Introduction
This Privacy Policy describes what information HealthProNext.com, a portal operated by NxTechWorks Consulting (OPC) Private Limited ("HealthProNext", "NxTechWorks", "Company", "We"/"Us"/"Our") — incorporated under the Companies Act, 2013, with registered office at B5, S. No. 7 and 8, Balewadi, Pune 411045, Maharashtra, India — may collect from a user ("You", "Your", or "User") on or through our website https://healthpronext.com/ ("Site") and in relation to services rendered by Us (collectively the "Platform").
Services include facilitation of digital health consultations, telemedicine services, hardware/software device provision, and scheduling of physical consultations with Registered Medical Practitioners ("RMP") and other Healthcare Service Providers.
By using Our Platform or Services, You confirm that You have read, understood, and agree with the practices described in this Privacy Policy and our Terms of Use, and consent to the collection, storage and processing of Your information accordingly.
The Platform acts as a tool connecting Registered Medical Practitioners and patients/customers for convenient access to consultation services. Information about RMPs — including name, photographs, registration ID, qualifications, experience and specialties — is hosted for information purposes only and does not constitute an advertisement.
This Privacy Policy is published in compliance with: (a) Section 43A of the Information Technology Act, 2000 ("IT Act"); (b) Rule 4 of the IT (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 ("SPDI Rules"); and (c) Regulation 3(1) of the IT (Intermediaries Guidelines and Digital Media Ethics Code) Rules, 2021.
General Terms
- (a)By clicking 'Continue' during sign-up, accessing the Platform, or providing Us Your information, You confirm You have capacity to enter into a legally binding contract under Indian law (Indian Contract Act, 1872) and agree to be bound by this Privacy Policy.
- (b)You consent to Our collection, use, sharing, and disclosure of Your information. We reserve the right to amend this Privacy Policy at any time; continued use of the Platform constitutes implicit acceptance of any amendments. We will notify You of changes as required by applicable law.
- (c)If You access the Services from an overseas location, You do so at Your own risk and are solely liable for compliance with any applicable local laws.
- (d)If You do not agree with this Privacy Policy, please do not use this Site or any Services.
Information We Collect
(a) Information You Give Us
When You register, We collect details such as phone number, name, geographical address, and email address (verified via OTP). We may also collect sensitive personal data or information ("SPDI") including health history, health status, laboratory results, treatment plans, medication and dosage details, diagnostic results, Patient Health IDs, and payment information (card number, expiry, billing address). We may also store prescriptions, treatment notes, and data shared by third parties such as diagnostic and prescription information.
(b) Registered Medical Practitioner Data
RMPs creating an account may be required to provide: name, user-ID, email, password, medical registration ID, qualification, address, gender, age, phone number, specialties, resume, educational and registration documents, PAN card, bank details, and languages spoken.
(c) Information from Other Sources
We may receive information about You from partners, advertisers, or third parties on the Platform. For quality monitoring, We may access exchanges between RMPs and Customers (via secured recorded lines), as well as browsing history, IP address, OS type, browser type, and ISP name. Temporary cookies may be used for technical administration and R&D.
(d) Cookies & Tracking Technologies
We use cookies and tracking technologies to improve Your experience. Tracking technologies may record internet domain/host names, IP addresses, browser/OS types, stream patterns, and access dates/times. You may disable cookies in Your browser settings, though some Platform features may be unavailable as a result.
(e) Third-Party Tools
We use third-party SDKs — primarily for payment options and experience enhancement — within the Platform.
(f) Automatic Information
We receive certain information automatically when Your browser accesses the Site, including OS type/version, device brand, browser and version, and user-agent details. We may also receive Your location data and a unique device identifier for internal analysis and location-based services.
The IT Act & SPDI Rules
You agree that You are providing all information, including SPDI, to Us voluntarily. Collection, use, and disclosure of personal information and SPDI requires Your express consent. You may choose not to provide such information, but in doing so We will be unable to provide access to Our Site or Services.
How We Use the Information We Collect
(a) Primary Purposes include:
- iCarrying out obligations arising from Your service requests on the Platform
- iiOperating and improving the Platform for a positive user experience
- iiiProcessing and delivering Your service requests
- ivEnabling Your access to Our Site and Services
- vFacilitating consultations with Registered Medical Practitioners
- viAnalysing data, tracking trends, building algorithms, rating systems and recommendation engines
- viiResearch and development
- viiiResponding to requests, customising orders, and communicating with You
- ixNon-targeting purposes: frequency capping, compliance, billing, ad reporting, market research
- xComplying with applicable law
- xiConducting audits and quality assessments
- xiiAnalysing resource use and troubleshooting problems
- xiiiContacting Users for updates, query resolution, follow-up consultations, or new services
- xivInvestigating and preventing illegal activities, fraud, or safety threats
- xvCommunicating promotional alerts, Site updates, or changes in fees
- xviCollecting feedback via SMS, WhatsApp, email, or phone calls regarding Our products and services
(b) Cookies / Auto-Collected Information is used to personalise Services, provide customised ads and content, monitor effectiveness, track aggregate metrics, and monitor promotion activity.
(c) We may access or store Your information to detect, prevent, or address fraud and illegal activity.
(d) Location data may be used to confirm jurisdiction eligibility and identify an appropriate RMP.
(e) We may collect, analyse, and sell de-identified information — of which personal or SPDI may be a component — for business or research purposes not prohibited by applicable law.
Do We Share the Information We Receive?
We only share personal information with third parties that have implemented adequate data protection measures. By using Our Platform, You consent to storage and processing of personal information and SPDI by such third parties. Categories of sharing include:
- iService Operations: Partners handling postal mail, newsletters, email, marketing, consultation with RMPs, payment processing, and customer service. They may not use the data for purposes beyond their function.
- iiLegal Obligations: We may release information in good faith to comply with law, protect rights or property, prevent crime, ensure national security, or protect user safety.
- iiiMergers & Transfers: Any entity to which We transfer assets or merge with may continue to use Your information per this Privacy Policy. We may share anonymised, aggregate data with partners and investors.
- ivService Improvement: Recorded consultations and e-prescriptions may be used to improve Services and target consultation for underlying medical conditions. SPDI may be transferred to third parties, including outside India, with appropriate data protection safeguards.
Transfer Outside India: Subject to applicable law, We may transfer personal information and SPDI to a body corporate in India or any other country that ensures at least the same level of data protection as We provide.
How Secure Is Information About Me?
- (a)We maintain electronic, physical, and procedural safeguards and may request proof of identity before disclosing personal information.
- (b)Transmissions are encrypted using SSL software. We maintain security in line with international standards for Information Security Management Systems.
- (c)Access to personal information is restricted to employees and agents who need it for processing and are subject to strict confidentiality obligations.
- (d)No employee or administrator will have knowledge of Your account password. You must log off when You have finished. We are not liable for unauthorised use of Your account or password.
- (e)If You suspect unauthorised account use, notify Us immediately at the contact details below.
- (f)We may not be able to seek prior consent before disclosing information if demanded by government agencies or otherwise mandated by law.
- (g)We are not responsible for breaches caused by third parties, acts of government, computer hacking, crashes, poor internet service, or other events beyond Our reasonable control.
What Information Can I Access?
The Platform gives You access to a broad range of information about Your account and interactions for the purpose of viewing, and in certain cases modifying or deleting, information on the Site. You may opt out of optional services such as promotional materials.
You may request erasure of Your information including SPDI from the Platform database. The Company will process such erasure after recording Your explicit consent without necessarily notifying the RMP or any third party. Once deleted, such deletion is final and irreversible.
Are Children Allowed to Use the Platform?
Use of the Site is available only to persons who can form a legally binding contract under the Indian Contract Act, 1872. If You are under 18 years of age, please do not use or access the Service(s).
If We learn that a person under 18 has accessed the Platform or that personally identifiable information has been collected from them, We will take appropriate steps to delete this information. Parents or guardians may alert Us at info@nxtechworks.com to request deletion of a child's information.
Third-Party Links
The Site may include hyperlinks to external websites, advertisements, applications, content, or resources ("Third Party Links"). We have no control over such links and are not responsible for any collection or disclosure of Your information by external sites or companies.
The presence of any Third Party Link does not constitute a recommendation or endorsement. We are not liable for any loss or damage resulting from disclosure of Your information via Third Party Links. All transactions between You and third-party sites are strictly bi-partite.
We recommend reviewing the privacy policies of any third-party websites You visit via links on Our Platform, and exercising reasonable diligence before sharing information or committing to any transaction.
Retention of Information
(a) Personal information and SPDI may be retained by Us or by the following third-party storage providers:
- ·DigitalOcean LLC, 101 Avenue of the Americas, 2nd Floor, New York, NY 10013, USA
- ·MongoDB Cloud — MongoDB Limited, Building Two, Number One Ballsbridge, Dublin 4, Ireland
- ·WhatsApp by Meta — Meta Headquarters, 1 Hacker Way, Menlo Park, CA 94025, USA
Your SPDI will be destroyed and/or anonymised once the purposes for collection have been fulfilled and retention is no longer necessary or required by law.
(b) We may retain personal information for business purposes. After a period of time, data may be anonymised and aggregated and held as long as necessary for analytics or service provision.
(c) To withdraw consent, cancel Your account, or request We cease using Your personal information, contact Us at the details below. Note that withdrawal of consent may result in Us being unable to provide You Services.
(d) Uninstalling the Application does not result in deletion of Your personal information or SPDI.
Changes to Your Information
You may review, correct, update, or change information by logging into Your account. You are not permitted to delete any part of personal information or other information generated on the Platform without following the erasure request process described above.
Should You modify Your information in a way that cannot be verified by Us or renders it incorrect, We may be unable to provide access to the Site or Services. We reserve the right to verify and authenticate Your identity before making corrections.
Contact & Grievances
If You have any concern about privacy or grievances on the Site or the App, please contact Our Grievance Officer. We shall endeavour to resolve Your grievances within 15 (fifteen) days from the date of receipt.
Miscellaneous
(a) Disclaimer: We cannot ensure that all personal information and SPDI will never be disclosed in ways not described in this Privacy Policy. As a User, You assume all responsibility and risk for Your use of the Site, the internet generally, and the information You post or access. The Company shall not be responsible for acts or omissions of Registered Medical Practitioners.
(b) Indemnity: You agree to indemnify Us in any suit or dispute by any third party arising out of Your disclosure of information to third parties, either through Our Site or otherwise. We assume no liability for third-party actions with regard to Your personal information or SPDI that You have disclosed to such third parties.
(c) Severability: Each clause of this Privacy Policy shall remain separate from and independent of all other clauses. The declaration that one or more clauses are null and void shall have no effect on remaining clauses.