Privacy Policy
1. Introduction
Arujii/ambanax (“we”, “our”, “us”) is committed to protecting the privacy, confidentiality and security of personal and health information of all patients, visitors, users of our website, and other stakeholders (“you”, “your”). This Privacy Policy explains how we collect, use, store, process, disclose and protect your personal and sensitive data in compliance with applicable laws.
2. Scope and Applicability
This policy applies to all personal and health data collected by Arujii/ambanax in connection with healthcare services, websites, apps, or in-person interactions, and to all staff and third parties processing such data.
3. Definitions
- Personal Data: Information that identifies you as an individual.
- Sensitive Data: Health, biometric or genetic information.
- Processing: Collection, storage, use, or disclosure of data.
- Consent: Your free and informed agreement to data use.
4. What Data We Collect
- Personal Info: Name, gender, contact, ID proof.
- Health Data: Medical history, prescriptions, diagnostic results.
- Administrative Data: Insurance, billing, payment info.
- Digital Data: IP address, cookies, device info, communication logs.
5. Legal Basis for Processing
We process your data under consent, contractual necessity, legal obligations, vital interests, or legitimate interests, as applicable.
6. How We Use Your Data
- To provide diagnosis, treatment, and teleconsultation
- To manage appointments, billing, and insurance claims
- For internal administration and quality improvement
- To comply with legal obligations and audits
- For research or analytics (with consent)
7. Data Sharing & Disclosure
We may share your data with healthcare partners, diagnostic centers, insurance agencies, and legal authorities where necessary — always under confidentiality and lawful conditions. We never sell your data.
8. Consent & Your Rights
You have rights to access, correct, delete, or restrict your data, withdraw consent, request portability, and lodge grievances under applicable data protection laws.
9. Data Retention
We retain data only as long as required by law or for the purpose collected. Afterward, it is securely deleted or anonymized.
10. Data Security
We employ encryption, secure servers, restricted access, and audit trails to protect your data. Regular assessments and staff training ensure compliance.
11. Data Breach & Incident Response
In case of any breach, we will promptly investigate, mitigate, and notify affected individuals and authorities as per legal requirements.
12. Children and Minors
For minors under 18, parental or guardian consent is mandatory. Such data is handled with enhanced protection.
13. Use of Website / Online Services
We collect cookies and device data to enhance experience and security. We are not responsible for privacy practices of external sites linked from ours.
14. Changes to this Policy
We may update this policy periodically. Updated versions will include revised “Effective Date.” Significant changes will be communicated appropriately.
15. Grievance Redressal / Contact
Data Protection Officer (DPO) / Privacy Officer:
Name: [Insert Name]
Address: [Insert Address]
Email: [Insert Email]
Phone: [Insert Phone Number]
16. Legal & Regulatory Framework
We comply with the Digital Personal Data Protection Act, 2023, Information Technology Act, 2000, and other relevant Indian laws and professional standards.
Acknowledgement
By using our services or providing your data, you acknowledge that you have read and understood this Privacy Policy.