Privacy Policy for Indian Health Adviser

1. Introduction
Greetings from Indian Health Advisor. We place a high priority on protecting your privacy and your health and personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data, in compliance with India’s applicable laws.

2. Scope
This Policy applies to all data collected via our website www.indianhealthadviser.com and related digital services. Please review this policy carefully. By using our services, you accept the practices outlined here.

3. Legal Framework
We align with the following Indian legal requirements:

• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011: mandates clear policies on collection, usage, disclosure, and security of sensitive personal data.
• Digital Personal Data Protection Act, 2023 (DPDP Act): governs digital personal data processing, ensuring consent, rights of individuals to access, correct, and withdraw consent, and mandates transparency and accountability.
• Applicable health sector guidelines, including the Health Data Management Policy and ICMR principles emphasizing privacy-by-design, accountability, consent frameworks, and data minimisation.

4. What Information We Collect

• Personal Information: Name, contact (email, phone), age, gender, location.
• Health/Sensitive Data: Medical history, self-reported symptoms, health assessments, diagnostic information—all considered sensitive personal data under Indian law.
• Technical Data: IP address, device type, browser details, site usage, cookies, and analytics.

5. How Information Is Collected

• Voluntarily supplied forms (e.g., health queries, research participation).
• Automatically through the use of site analytics and cookies to improve performance.

6. Purpose of Collection & Use
We process data for:

• Delivering health advice and relevant content.
• Internal improvements (e.g., customizing information, analytics).
• Communication: newsletters, responding to your requests (with consent).
• Compliance with legal obligations and research (where applicable).

7. Consent
We obtain explicit and informed consent before collecting or processing your sensitive health data. Under the DPDP Act, consent must be unambiguous, informed, and limited to the specific purpose.

8. Disclosure of Information
We may share personal data with:

• Service Providers engaged in support infrastructure (hosting, analytics), who are contractually bound to maintain confidentiality.
• Third Parties if legally required (e.g., court orders) or with your explicit consent.
• Aggregated or anonymized data for research or operational insights.

9. Security Measures
We implement reasonable security practices including encryption, access controls, regular audits, and data retention policies in line with Rule 8 of the IT Rules, 2011.

10. Data Retention
We only keep personal information for as long as it’s required by law or for the purposes above. Sensitive health records are retained and deleted according to relevant health sector and legal guidelines (e.g., clinical trial rules or data minimisation norms).

11. Your Rights
Under the DPDP Act, you have rights to:

• Access your personal data.
• Correct or update inaccuracies.
• Withdraw consent at any time.
• Request data erasure.
• If necessary, choose a nominee to oversee your data rights.

12. Cookies & Tracking
Our website uses cookies and similar technologies for functionality and analytics. You may opt out—note that this may impact your site experience.

13. External Links
Links to third-party sites are beyond our control; their privacy practices may differ, and this policy doesn’t apply to them.

14. Children’s Privacy
Our services are not intended for children under the age of eighteen. In accordance with current regulations, parental approval will be sought before collecting data from minors.

15. Changes to This Policy
We may update this Policy periodically—significant changes will be highlighted on the site or via email. The effective date will be updated accordingly.

16. Contact Us
For questions or data requests (access, correction, deletion, etc.), reach out to us at:

Email: info@ekamcure.com
Address: Delhi, India