Privacy policy

PriorityHealth24 (“we”, “us”) is operated by PriorityHealth24 Pvt. Ltd., [Registered office address, Pune, Maharashtra, PIN]. We run the PriorityHealth24 website, which helps people in Pune learn about health conditions, find verified doctors and book lab tests.

For the personal data described in this policy, we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act). This means we decide why and how your data is used, and we are responsible for protecting it.

Doctors, clinics and labs you book through us are responsible for the medical records they create when they treat or test you. Their own privacy notices apply to those records.

Health information is sensitive. We ask for it only when a service needs it, and we use it only for that service.

We do not knowingly collect more than we need. If you don't give information marked as required, we may not be able to provide that service, but you can still read our health guides without an account.

We use only strictly necessary cookies. They are set when you sign in and are needed for sign-in to work securely. We do not use advertising, analytics or social media tracking cookies, and we don't load fonts or scripts from third-party servers when you browse the site.

On the live site these names start with __Secure- or __Host-, which tells your browser to send them only over HTTPS.

We never sell or rent your personal data. We share it only in these cases:

• With the doctor, clinic or lab you choose to book, only the details they need for your appointment or test.
• With service providers who process data on our behalf under contract: our hosting provider ([Hosting provider and region, e.g. Vercel, Mumbai (bom1)]); Resend, which delivers partner application emails; and Google and LinkedIn, only when you choose to sign in with them.
• With Meta (WhatsApp) when you message us on WhatsApp. WhatsApp's own privacy policy applies to that conversation.
• With government authorities, courts or regulators when the law requires it, and only what is required.
• With a buyer or successor if our business is merged or sold, who must protect your data under this policy.

Partners are never ranked higher on PriorityHealth24 for paying us, and we never share your health information with advertisers, insurers or employers.

We aim to keep your data in India. Some service providers process data on servers outside India: for example, Resend processes partner application emails in the United States, and Google and LinkedIn operate sign-in globally. We only transfer data to countries the Government of India permits under the DPDP Act, and we require providers to protect it.

• Sign-in sessions end after 7 days or when you sign out.
• Account and booking data: while your account is active. If you don't use your account for 36 months, we will notify you and then delete or anonymise it, unless you sign in again.
• Partner applications: while we review them, and for 12 months if not approved. Approved partner records are kept while the partnership continues.
• Security logs: up to 90 days, unless needed to investigate an incident.
• Longer, when a law requires us to keep records, such as tax, payment or medical record rules. We delete the data once that period ends.

• All traffic to PriorityHealth24 is encrypted with HTTPS.
• Session cookies are encrypted, marked secure and expire after 7 days.
• Only staff and providers who need your data for their work can access it.
• Partner access is limited to approved accounts and re-checked on every visit.

No system is perfectly secure. If a personal data breach happens, we will inform affected users and the Data Protection Board of India as the law requires, and tell you what we are doing about it.

Under the DPDP Act, you have the right to:

• Get a summary of the personal data we hold about you and who we have shared it with.
• Have inaccurate or incomplete data corrected and updated.
• Have your data erased when it's no longer needed, unless the law requires us to keep it.
• Withdraw your consent at any time. This doesn't affect anything done before you withdrew it, but we may no longer be able to provide the related service.
• Nominate someone to exercise these rights for you if you die or become unable to.
• Have your complaints addressed by our Grievance Officer.

To use any of these rights, email [privacy@your-domain] or contact our Grievance Officer. We may need to confirm your identity first. We will respond within the time the law requires.

If you are not satisfied with our response, you can complain to the Data Protection Board of India.

PriorityHealth24 accounts are for adults aged 18 and over. A parent or lawful guardian can book care for a child from their own account. We process a child's data only with verifiable consent from their parent or guardian, and we never track children's behaviour or show them targeted advertising.

If you have a question or complaint about how we handle your personal data, contact our Grievance Officer:

Name

[Grievance Officer name], Grievance Officer

Email

[grievance@your-domain]

Phone

[Phone number]

Address

[Postal address for grievances]

Hours

Monday to Friday, 10 am to 6 pm IST

WhatsApp support

90000 00000

We will update this policy when our services or the law change. The date at the top shows the last update. If we make a significant change, such as using your data for a new purpose, we will tell you on the site or by email before it takes effect and ask for your consent where needed.