request, we will have any reference to you deleted or blocked in our database.

You may update, correct, or delete your Account information and preferences at any time by accessing your Account settings page on the Service. Please note that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain all information you submit for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so. You may decline to share certain Personal Data with us, in which case we may not be able to provide to you some of the features and functionality of the Service.

At any time, you may object to the processing of your Personal Data, on legitimate grounds, except if otherwise permitted by applicable law.

This provision does not apply to Personal Data that is part of Client Data. In this case, the management of the Client Data is subject to the Client’s own Privacy Policy, and any request for access, correction or deletion should be made to the Client responsible for the uploading and storage of such data into the Service.

Opting out from Commercial Communications

If you receive commercial emails from us, you may unsubscribe at any time by following the instructions contained within the email or by sending an email to the address provided in the “How to Contact Us” section.

Users are able to view and modify settings relating to the nature and frequency of promotional communications that they receive from us by accessing the “Account functionality” tab on the Service. Please be aware that if you opt-out of receiving commercial email from us or otherwise modify the nature or frequency of promotional communications you receive from us, it may take up to ten (10) business days for us to process your request. Additionally, even after you opt-out from receiving commercial messages from us, you will continue to receive administrative messages from us regarding the Service.

Vedavi Medic has no direct relationship with the Client’s customers or third party whose Personal Data it may process on behalf of a Client. An individual who seeks access, or who seeks to correct, amend, delete inaccurate data or withdraw consent for further contact should direct his or her query to the Client or User they deal with directly. If the Client requests Vedavi Medic to remove the data, we will respond to its request within thirty (30) days. We will delete, amend or block access to any Personal Data that we are storing only if we receive a written request to do so from the Client who is responsible for such Personal Data, unless we have a legal right to retain such Personal Data. We reserve the right to retain a copy of such data for archiving purposes, or to defend our rights in litigation. Any such request regarding Client Data should be addressed as indicated in the “How to Contact Us” section, and include sufficient information for Vedavi Medic to identify the Client or its customer or third party and the information to delete or amend.

Third-Party Services

The Service may contain features or links to web sites and services provided by third parties. Any information you provide on third-party sites or services is provided directly to the operators of such services and is subject to those operators’ policies, if any, governing privacy and security, even if accessed through the Service. We are not responsible for the content or privacy and security practices and policies of third-party sites or services to which links or access are provided through the Service. We encourage you to learn about third parties’ privacy and security policies before providing them with information.

Third-Party Services - Google's privacy requirements

Our telehealth application integrates Google Calendar and Google Meet to facilitate the scheduling and conduction of telehealth appointments for doctors. We access Google user data solely to provide the core functionalities of scheduling and managing telehealth appointments. This access includes reading and writing calendar events to schedule appointments and generating Google Meet links for telehealth (virtual) consultations. Additionally, we use Google's My Business API access to send business review links to users via WhatsApp or other messaging systems. Specifically, we may use the following types of Google User Data:

      Google Calendar Events: Accessing and modifying calendar events for scheduling appointments.
      Google Meet Links: Generating and utilizing Google Meet links for virtual consultations.
      User Profile Information: Accessing basic profile information such as email addresses to link calendar events and send invitations.
      Google's My Business: Accessing business information to generate and send review links to users for feedback on services.
We do not store any Google user data beyond what is necessary for these functionalities, and all Google user data is handled with stringent security measures to protect user privacy. There is no sharing of Google user data with third parties for any purposes outside the immediate requirement of scheduling and conducting telehealth services, and sending business review links.

Interest Based Advertising

Interest based advertising is the collection of data from different sources and across different platforms in order to predict an individual’s preferences or interest and to deliver to that individual, or his/her computer, smart phone or tablet, advertising based on his/her assumed preference or interest inferred from the collection of data pertaining to that individual or others who may have a similar profile or similar interests.

We do not participate in Internet based advertising.

The Following Types of Cookies Are Used in the Site:

  • Strictly necessary/essential cookies - These cookies are essential in order to enable you to move around the website and use its features, such as accessing secure areas of the website. Without these cookies services you have asked for cannot be provided. These cookies don’t collect information that identifies a visitor.
  • Functionality cookies - These cookies allow the website to remember choices you make (such as your user name, language or the region you are in) and provide enhanced, more personal features. For instance, a website may be able to provide you with local weather reports or traffic news by storing in a cookie the region in which you are currently located. These cookies can also be used to remember changes you have made to text size, fonts and other parts of web pages that you can customize. They may also be used to provide services you have asked for such as watching a video or commenting on a blog. The information these cookies collect may be anonymized and they cannot track your browsing activity on other websites.

Minors and Children’s Privacy

Protecting the privacy of young children is especially important. Our Service is not directed to children under the age of 18, and we do not knowingly collect Personal Data from children under the age of 18 without obtaining parental consent. If you are under 18 years of age, then please do not use or access the Service at any time or in any manner. If we learn that Personal Data has been collected on the Service from persons under 18 years of age and without verifiable parental consent, then we will take the appropriate steps to delete this information. If you are a parent or guardian and discover that your child under 18 years of age has obtained an Account on the Service, then you may alert us at [email protected] and request that we delete that child’s Personal Data from our systems.

The Service is not intended to be used by minors, and is not intended to be used to post content to share publicly or with friends. To the extent that a minor has posted such content on the Service, the minor has the right to have this content deleted or removed using the deletion or removal options detailed in this Privacy Policy. If you have any question regarding this topic, please contact us as indicated in the “How to Contact Us” section. Please be aware that, although we offer this deletion capability, the removal of content may not ensure complete or comprehensive removal of that content or information.

Data Security

We follow generally accepted industry standards to protect the information submitted to us, both during transmission and once we receive it. We maintain appropriate administrative, technical and physical safeguards to protect Personal Data against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the Personal Data in our possession. This includes, for example, firewalls, password protection and other access and authentication controls. We use SSL technology to encrypt data during transmission through public internet, and we also employ application-layer security features to further anonymize Personal Data.

However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. We cannot ensure or warrant the security of any information you transmit to us or store on the Service, and you do so at your own risk. We also cannot guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. If you believe your Personal Data has been compromised, please contact us as set forth in the “How to Contact Us” section.

If we learn of a security systems breach, we will inform you of the occurrence of the breach in accordance with applicable law.

Data Retention

We only retain the Personal Data collected from a User for as long as the User’s account is active or otherwise for a limited period of time as long as we need it to fulfill the purposes for which we have initially collected it, unless otherwise required by law. We will retain and use information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements as follows:

  • the contents of closed accounts are deleted within 6 months of the date of closure.
  • backups are kept for 12 months.
  • information on legal transactions between Client and Vedavi Medic is retained for a period of 10 years.

Privacy Settings

Although we may allow you to adjust your privacy settings to limit access to certain Personal Data, please be aware that no security measures are perfect or impenetrable. We are not responsible for circumvention of any privacy settings or security measures on the Service. Additionally, we cannot control the actions of other users with whom you may choose to share your information. Further, even after information posted on the Service is removed, caching and archiving services may have saved that information, and other users or third parties may have copied or stored the information available on the Service. We cannot and do not guarantee that information you post on or transmit to the Service will not be viewed by unauthorized persons.

Data Transfer

We may transfer, process and store Personal Data we collect through the Services in centralized databases located within India data centers. When we transfer Personal Data within India data centers, we will protect it as described in this Privacy Policy. We will comply with applicable legal requirements providing adequate protection for the transfer of personal information within India.

Foreign Visitors

The Service is hosted in the India. The service is strictly restricted to users of India. If you choose to use the Service from other regions of the world with laws governing data collection and use that may differ from Indian law, then please note that you are transferring your Client Data and Personal Data outside of those regions to the India for storage and processing. Also, we may transfer your data from other countries or regions to India in connection with storage and processing of data, fulfilling your requests, and operating the Service. By providing any information, including Client Data and Personal Data, on or to the Service, you consent to such transfer, storage, and processing.

Data Controller and Data Processor

Vedavi Medic does not own, control or direct the use of any of the Client Data stored or processed by a Client or User via the Service. Only the Client or Users are entitled to access, retrieve and direct the use of such Client Data. Vedavi Medic is largely unaware of what Client Data is actually being stored or made available by a Client or User to the Service and does not directly access such Client Data except as authorized by the Client, or as necessary to provide Services to the Client and its Users.

Vedavi Medic should be considered only as a processor on behalf of its Clients and Users. Except as provided in this Privacy Policy, Vedavi Medic does not independently cause Client Data containing Personal Data stored in connection with the Services to be transferred or otherwise made available to third parties, except to third party subcontractors who may process such data on behalf of Vedavi Medic in connection with Vedavi Medic's provision of Services to Clients. Such actions are performed or authorized only by the applicable Client or User.

The Client or the User is the data controller under the Directive for any Client Data containing Personal Data, meaning that such party controls the manner such Personal Data is collected and used as well as the determination of the purposes and means of the processing of such Personal Data.

Vedavi Medic is not responsible for the content of the Personal Data contained in the Client Data or other information stored on its servers (or its subcontractors’ servers) at the discretion of the Client or User nor is Vedavi Medic responsible for the manner in which the Client or User collects, handles disclosure, distributes or otherwise processes such information.

Changes and Updates to this Policy

Please revisit this page periodically to stay aware of any changes to this Policy, which we may update from time to time. If we modify the Policy, we will make it available through the Service, and indicate the date of the latest revision, and will comply with applicable law. Your continued use of the Service after the revised Policy has become effective indicates that you have read, understood and agreed to the current version of the Policy.

How to Contact Us

Please contact us with any questions or comments about this Policy, your Personal Data, our use and disclosure practices, or your consent choices by email at [email protected].

© 2024 Vedavi Health LLP. All Rights Reserved.