PRIVACY POLICY

Our Commitment to Your Privacy

OpenTreatment Private Limited ("OpenTreatment", "we", "our" or "us") is committed to protecting your privacy and ensuring the security of your personal data. As a healthcare technology aggregator, we facilitate healthcare services by connecting users with hospitals, doctors, diagnostic laboratories, pharmacies, insurers, and other healthcare service providers. We recognize the sensitive nature of personal and health-related information and process such information responsibly and in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable laws.

OpenTreatment implements reasonable technical, organisational, and administrative security measures to protect your personal data in accordance with applicable law, including the Digital Personal Data Protection Act, 2023. However, no method of electronic transmission, storage, or internet-based communication is completely secure, and OpenTreatment does not warrant that its systems will be free from unauthorised access, cyber-attacks, data breaches, or other security incidents.

To the maximum extent permitted under applicable law, OpenTreatment shall not be liable for any loss, damage, or claim arising out of or relating to a personal data breach resulting from circumstances beyond its reasonable control, including cyber-attacks, acts of third parties, force majeure events, failures of telecommunications or internet infrastructure, or acts or omissions of healthcare providers or other third parties.

We are committed to the following principles:

• We collect only such personal data as is necessary to provide and improve our healthcare services.
• We implement appropriate technical and organisational security measures to safeguard your personal data against unauthorized access, disclosure, alteration, or misuse.
• We do not sell or rent your personal data. Your information is shared only with healthcare providers, authorised service partners, payment processors, technology vendors, or government authorities where necessary to provide the requested services, comply with legal obligations, or with your consent.
• We use cookies and similar technologies to enhance your browsing experience, analyse website usage, and improve our services. Cookies are not used to store sensitive information such as passwords, payment credentials, or medical records.
• Our Platform may contain links to third-party websites or applications. OpenTreatment is not responsible for the privacy practices or content of such third-party platforms, and users are encouraged to review their respective privacy policies.

Information We Collect

To provide our healthcare aggregation services, we may collect the following categories of personal data:

Information You Provide

• Name
• Mobile number
• Email address
• Date of birth and gender
• Residential address
• Emergency contact details
• Medical history, prescriptions, diagnostic reports, laboratory reports, consultation records and other health-related information voluntarily submitted by you
• Appointment details and healthcare preferences
• Insurance information
• Payment and billing information
• Any other information voluntarily provided while using the Platform.

Information We Automatically Collect

When you access our Platform, we may automatically collect:

• Device make and model
• Operating system and browser information
• IP address
• Device identifiers
• Network information
• Usage logs and analytics
• Approximate location based on IP address or precise location where you have granted permission
• Cookie and session information.

How We Use Your Information

We use your personal data to:

• create and manage your user account;
• facilitate appointments, consultations and healthcare services with hospitals, doctors, laboratories, pharmacies and other healthcare providers;
• process payments and insurance-related services;
• communicate appointment reminders, updates and service notifications;
• provide customer support and respond to your enquiries;
• improve the functionality, performance and security of our Platform;
• conduct analytics and personalise your user experience;
• detect and prevent fraud, misuse and cybersecurity threats; and
• comply with applicable legal and regulatory requirements.

Where required, we may engage trusted third-party service providers for hosting, analytics, communication, payment processing and other operational purposes. Such service providers process your personal data only on our instructions and are bound by appropriate confidentiality and security obligations.