Privacy Policy & Health Data Protection

1. Information We Collect

When you schedule a diagnostic test, book a home phlebotomy collection, or request online report downloads, we collect the following categories of information:

• Personal Identifiers: Full legal name, date of birth / age, biological gender, mobile telephone number, email address, and home collection residential address including postal pincode.
• Sensitive Personal Data or Information (SPDI): Physician test prescriptions, medical symptoms, clinical history, diagnostic biomarker measurements, pathology specimen records, and doctor-signed diagnostic reports.
• Transactional Data: Payment transaction reference numbers, order totals, and invoice IDs. Note: We never store your debit/credit card CVV or net-banking credentials on our servers; payments are processed securely through PCI-DSS certified payment gateways.
• Technical Telemetry: Device IP address, browser type, operating system, and anonymous usage analytics to maintain website stability.

2. How We Use Your Health Data

We process your data strictly for legitimate healthcare and clinical purposes:

• To dispatch certified phlebotomists to your doorstep with cold-chain transport apparatus.
• To execute laboratory biochemical, hematological, immunological, and molecular assays under standard operating procedures.
• To deliver password-protected, encrypted diagnostic test reports via secure SMS, WhatsApp, and portal download links.
• To facilitate telephonic medical consultations or report reviews requested by you.
• To fulfill mandatory public health reporting obligations mandated by statutory epidemiological authorities (e.g. notifiable communicable diseases under National Center for Disease Control guidelines).

3. Sample Storage & Biological Specimen Disposal

Blood, serum, plasma, and urine specimens collected during phlebotomy visits are processed in our reference and satellite laboratories. Following analytical sign-off:

• Specimens are retained under refrigeration (2°C - 8°C or -20°C depending on test stability) for 48 to 72 hours to allow for repeat runs or physician re-evaluations if clinically indicated.
• Following the retention window, all biological samples are chemically disinfected, neutralized, and disposed of through authorized Bio-Medical Waste Management (BMWM) contractors in accordance with the Bio-Medical Waste Management Rules, 2016.

4. Technical Security & Information Safeguards

We implement bank-grade physical, administrative, and technical safeguards:

• Encryption: All web traffic and digital report downloads operate over 256-bit TLS/SSL transport layers. Stored medical files utilize AES-256 encryption at rest.
• Role-Based Access: Only certified laboratory technologists and certifying MD Pathologists possess credentials to input, calibrate, and release clinical findings.
• Anonymized Barcode Tracking: Specimens traveling from collection points to processing analyzers are identified only by machine-readable barcodes to prevent unauthorized patient identification in transit.

5. Your Rights Under the DPDP Act, 2023

As a patient and data principal, you have the following legal rights:

• Right to Access: Request a complete summary of your personal and health records maintained in our systems.
• Right to Correction: Request correction or updation of any inaccurate personal identifiers (e.g. spelling of name, age, phone number).
• Right to Grievance Redressal: Register grievances with our designated Data Protection Officer for prompt investigation and resolution.

6. Data Protection & Grievance Officer

In compliance with the Information Technology Act 2000 and DPDP Act 2023, the details of our Grievance Officer are provided below: