Privacy Policy

1. Information We Collect

Depending on how you use SyncureOS, we may collect the following categories of information.

1.1 Information About Healthcare Professionals and Users

This may include:

• Name;
• Email address;
• Phone number;
• Professional details;
• Clinic or organisation name;
• Login credentials;
• Account information; and
• Other information provided while creating or managing an account.

1.2 Patient Information

Healthcare professionals and organisations using SyncureOS may enter or manage patient information through the platform. This may include:

• Patient name;
• Phone number;
• Email address;
• Age or date of birth;
• Gender;
• Appointment details;
• Medical notes;
• Prescription information;
• Healthcare-related records; and
• Other information entered by authorised users for healthcare administration and service delivery.

1.3 Technical Information

We may automatically collect certain technical information, including:

• IP address;
• Device information;
• Browser type;
• Operating system;
• Log information;
• Usage information; and
• Information about interactions with the Services.

1.4 Communication Information

We may collect information when you contact us, including:

• Your name;
• Contact details;
• Messages; and
• Other information you choose to provide.

2. How We Use Information

We may use personal information to:

• Provide and operate SyncureOS;
• Create and manage accounts;
• Manage appointments and administrative workflows;
• Enable authorised healthcare professionals to manage patient information;
• Facilitate patient communications;
• Provide customer support;
• Improve and develop our Services;
• Maintain security and prevent misuse;
• Comply with legal obligations;
• Communicate important updates; and
• Perform other purposes communicated to you where permitted by applicable law.

We will process personal information only for lawful and appropriate purposes.

3. Healthcare and Patient Information

SyncureOS may process healthcare-related information on behalf of healthcare professionals, clinics, hospitals, or healthcare organisations.

In many circumstances, the healthcare professional or organisation that collects patient information determines:

• What information is collected;
• Why it is collected; and
• How it is used in connection with healthcare services.

Healthcare professionals and organisations are responsible for ensuring that they provide appropriate notices and obtain any permissions, consent, or authorisations required under applicable law. SyncureOS may process such information to provide and maintain the Services.

4. Consent and Your Choices

Where consent is required under applicable law, we or the relevant healthcare organisation will seek appropriate consent before processing personal information.

Where applicable, individuals may withdraw consent, subject to legal and legitimate requirements for retaining certain information. Withdrawal of consent may affect the availability or functionality of certain Services.

For patient information managed by a clinic or healthcare provider, requests relating to healthcare records may need to be directed to the relevant healthcare provider or organisation.

5. How We Share Information

We do not sell personal information. We may share information with:

5.1 Authorised Healthcare Professionals and Organisations

Patient information may be accessible to authorised healthcare professionals and personnel associated with the relevant clinic or healthcare organisation.

5.2 Service Providers

We may use trusted service providers to help us operate our Services, such as providers of:

• Cloud hosting;
• Data storage;
• Communications;
• Payment processing;
• Analytics;
• Security; and
• Technical infrastructure.

Such providers may process information only as necessary to provide services to us and subject to appropriate contractual and security obligations.

5.3 Legal and Regulatory Requirements

We may disclose information where required or permitted by applicable law, including when necessary to:

• Comply with legal obligations;
• Respond to lawful requests;
• Protect the rights, safety, and security of users or others; or
• Prevent fraud or misuse.

6. Data Security

We implement reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure. Security measures may include, where appropriate:

• Access controls;
• Authentication mechanisms;
• Encryption or secure transmission;
• System monitoring;
• Role-based permissions; and
• Other appropriate security practices.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. Users are also responsible for protecting their account credentials.

7. Data Retention

We retain personal information only for as long as reasonably necessary for:

• Providing the Services;
• Maintaining records;
• Meeting legal or regulatory obligations;
• Resolving disputes; and
• Enforcing agreements.

The retention period may vary depending on the type of information and the requirements applicable to healthcare professionals or organisations. When information is no longer required, we may delete, anonymise, or securely dispose of it in accordance with applicable law and our internal practices.

8. Your Rights

Subject to applicable law, individuals may have rights relating to their personal information. Depending on the circumstances, these may include the ability to:

• Request information about the processing of personal information;
• Request correction or updating of inaccurate information;
• Request deletion of personal information where applicable;
• Withdraw consent where processing is based on consent; and
• Submit grievances regarding the handling of personal information.

Certain requests may need to be directed to the healthcare professional or organisation responsible for the relevant patient information. We may need to verify your identity before responding to certain requests.

9. Children's Information

SyncureOS may process information relating to children when such information is entered and managed by authorised healthcare professionals or organisations for legitimate healthcare-related purposes. Healthcare professionals and organisations using SyncureOS are responsible for ensuring that information relating to children is collected and processed in accordance with applicable law. We do not knowingly permit unauthorised use of SyncureOS accounts by individuals who are not legally eligible to use the Services.

10. Cookies and Similar Technologies

Our website or Services may use cookies and similar technologies to:

• Maintain functionality;
• Remember preferences;
• Understand how users interact with our Services;
• Improve performance; and
• Enhance security.

Where required, we will provide appropriate information and choices regarding cookies. You may manage certain cookies through your browser settings. Disabling cookies may affect the functionality of some parts of the Services.

11. Analytics

We may use analytics tools to understand how users interact with our website and Services. Analytics information may include information about:

• Pages visited;
• Features used;
• Device type;
• Browser information; and
• General usage patterns.

We use such information to improve our Services, security, and user experience.

12. Third-Party Links and Services

SyncureOS may contain links to or integrate with third-party services. We are not responsible for the privacy practices of independent third parties. We encourage users to review the privacy policies of third-party services before providing personal information to them.

13. Data Transfers

Where personal information is processed using service providers or infrastructure located outside India, we will take appropriate steps consistent with applicable law to protect the information and facilitate lawful processing or transfer.

14. Data Protection and Applicable Indian Law

We process personal information in accordance with applicable laws and regulations in India, including applicable data protection and information technology laws. As applicable laws and regulations evolve, we may update our privacy practices and this Privacy Policy.

15. Grievance Redressal

If you have questions, concerns, or complaints regarding the handling of personal information, you may contact our Grievance Officer:

We will address grievances in accordance with applicable law.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our Services;
• Technology;
• Legal requirements; or
• Our privacy practices.

When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy. Where required, we will provide additional notice of material changes.

17. Contact Us

For questions about this Privacy Policy or our privacy practices, please contact:

For privacy-related grievances: