This Privacy Policy (“Privacy Policy”) applies to the access and use of all of our web and mobile based applications (which are collectively referred to as “Platforms”) and use of our products and services provided through the Platforms (“Services”). The Platforms are owned, managed, and operated by Cufront Healthcare Technologies Private Limited having its registered office at 601, B1, Bella Vista Empress, Datta Mandir Rd, beside Shree, Shankar Kalat Nagar, Wakad, Pune, Pimpri-Chinchwad, Maharashtra 411057 (hereinafter referred as “us”/ “we”/ “Cufront Healthcare ”/ “Company”). This Privacy Policy relates to the collection, use, and disclosure of personal data through use of the Platforms and Services by you, the medical professionals, having valid credentials and having registered with the Medical Council of India or any successor organization as may be notified in the future (“Doctors”), and the patients and end users who are using the Platforms (“Patients”) or when any individual is under the employment of the Company (“Employees”) or when we collect certain personal data from our vendors (“Vendors”). Patients, Employees, Vendors and Doctors are jointly referred to as “Users” or “you”. Cufront Healthcare is committed to protecting the information and data shared by the Users in the course of their employment, engagement, use of the Platforms and Services. This Privacy Policy, as amended from time to time, identifies personally identifiable or personal information that may be collected, how such information is used, and the choices you have regarding our use of this information. This Privacy Policy is in compliance with the Information Technology Act, 2000 (“IT Act”) read with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 (the “SPI Rules“) and Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (“Intermediary Rules”). Please read this Privacy Policy carefully.. Any information provided to Us is subject to this Privacy Policy. If you do not agree to any or all of these terms, do not use the Platforms or Services. CONSENT By accessing and using our Services or providing us with personal information, you agree to the terms of this Privacy Policy. Your use of our Services and any personal information shared with us is subject to the terms of this Privacy Policy and our Terms of Use. If you do not wish to be bound by these terms, you have the option not to access our Services. This Privacy Policy also applies generally to our parent, affiliates, subsidiaries, or joint venture websites (if any). Collection, use and disclosure of information which has been designated as Personal Information under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 requires express consent of the User. By affirming Your assent to this Privacy Policy, You provide Your consent to Cufront Healthcare Technologies for such use, collection and disclosure for provision of Services. A prerequisite for obtaining access to the Platforms and usage of the Services is the acceptance of this Privacy Policy. This Privacy Policy shall apply to all Users that use the Platforms or avail the Services offered by Cufront Healthcare . As part of providing our Services, we may need to send routine communications to you, such as transaction emails and other administrative messages through email and notifications posted on the Platforms or through other means available, including texts, WhatsApp, and other forms of messaging. Though we prefer to communicate with you via email, as may be deemed necessary, you agree to receive our phone calls, related to your use of the Platforms and performance of Services or any other mode of communication as may be deemed appropriate. When you register on any of the Platforms you also consent to allowing us to periodically send emails about new products, special offers or other information, which you may find interesting and in line with your interests. If you do not wish to receive promotional information from us, you can, at any time, choose to opt out of receiving such promotional communications by writing to us at writeus@Cufront.com. You must ensure to provide us with the correct or up-to-date personal information at the time of registration and during the use of our Services. This will allow us to contact you for further correspondences with respect to the Services provided on the Platforms. We are not responsible for any inaccurate information you provide to us, which may affect your experience when using the Platforms and the Services. If, at any time, you want to access, update, modify or eliminate any information provided by you or which forms a part of the account created with Cufront Healthcare on any of the Platforms, you may do so by writing to us at privacy@Cufront Healthcare .com. You may also withdraw your consent for use of your personal information and stop using the Services for which consent is required or accessing the Platforms. Cufront Healthcare reserves the right to stop providing any Services or termination of access to the Platforms in relation to which consent has been withdrawn. We may, in future, request other additional personal information from you in order to customise the Platform to deliver personalised features and services to the Users. Any such additional personal information will also be processed in accordance with this Privacy Policy. You may also write to us at privacy@Cufront Healthcare .com with a request for updating, modifying, or deleting any information shared by you. COLLECTION OF PERSONAL INFORMATION Demographic information like name, gender, age, occupation etc; Contact information such as address (including country and ZIP/postal code), email id, mobile number etc; Financial information (including details of payment instruments); Details required for provision of services (medical records and medical history of Patients whose data is uploaded by the Doctors or the Patients themselves, prescriptions, lab reports uploaded on the Platforms etc.); Data regarding your usage of the Platform and Services and history of the appointments or visits made through the use of Platform and Services; and Other details as the Users may provide to Cufront Healthcare . “Personal Information” includes ‘sensitive personal data or information’ (as defined under applicable law) and other information that You share with Us whether directly or in combination with other information or is received from a Third Party Service Provider, that personally identifies You or could be used to personally identify You. Users: We may collect information such as Your name, address, email, phone number, medical records and medical history, physical, psychological and mental health condition, payment information such as credit card information and other such information as provided by You while rendering Services of the Portal. We may also collect information that You share in the process of User registration, post in Your feedback, reviews, comments etc. on the Portal. Non- Personal Information: Information, (viz. type of internet browser and operating system used, domain name of the website from which You came, number of visits, average time spent on the site, pages viewed etc.) may be picked up automatically and without being explicitly provided by You, but during Your interaction with the Portal by the use of certain technologies, such as cookies and web beacons. We will be using google gmail, read only permission to sync your health records from multiple sources to Cufront Healthcare x. Cufront Healthcare Technologies’s use and transfer to any other app of information received from Google API’s will adhere to the Google API services users data policy, including the Limited Use requirements. Camera & audio permissions are required to facilitate a tele consultation with doctors & save medical records with the Cufront Healthcare app. The doctor might choose to record the tele consultation for medico-legal reasons. We will inform you on the tele consolation screen if the doctor chooses to record the video consultation session. We additionally seek permission for reading & writing files on external storage to allow you to upload & save medical records on the Cufront Healthcare app which you have full control over whether to share further with doctors or not. We don’t scan any other files from your storage system other than the files you’re explicitly uploading We require permission to use images or capture images from camera for updating profile photo, uploading images as medical record or measuring heart rate using Camera. We shall only save images where the user explicitly chooses to save images with the Cufront Healthcare app. Pulse rate detection feature uses a camera flash which can get hot, users are advised to remove their finger if it gets uncomfortable. We Need access to camera, Images and file upload in order to: Store medical records Update user Profile photo The user Images can only be saved on Cufront Healthcare app by explicit action by user. We will be using google gmail read only permissions to sync your appointments from multiple sources to Cufront Healthcare Cufront Healthcare Technologies’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. COOKIES Cookies are alphanumeric identifiers with small amount of data that is stored on the User’s device hard-drive containing information about the User, commonly used as an anonymous unique identifier. Cufront Healthcare Technologies and other third party service providers collect information about You using these cookies. Please note, a cookie in no way gives Us access to Your device. Our Portal uses these “cookies” to collect information and to improve Our service. Some cookies and other technologies may serve to recall Personal Information previously indicated by You. Most web browsers are set to accept cookies by default. If You prefer, You can usually choose to set Your browser to remove cookies and to reject cookies. If You choose to remove cookies or reject cookies, this could affect certain features of the Portal. Other websites may place their own cookies or other files on Your device, collect data or solicit personal information from You, for which We shall not be held responsible or liable. We encourage You to read the privacy policies of all external sites. PERSONAL INFORMATION DISCLOSURE We may disclose Personal Information that We collect from You or that You provide: to contractors, service providers and other third parties for analytics and communications and who are bound by contractual obligations to keep Personal Information confidential; as required by law, which can include providing information as required by a court order; when we believe in good faith that disclosure is necessary to protect Your safety or the safety of others, to protect Our rights, to investigate fraud, or to respond to a government request; to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all company’s assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which Personal Information maintained by the Portal is among the assets transferred; for any other purpose disclosed by Us when You provide the Personal Information; to deal with requests, enquiries, complaints or disputes and other customer care related activities including those arising out of the Users’ request of the Services and all other general administrative and business purposes; to government institutions/ authorities to the extent required (i) under the laws, rules, and regulations and/ or under orders of any relevant judicial or quasi-judicial authority; (ii) to protect and defend the rights or property of Cufront Healthcare ; (iii) to fight fraud and credit risk; (iv) to enforce Cufront Healthcare ’s Terms of Use (to which this Privacy Policy is also a part); or (v) when Cufront Healthcare , in its sole discretion, deems it necessary in order to protect its rights or the rights of others; and if otherwise required by an order under any law for the time being in force including in response to enquiries by Government agencies for the purpose of verification of identity, or for prevention, detection, investigation including cyber incidents, prosecution, and punishment of offenses. Cufront Healthcare may use Your personal data or contact information such as, Your name, address, postcode, gender, occupation, age, date of birth, email address, telephone number, company name, job title, and department only when Company requires it for the purposes of: i. processing Your application to use our Services and to provide You with the requested Services through mobile app; ii. dealing with any complaint, queries or problems reported by You regarding the Services offered by the Company; iii. notifying You of changes in its Services and help improve the Services Company provide to you; Location data usage We may use location data only to show you relevant results for showing relevant results for booking vaccination/appointment slots. We don’t save the location collected nor use it for any other activity on the app. USE OF INFORMATION Cufront Healthcare will collect and retain your personal information and any other information collected as per Clause 2 for such time as is necessary to provide our Services to you and for regulatory purposes. Any personal information submitted by you on the Platforms or collected by us will be used only for the purposes mentioned below: (i) for registration on the Platforms; (ii) to carry out our obligations arising from your requests for our Services; (iii) to provide the functionalities on the Platforms to the Users; (iv) to improve the Platform’s functionality, and to customise your future experience with us; (v) to make sure that a Platform’s content is presented in the manner that is most effective for you; (vi) to serve curated marketing and promotional content to the Users (vii) to copy, reproduce, store, distribute, publish, export, adapt, edit, and translate the information provided by you to the extent reasonably required for the provision of Services on the different Platforms (viii) for conducting research on efficient administrative practices on the Platforms; (ix) to communicate with you about any changes to our Platforms or Services; (x) to verify your identity and perform checks to prevent fraud; (xi) Non-personally identifiable information, exclusively owned by Cufront Healthcare may be used in an aggregated or non-personally identifiable form for internal research, statistical analysis and business intelligence purposes including those for the purposes of determining the number of patients and visitors on the Platforms and transactional details, and Cufront Healthcare may sell or otherwise transfer such research, statistical or intelligence data in an aggregated or non-personally identifiable form to third parties and affiliates; (xii) dealing with grievances, complaints and queries raised by Users; (xiii) Ensuring that the provisions of the Terms and Conditions and Privacy Policy are complied with by all Users. (xiv) For demarcating different types of Users and the Services availed by the Users. (xv) Ensuring you are not contacted for any information or Services that you have opted-out of; (xvi) To allow our third-party service providers to provide the services requested on the Platforms; No sensitive personal information will be shared with any third party. (xvii) maintenance of records as prescribed under law. (xviii) To allow our third-party service providers who work with Cufront Healthcare to (a) communicate with the Users; (b) maintain the Platform and Services; (c) perform usage analytics to help improve the Platforms and Services; (d) enable additional features on the Platforms and Services; (e) assist in marketing and promotional activities. In such circumstances, you consent to us disclosing your information (excluding sensitive personal information) to the third-party service providers for the intended purposes. (xix) for performance of our contractual obligations. (xx) for the purpose of payroll management and providing employee benefits and making employee related contributions. SECURITY Your security is important to Us. Cufront Healthcare adopts reasonable security practices and procedures to include, technical, operational, managerial and physical security control measures in order to protect all User information including Personal Information in its possession from loss, misuse and unauthorised access, disclosure, alteration and destruction. All data, content and/or all User information is encrypted during transmission and will be stored encrypted at-rest. Cufront Healthcare shall take reasonable steps to protect Your Personal Information in an effort to prevent loss, misuse, unauthorised access, disclosure, alteration, and destruction. Cufront Healthcare assumes no liability or responsibility for disclosure of Your Personal Information due to errors in transmission, unauthorised third-party access, or other causes beyond its control. Cufront Healthcare has undertaken reasonable measures to protect Your rights of privacy with respect to Your usage of the Portal controlled by Us and Services provided herein. However, We shall not be liable for any unauthorised or unlawful disclosures of Your Personal Information made by any third parties who are not subject to Our control. CONFIDENTIALITY You further acknowledge that the Portal may contain information which is designated confidential by Us and that You shall not disclose such information without Our prior written consent. Your information is regarded as confidential and therefore, will not be divulged to any third party, unless if legally required to do so to the appropriate authorities or shared as per this Privacy Policy or Terms of Use. We will not sell Your Personal Information to any third party or use Your e-mail address for unsolicited mail. Any emails sent by Us will only be in connection with the provision of agreed Services, and You retain sole discretion to seek for discontinuation of such communications at any point of time. USER’S RIGHTS All the information provided to Cufront Healthcare by a User, including Personal Information, is voluntary. User has the right to withdraw consent at any time, in accordance with the terms of this Privacy Policy and the Terms of Use, but please note that withdrawal of consent will not be retroactive i.e. We cannot delete the Personal Information for which We are custodians on behalf of Third Party Service Providers. Further, if a Third Party Service Provider ceases to be engaged with Cufront Healthcare , We may be contractually obligated to give such Third Party Service Provider a data export, however, given the nature of data, User may continue to co-owners of such data and Cufront Healthcare will continue to keep the Personal Information including User data for continues provision of Services to User. Users can access, modify, correct and delete the Personal Information. However, if the User updates his/ her/ its information, Cufront Healthcare may keep a copy of the information which User originally provided to Cufront Healthcare in its archives for User documented herein. In case the User seeks to update or correct, his/ her/ its Personal Information, the User may exercise these rights by emailing Cufront Healthcare at writeus@cufront.com and communicate the change(s) for updating Cufront Healthcare ’s records. If a user attempts to delete their account, Cufront Healthcare may retain certain personal information, as some or all of this data may be classified as shared resources between the doctor and patient. If a User, as a casual visitor, has inadvertently browsed any other pages of this Portal prior to reading the Privacy Policy and the Terms of Use, and such User does not agree with the manner in which such information is obtained, stored or used, merely quitting this browser application should ordinarily clear all temporary cookies installed by Cufront Healthcare . All visitors, however, are encouraged to use the “clear cookies” functionality of their browsers to ensure such clearing/ deletion, as Cufront Healthcare cannot guarantee, predict or provide for the behavior of the equipment of all the visitors of the Portal. If a User has inadvertently submitted any Personal Information to Cufront Healthcare prior to reading the Privacy Policy and Terms of Use, and such User does not agree with the manner in which such information is collected, stored or used, then such User can ask Cufront Healthcare , by sending an email to writeus@Cufront.com containing the rectification required, whether Cufront Healthcare is keeping Personal Information about such User, and every User is also entitled to require Cufront Healthcare to delete and destroy all such information relating to such user (but not other Users) in its possession. In case User does not provide its information or consent for usage of Personal Information or subsequently withdraws consent for usage of the Personal Information so collected, Cufront Healthcare reserves the right to discontinue Services for which the said information was sought. OPT OUT Cufront Healthcare may send You certain notifications regarding promotional offers, marketing offers or regarding the Services being availed by You etc. In case You do not wish to receive them, You may have an option to opt out of the same. If You opt out, Cufront Healthcare or its affiliates consents to not send any non-essential (promotional, marketing-related) communications to You, however, We may still send You non-promotional emails, such as emails about Your account. AMENDMENT Cufront Healthcare reserves the right to amend the Privacy Policy, as and when required. It is Your responsibility to keep yourself updated of the changes made from time to time. Your continued use of the Portal shall be deemed to be Your acceptance of such changes. GRIEVANCE REDRESSAL In compliance with Information Technology Act, 2000 and the rules made thereunder, the Grievance Officer of Cufront Healthcare for the purpose of this Policy shall be: Name: Rishabh Sahu Contact Details: writeus@cufront.com Designation: Grievance Officer In case You have any questions, comments or concerns about this Privacy Policy or wish to exercise any of the above mentioned rights, You can contact us at writeus@cufront.com please make in paragraph same as terms and conditions