REGIONAL LANGUAGE NOTICE: In accordance with Section 5 of the Digital Personal Data Protection (DPDP) Act, 2023, this Privacy Notice is available in English and can be requested or accessed in any of the 22 regional languages specified in the Eighth Schedule to the Constitution of India. To request this notice in an alternative language, please contact our Grievance / Data Protection Officer at radarfeedback@cloudphysician.net.

1. OBJECTIVE

Cloudphysician International Pte Ltd, together with its subsidiaries and affiliates (“Company” or “we” or “us”), offers its platforms, AINA and RADAR available at https://cloudphysicianworld.com/ (“Website”) and the mobile application by the name of “RADAR” on Google Playstore and Apple AppStore (“App”) (AINA, the Website and App collectively referred to as “Platform”) and any service availed by users (hereinafter referred to as “you”, “your” or “User” or “Data Principal”) through the Platform, conditioned upon your acceptance of the terms and conditions contained in Company’s Terms of Use as available on its Platform and this privacy policy (“Privacy Policy”).

2. PURPOSE AND SCOPE

We are strongly committed to respecting your online privacy and recognise the need for appropriate protection and management of any Personal Data / Personal Information collected and/or collated by us.

The purpose of this Privacy Policy is to ensure that there is an intact charter to collect, use and protect any personal and/or sensitive data collected by us. This Policy defines our policies and procedure for collection, usage, processing, disclosure, and protection of any information obtained by us through the Platform.

By using the Platform, availing the services, and voluntarily providing us with information through specific, affirmative, and unambiguous consent mechanisms, you are consenting to our use of it in accordance with this Privacy Policy. This Privacy Policy does not apply to third-party links, applications or websites that are connected via links to the Platform or displayed on the Platform.

This Privacy Policy has been drafted, published, and updated to maintain strict compliance with the Digital Personal Data Protection (DPDP) Act, 2023, as well as the Information Technology Act, 2000, and the Information Technology (Amendment) Act, 2008, to the extent applicable. This Privacy Policy constitutes a legal agreement between You, as a user of the Platform (the "Data Principal"), and us, as the owner of the Platform (the "Data Fiduciary").

Age Requirements: You must be a natural person who is at least 18 years of age. If you are under the age of 18, it is mandatory that your parent or lawful guardian has read, verified, and accepted this Privacy Policy on your behalf via verifiable consent mechanisms. In such a case, this Privacy Policy shall be deemed to be a contract between the Company and your legal guardian or parent and to the extent permissible under applicable laws, enforceable against you. The Platform strictly prohibits any processing of personal data that is likely to cause detrimental effects on the well-being of a child, and we do not engage in tracking, behavioural monitoring, or targeted advertising directed at children under 18 years of age.

3. LEGAL ASSURANCES & FAIR PROCESSING

Please be advised that any Personal Data or Information procured by us shall be:

• processed fairly, lawfully, and transparently for specified, explicit, and legitimate purposes;
• obtained only for specified and lawful purposes, and not be used in any manner which is against the law or policy in force in India;
• adequate, relevant, and limited to what is necessary in relation to the purpose for which it is required (Data Minimisation);
• able to be reviewed by the user, from time to time, and updated/corrected if the need arises; and
• not kept longer than for the time which it is required for the purpose for which it was collected, and erased promptly once such purpose is fulfilled or upon withdrawal of consent.

4. YOUR CONSENT AND CONSENT ARCHITECTURE

Please note that by voluntarily providing the information (as enumerated upon herein below) through an affirmative action (such as ticking an explicit consent checkbox or opting-in), you provide your free, specific, informed, unconditional, and unambiguous consent authorising us to collect, use, process, or disclose such information for the specific business, clinical, and research purposes stated in this Privacy Policy, the Terms of Use, and as permitted or required by law.

Moreover, you understand and hereby consent that this information may be transferred to any third-party Data Processor for the purpose of services provided through the Platform or to any third-party providers for any jointly developed or marketed services, payment processing, order fulfilment, customer services, data analysis, IT services and such other services which enable us to provide you services through the Platform, subject to contractual confidentiality and data security obligations.

This Privacy Policy shall be enforceable against you in the same manner as any other written agreement.

Withdrawal of Consent: If you do not agree with this Privacy Policy, you may refuse or withdraw your consent at any time or alternatively choose not to provide us with any Personal Data. You have the right to withdraw your consent as easily as it was given. Such an intimation to withdraw your consent or to request erasure of your data can be executed directly through the application settings or by writing a letter or e-mail to the communication details provided below:

Cloudphysician Healthcare Pvt Ltd
7, Bellary Road, Ganganagar, Bangalore - 560032, India
Email: radarsupport@cloudphysician.net

5. Types of Information collected by the Company:

Personal information

“Personal Information” means and includes any information that relates to a natural person through which an individual is identified, such as the name, contact details, email address, gender, age or any other relevant material provided by a User when they register for an account on the mobile application, submit an inbound request for a platform demonstration via our Website forms, or use the services made available through the Platform; including but not limited to information gathered through a purchase of a service, survey, e-mail updates. This may also include information regarding the family member, relative, partner, friend or any person related to the User in any way as provided by the User through the Platform. This also includes information pertaining to the racial or ethnic origin, religion or other beliefs, health etc. of a User, either as provided by the User through the Platform. 

“Sensitive Information” means and includes any information of a person as specified under applicable digital data protection legislation, such as medical records, medical history, password; financial information such as bank account or credit card or debit card or any other payment information, physical, physiological and mental health information; sexual orientation; medical records and history; biometric information; and any other information provided to the Company for rendering service or for processing, storing under a lawful contract or otherwise. 

“Technical Information” means and includes any information gathered through various technologies that may employ cookies, web beacons, or similar technologies to automatically record certain information from your device through which you use the Platform. This technical information may include your Internet Protocol (IP) address, device or browser type, advertising ID, Internet service provider (ISP), referring or exit pages, clickstream data, operating system. This data includes usage information and user statistics. 

“Integrated Service Information” means and includes any information obtained through access to any other social media platform (Facebook, Google, etc.) integrated with the Company (if applicable). The Company may collect this information already provided in your integrated service account.

“Information from your parents/guardian” means and includes any information which is provided in a case where a child is less than 18 years of age and the data provided by their parent and/or guardian under verifiable consent frameworks.

“Locational Information” shall mean and include the information obtained through GPS or other means, such as the geographical location of the user.

“Website Demo and Corporate Lead Information” means and includes professional contact details voluntarily provided by institutional visitors, hospital administrators, or organisational representatives when submitting requests for product demonstrations via the Website. This specific category includes the representative's name, professional/work email address, corporate telephone or mobile number, hospital or organisation name, and any custom notes or contextual messages provided to coordinate business operations. ‍‍ 

Non-Personal Information

‍“Information through use of our service” means and includes information which is procured through the use of our service, including but not limited to the kind of services availed, the feedback of the services, the information or consultation given by the doctors appointed by the Company, and the kind of services viewed and availed by you.

“Non-Personal Information” means and includes any information that does not reveal your specific identity, such as, browser information, information collected through Cookies, pixel tags and other technologies, demographic information, etc. As is true with most websites, our Platform gathers some information automatically when you visit the Platform and stores it in log files. When You use the Platform, we may collect certain information about your computer or system to facilitate, evaluate and verify your use of the Platform. For example, we may store environmental variables, such as browser type, operating system, speed of the central processing unit (CPU), referring or exit web pages, click patterns and the internet protocol (IP) address of your computer.

6. DETAILED PURPOSE OF COLLECTION AND USAGE OF THIS INFORMATION

A. Support Regular Usage & Operations

• Identity Verification: This information is particularly pertinent for identity verification and to authenticate the submissions and clinical inputs made on the Platform.
• Internal Record Keeping: We use non-sensitive information to ascertain the types of service more relevant to your interests, suit your clinical needs, and maintain secure institutional records.
• Communications with the Company: We have integrated a conversation feature on the Platform for smooth communication. We may use your contact details to communicate regarding platform updates, operational alerts, or professional surveys.
• Ease of Use: Information is utilised to prevent any logistical interruptions to clinical or medical assistance workflows depending on user specifics.

B. Improving Platform Experience & Advanced Outputs

• Enhancement & Customisation: The information collated through use of our service is used to enhance our relationship with you and optimise professional medical assistance workflows.
• Business or Research Purposes: Non-personal or anonymised data is leveraged for research, clinical audit optimisation, and improving the operational functionality of the products offered by us.
• Aggregating Information / Anonymised Data: We may aggregate information to analyse digital healthcare metrics (average clicks, platform responsiveness, features used). In doing so, we strictly enforce data minimisation; no protected personal or sensitive clinical details are exposed in aggregated datasets.

7. DISCLOSURE AND SHARING OF INFORMATION

We do not rent, sell, disclose, or share any information that we collect from you with third parties, save and except provide you services in accordance with this Privacy Policy, under lawful contracts, and in compliance with our legal obligations. We share data under the following circumstances:

• When Compelled by Law: We may disclose information as deemed necessary under applicable laws (including the DPDP Act and the IT Act); to comply with legal processes; to respond to lawful government requests; or to protect the safety, rights, and operations of the Company, its affiliates, or its users.
• Merger or Acquisition: We may transmit or transfer our datasets upon a corporate merger, restructuring, or acquisition of the Company by another entity, subject to the surviving entity adopting an equivalent or heightened privacy framework.
• With Authorised Data Processors: We contract with specialised vendors, hosting providers, website hosting, contact information verification, and IT support services under strict Data Processing Agreements ensuring technical safeguards and compliance with data protection regulations.
• Government Agencies: As mandated under the law, personal data may be shared with statutory government bodies without explicit separate consent only for legally authorised investigative, preventive, or regulatory purposes. No sensitive clinical summaries are ever published or exposed publicly on the Platform.

8. YOUR RIGHTS 

As a Data Principal under the DPDP Act, you possess comprehensive and enforceable rights over your data. These include:

• Right to Summary & Access: The right to receive a summary of your personal data being processed, the identities of third parties with whom it has been shared, and the description of processing activities.
• Right to Correction, Completion, and Amendment: The right to correct inaccurate data, complete incomplete profiles, or update information via your account profile page or by contacting us.
• Right to Erasure and Deletion: The right to demand the erasure of your personal data when the purpose for its collection has been fulfilled or when you withdraw your consent, unless preservation is mandated by existing Indian medical record retention or corporate laws.
• Right to Grievance Redressal: The right to have any discrepancies or complaints resolved effectively through an internal mechanism within standard statutory timelines.
• Right to Nominate: The right to nominate any other individual to exercise your rights in the event of your death or incapacity.

To exercise any of these statutory rights, please contact our designated officer at radarsupport@cloudphysician.net.

9. RETENTION AND ERASURE OF DATA

All personal data provided by you shall be retained safely within controlled environments (such as cloud database environments managed by tier-1 infrastructure providers) only for as long as your account remains active or as strictly required to fulfill operational, clinical, and contractual workflows. Upon a formal erasure request or upon the voluntary deletion/withdrawal of your account, we shall purge and delete your personal data within a reasonable period, and at maximum within thirty (30) days of receiving such valid deletion request, except where extended preservation is mandated under applicable legal, statutory, or clinical regulatory obligations.

10. COOKIES AND TECHNICAL TRACKING TECHNOLOGIES

Our Platform may utilise cookies and equivalent tracking technologies to analyse web traffic, evaluate site performance, and memorize your functional preferences. A cookie in no way provides us access to your local physical device. You can deny or restrict the installation of optional cookies via your web browser settings, although doing so may impair full platform functionality. Technical data that contains no personally identifiable traces may be processed for administrative optimisation and traffic metrics.

11. THIRD-PARTY SERVICES

The Company will not sell or lease your information to third parties unless we have your explicit permission or are legally bound to do so. In the event you opt to utilise any integrated third-party clinical, logistical, or software services, your interaction is subject to their independent terms and privacy frameworks. We assume no liability for data leaked or breached through unauthorised actions or omissions beyond our reasonable control, unless such failure stems directly from our willful default or gross negligence.

12. TECHNICAL AND ORGANIZATIONAL DATA SECURITY

To protect your privacy and security, we employ rigorous physical, managerial, and operational safeguards matching global healthcare standards and industry best practices. We enforce restricted access controls, specialised encryption for data-at-rest and data-in-transit, robust firewall protocols, and routine administrative security audits. However, no data transmission network or internet backbone can be guaranteed as completely secure. Users acknowledge these inherent security realities and operate on the Platform at their own risk. For specialised security queries, contact our Grievance Officer.

13. CHANGES AND UPDATES TO THIS POLICY

The Company reserves the right to modify, amend, or update this Privacy Policy dynamically. We shall explicitly notify you of material changes by posting the updated notice on the Platform along with an updated effective date. Continued usage of the Platform or its apps following an explicit notice of amendment constitutes an acceptance of the updated practices.

14. DISCREPANCIES, GRIEVANCE REDRESSAL, AND REGULATORY RECOURSE

In case of any discrepancy, dispute, or grievance concerning your data privacy or processing operations on the Platform, please contact our designated Grievance / Data Protection Officer. We commit to acknowledging and redressing your grievances expeditiously, and latest within a statutory timeline of one (1) month from receipt.

Designated Officer Details:

Name of the Grievance Officer: Dhruv Sud
Contact Number: +91 80 2309 2900
Email ID: legal@cloudphysician.net

Statutory Escalation Recourse: Under the DPDP Act, if you are unsatisfied with the internal resolution provided by our Grievance Officer, or if your complaint remains unredressed, you possess the formal statutory right to escalate and lodge a complaint with the Data Protection Board of India (DPBI) in the prescribed manner.

15. MISCELLANEOUS

The invalidity or unenforceability of any part of this Privacy Policy shall not prejudice or affect the validity or enforceability of the remainder of this Privacy Policy. This Privacy Policy does not apply to any information other than the information collected by us through the Platform. The rights and remedies available under this Policy may be exercised as often as necessary and are cumulative and not exclusive of rights or remedies provided by law. Any waiver must be executed explicitly in writing.

16. GOVERNING LAWS AND JURISDICTION

We handle personal data in accordance with applicable privacy and data protection laws in all jurisdictions where we operate.