Privacy Policy

1. Information We Collect

We collect, store, and use different types of information and personal data ("Collected Information") when you use our website or services:

1. Website and usage data: Information about your visits to and use of this website and our platform, including your IP address, geographical location, browser type, device information, referral source, length of visit, and page views.
2. Inquiry and communication data: Details of interactions between you and us on this website or through other channels, including:
   • First and last name
   • Contact information (email, phone)
   • Country and basic demographic details
   • Application and browsing usage data
   • Email communication history
   • Call logs and, where applicable, call recording data
3. Account and subscription data: Information provided during registration on the website or platform, or when subscribing to our services, alerts, or email notifications.
4. Medical and health-related information (sensitive personal data): Medical report documents, medical history, diagnostic records, and other health-related information that you voluntarily share with us so that we may share it with hospitals/doctors solely for understanding your case and facilitating services.

2. Publicly Available Professional Information

RihlatMed may list professional profiles of doctors, hospitals, clinics, and other healthcare providers based on publicly available information. This may include:

• Publicly available names and designations
• Qualifications, specialties, and years of experience
• Hospital or institution affiliation
• Professional achievements and memberships
• Information published on hospital websites, public registries, directories, or other publicly accessible sources

We do not intentionally publish private phone numbers, private email addresses, or non-public personal details of doctors or hospitals. Such professional information is processed on the basis of legitimate interest and standard industry practice so that users can make informed decisions.

3. How We Use Collected Information

We may use your information for the following purposes:

• To respond to your inquiries and provide requested services
• To share your medical reports with hospitals/doctors, with your consent, for evaluation and treatment planning
• To improve the usability, performance, and security of our website and platform
• To personalize content and improve your browsing experience
• To send you service-related communications, updates, and, where permitted, marketing communications
• To generate anonymized statistical information for analysis and service improvement
• To comply with legal obligations and respond to lawful requests from authorities

4. Legal Basis for Processing

Depending on the context, we process personal data on the following legal bases under applicable Indian law:

• Consent: For processing sensitive personal data such as medical reports and health information that you voluntarily provide.
• Legitimate interest: For listing publicly available professional information of doctors and hospitals and improving our services.
• Contractual necessity: To provide services you request, including coordination with hospitals/doctors.
• Legal compliance: To meet obligations under applicable laws and regulations.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience, analyze website traffic, and understand how users interact with our platform. Cookies are small text files stored on your device by your browser.

You can configure your browser to refuse some or all cookies. However, disabling cookies may affect the functionality and performance of certain parts of the website.

6. Sharing of Information

We may share your information only as necessary and in accordance with this Privacy Policy:

• With hospitals, doctors, or medical institutions, after obtaining your consent, for the purpose of case understanding, opinion, and treatment planning.
• With our internal teams and service providers who assist us in operating the website, processing data, or providing services, under appropriate confidentiality obligations.
• With government authorities or law enforcement, where required by law, regulation, or legal process.

We do not sell or rent your personal data to third parties.

7. Data Security

We implement reasonable security practices and procedures, as required under applicable Indian law, to protect your personal data against unauthorized access, alteration, disclosure, or destruction. While we strive to use commercially acceptable means to protect your information, no method of transmission or storage is completely secure.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. This generally means:

• Inquiry and communication data: retained for a reasonable period for support, reference, and legal purposes.
• Medical reports and documents: retained for the duration of the case and related follow-up, or deleted earlier upon your request, subject to legal requirements.
• Publicly available professional information: retained while it remains publicly available or until correction/removal is requested by the concerned professional or institution.

9. Your Rights

Subject to applicable law, you may have the following rights in relation to your personal data:

• Right to access the personal data we hold about you
• Right to request correction of inaccurate or incomplete data
• Right to request deletion of your personal data, where feasible
• Right to withdraw consent for processing of sensitive personal data, without affecting prior lawful processing

10. Rights of Doctors and Hospitals

If you are a doctor, hospital, or healthcare provider listed on our platform and you believe that any information is inaccurate, incomplete, or you do not wish to be listed, you may contact us to:

• Request correction or update of your professional information
• Request removal of your profile or listing from our platform

We aim to process such verified requests within a reasonable time, typically within 48–72 hours, unless a longer period is required by law or technical constraints.

11. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices, content, or security of such external sites. You are encouraged to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. You are advised to review this page periodically to stay informed about how we handle your personal data.

13. Grievance and Contact

If you have any questions, concerns, or requests regarding your personal data processed by this website or the platform, or if you wish to exercise your rights, you may contact us using the contact details provided on our website.

In accordance with applicable Indian law, you may also write to our designated grievance contact as mentioned on our contact or legal information page. We will endeavour to respond within the legally prescribed timelines.

This Privacy Policy reflects RihlatMed's commitment to safeguarding your privacy and ensuring the secure and responsible handling of your personal data.