REDCLIFFE LABS PRIVACY POLICY

Information Collected by Redcliffe Labs

Information collected by Redcliffe Lifetech Pvt Ltd and its subsidiaries.

This Privacy Policy is a substantial part of the contractual conformity between you and Redcliffe Lifetech Pvt Ltd hereinafter referred to as ("redcliffelabs.com," “Redcliffe Labs,” "Redcliffe Lifetech," "us," "we," "our," "Company," "Website"), which you agree to while using/browsing/ visiting “redcliffelabs.com” Website or elsewhere or used any other technology system or gateway offered by Redcliffe Labs (which owns and operates redcliffelabs.com) or its affiliates. This Policy ascertains how we and/or our vendors/partners/authorized collection centres gather, protect, use, and store your data. You have consented to Redcliffe processing your data as per the applicable data privacy law.

Company Policy precisely presents how the Company collects your personal data. You agree to allow access to the Company. Kindly read our Privacy Policy carefully.

If you have any questions regarding the Privacy Policy mentioned herein, you can contact our team at [email protected]

Information shared by the Users

We gather the following "personal information" about users where they voluntarily agree to provide it to us through our website/app/call centre/whatsapp/collection centre or any other communication channel:

• Acknowledgment
• First Name, Last Name
• Email details (Email id)
• Disease Symptoms
• Age
• Gender
• Location/Address
• Phone Number
• Postal Code
• Financial Information; online transaction details, bank account details

How we use your information

Company gathers your personal information for various business requirements. It includes, but is not limited to:

• Examine and provide report results for the tests desired by the patient/user.
• Resolve your queries for service, support, or assistance.
• Information related to age & gender to give reports accurately.
• Provide, preserve and improve our services.
• Maintain social history as directed by prevailing law or policy.
• Redcliffe Labs reserves the sole discretion to utilize de-identified customer information, through direct or indirect channels, for research purposes that may include but is not limited to enhancing services, launching products, or conducting industry analyses.
• To permit debugging, testing, and otherwise control of our platforms.
• We may also use your information to access your data stored by third-party platforms, including social media sites like (Facebook, Instagram, Twitter, Truecaller, LinkedIn, etc.)
• To provide you with information about services we consider similar to those that you are already using, or have enquired about, or may interest you. If you are a registered user, we will contact you by electronic means (e-mail or SMS or Whatsapp or telephone or other internet based instant messaging systems) with information about these services.
• To understand our users/customers (what they do on our Services, what features they like, how they use them, etc.), improve the content and features of our Services (such as by personalizing content to your interests), process and complete your transactions, make special offers, provide customer support, process and respond to your queries.
• To allow you to participate in interactive features of our Services, if any or
• To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant targeted advertising to you.

How we use your email address and phone number

• Registration confirmation and password reminder.
• Communication related to booking information, delivery information, etc.
• Occasional offers, if any, send exclusive offers and information regarding new product launches, Services, and general info.
• Company doesn't disclose its users' personal information to any third party unless:
  • It is essential for providing services, or you have allowed us to do so,
  • We are legally eligible to do so, i.e., in fulfilling regulatory needs or in complying with a court order or other legal/quasi-permissible process, or
  • It is important to protect and secure the rights or property of this website. We are not liable for any personal information which is usually accessible to the general public.
• By agreeing to this Privacy Policy, you are also allowing us to share or aggregate non-personal data about website usage with certain third parties. This summative information does not comprise.
• Any personal data about the users. We take ample measures to ensure that our third parties take up the practical and sensible level of security processes to ensure the safety of users' data.

Collection, Use, Storage, and Transfer of Personal Data

We will only collect, use, store and Transfer your Customer Information as permitted under applicable law or pursuant to contractual obligations. Most commonly, we will use your Customer Information to perform the Services or to comply with a legal/contractual obligation. We use your Customer Information without limitation, for the following purposes:

• to verify your identity to register you as a Customer, and create and operate your account(s) with us;
• to provide the Services to you;
• to comply with legal obligations;
• to administer and protect our business and the Services, including for troubleshooting, data analysis, system testing, and performing internal operations;
• for risk control, fraud detection, and prevention;
• to perform our obligations that arise out of the arrangement we are about to enter or have entered with you;
• to respond to court orders, establish or exercise our legal rights, or defend ourselves against legal claims;
• to improve customer service to effectively respond to your service requests and support needs;
• to improve the functionality of our Services based on the information and feedback we receive from you;
• to send notifications to manage our relationship with you including to notify you of changes to our Services, send you information and updates pertaining to the Services you have availed, and to receive occasional company news and updates related to us or the Services;
• to monitor trends and personalize your experience;
• to market and advertise the Services to you;
• to engage with customers with relevant health trends, tips and recommendations;
• to improve our business;

Prominent Disclosure & Privacy Policy:

Company Website and Application might include service pages that request access to the user's technical and device information, which shall always be dealt with per the company’s privacy policy in consonance with the application data protection laws. Agreeing to the privacy policy, you consent to the following terms and conditions:

• GPS Location from Access_Coarse_Location & Access_Fine_Location:
  The app requests the GPS location for an improved user experience. The apps with location-based capabilities need permission to send notifications and use the location of your device. They will be limited if you don’t grant ‘Always’ location permission and permission to send notifications. The ‘When in Use’ permission allows for some functionality, but it’s not enough if you want to use the app when it’s not open fully. Location data is helpful for healthcare applications like Redcliffe Lifetech to get the home sample collection precisely done, share the data of nearby collection centers, pathology Lifetech, and deliver the offline reports to the exact address as and when required. However, we are not responsible if there is any data breach by the network or service provider.
• Files, Images, and Videos from Read_Internal_Location or Read_External_Location:
  Some pages of the healthcare app might need access to pictures, videos, or documents to allow you to take full advantage of the functionality they provide. For example, in the case of diagnostic services, granting file permissions from external and internal drives might help you upload the prescriptions and store the downloaded reports in your system. We ensure that all your data is intact and shared as per the requirements seeking your permission, but if it is a third-party data breach or due to malfunction of any of the unprotected applications in your phone hindering with the safe and secure functioning of our application, we will not seek any responsibility for the same.
• Sim Serial Number From the Read_Phone State:
  To protect the persistent device identifiers (IMEI/MEID, IMSI, SIM, and build serial) behind the READ_PHONE_STATE runtime permission, the Redcliffe Lifetech healthcare app does not invade the privacy and keeps your sim’s security intact.
• Automatic OTP Verification:
  We are committed to providing a secure and seamless login experience for our users. As part of this commitment, we have implemented automatic OTP (One-Time Password) verification on our website/app. This feature enhances the security of your account and streamlines the login process, ensuring that your personal information is protected. By using our services, you agree to the automated OTP verification process. We may collect and use your mobile phone number for OTP delivery and verification purposes. Rest assured that we treat your personal information with the utmost care and adhere to our privacy policies and security standards to safeguard your data.
• SSID/BSSID from Access WI-Fi State:
  SSID/BSSID is used for management and maintenance. The app can get your location by tracking SSID/BSSID while you're actively connected to the Wi-Fi network. If you find it unnecessary to share your location and protect your privacy, access to SSID/BSSID can be covered by changing the location permission. Redcliffe Lifetech’ app doesn't obtain your location without consent. If you grant permission to location, it signifies you agree to all our privacy policy terms and conditions.

Your Rights under the Digital Personal Data Protection Act, 2023

• Digital Personal Data Protection Act, 2023 (DPDP Act) has provided the below rights:
  • Notice: Every request made to a User/Client/Customer for consent shall be accompanied or preceded by a notice given by the Company to the User/Client/Customer. In case the User/Client/Customer is a Child or a person with disability, the Company shall ensure to take verifiable consent from the Parent/Guardian.
  • Access: User/Client/Customer shall have the right to obtain Personal data that has been obtained by the Company with their Consent.
  • Correction: User/Client/Customer shall have the right to request the Company to make corrections to the personal data provided to the Company.
  • Erasure: User/Client/Customer shall have the right to request the Company to delete the personal data provided to the Company.
  • Grievance Redressal: User/Client/Customer shall have the right to have readily available means of grievance redressal provided by a Company in respect of any act or omission regarding the performance of its obligations in relation to the personal data.
  • Nomination: User/Client/Customer shall have the right to nominate any other individual, who shall, in the event of death or incapacity of the User/Client/Customer, exercise the rights of the User/Client/Customer.

Data Protection, Privacy & Grievance Support

For any enquiry or complaint on how we manage, collect, store, and use your personal information, or to seek to exercise your privacy rights in regard to the personal information stored by the company, you may contact our Grievance Support Committee at [email protected]

Vivek Sharma acts as the appointed Consent Manager & Grievance Officer on behalf of the company. As the designated officer, he is the primary point of contact to facilitate Data Principals' rights, enabling them to provide, manage, review, and withdraw their consent regarding the processing of personal data. He ensures that a transparent, accessible, and interoperable platform is available for Data Principals to exercise their rights in accordance with the applicable data protection laws and regulations.

Grievance Committee

A dedicated Grievance Committee comprising a professional team from diverse verticals within our organization is set up. This committee collaborates internally to address and handle grievances raised by the Data Principals at any point in time. The Grievance Committee serves as the core team responsible for managing and resolving grievances.

The Grievance Committee complies with our internal policies, procedures, and applicable data protection laws to ensure effective and fair resolution of grievances concerning the processing of personal data.

How we access your reports or data

• In some cases, patients' reports and information is shared with physicians or healthcare professionals for proper diagnosis and treatment.
• Patients' report is used for billing purposes, and we may also share it with insurance companies, healthcare departments, physicians for payment rationale. We ensure that patients' privacy is protected in the process.
• We may access your information or reports to carry our healthcare-related activities like performing a quality check for testing and quality analyses purposes.

Links to third-party websites

On our website, you will come across several links to third-party platforms. These links may be our company, or they may appear as content that other users generate. These linked third-party platforms are not under our control and thus we are not accountable for their actions. Before providing your data through any other website, you should analyze the terms and conditions of that website.

Face Scan

Please read these terms and conditions carefully before using our face scan function for vital health parameter analysis. By using this Service, you agree to comply with and be bound by the following terms and conditions:

1. Consent and Authorization

   By using our face scan service, you consent to the collection and analysis of your facial data for the purpose of identifying health parameters, including heart rate, stress level, and more.

2. Data Privacy and Security

   We prioritise the privacy and security of your data. Your facial scan data will be stored securely and treated in accordance with our privacy policy.

3. Accuracy of Results

   The health parameter results generated by the face scan are for informational purposes only. They should not be considered a substitute for professional medical advice. Consult a healthcare professional for any health concerns.

   The health parameter results generated by a face scan are based on a variety of factors, including the person`s age, gender, and facial features. These results can be used to estimate a person`s overall health, but they should not be considered a substitute for professional medical advice

   Redcliffe Labs is not liable for any damages arising from the use of any results.

4. Age Restriction

   This Service is intended for individuals aged 18 and above. If you are under 18, please do not use this Service.

5. Data Retention

   We will retain your facial scan data for as outlined in our privacy policy to show the user for scan history.

6. Limited Liability

   We do not assume any liability for the accuracy, completeness, or usefulness of the health parameter results obtained through this Service.

7. Consent Revocation

   You have the right to withdraw your consent at any time. To do so, please contact our customer support.

8. Compliance with Laws

   You agree to use this Service in compliance with all applicable laws and regulations in your jurisdiction.

9. Updates and Modifications

   These terms and conditions may be updated or modified at our discretion. Please check this page periodically for any changes.

10. Contact Information

    For questions or concerns about these terms and conditions or our face scanning service, please contact our customer support.

    By using our face scan service, you acknowledge that you have read, understood, and agreed to these terms and conditions.

11. Non-Medical Disclaimer

    This is a software/AI based assessment and should not be used as a substitute for professional medical advice.

12. The AI Face Scan feature is intended solely for general wellness and informational purposes. It uses artificial intelligence to estimate physiological indicators such as heart rate and blood pressure based on facial analysis, which may be affected by environmental and technical factors. This feature does not provide medical diagnoses and should not be considered a substitute for professional healthcare advice, diagnosis, or treatment. Users should consult a qualified medical professional for any health concerns. By using this feature, you acknowledge and agree that the company is not liable for any decisions or actions taken based on the information provided.

13. Additional face scans once purchased cannot be cancelled, and no refunds will be applicable after the purchase is completed.

14. All remaining face scans will expire on the last day of the month.

Transfer of user data

We may transfer the data shared by you in the event of a transfer of ownership of Redcliffe Lifetech or the attainment of substantially all the assets of Redcliffe Lifetech related to the owner who collected such information, like acquisition by or a merger with another company. When any such thing happens, Redcliffe Lifetech will inform users who have provided email addresses.

Amendments to the Privacy Policy

Redcliffe Lifetech reserves all the rights to amend or bring modifications/changes to this Privacy Policy, and any of its other processes regarding the treatment of data collected through the Website, without prior notice. Any alterations to this Privacy Policy will become effective upon posting the modified Privacy Policy on the Website.

Cookies Policy

When you use services offered by Redcliffe Lifetech, it sends "cookies" to your device or computer when you access the Website and the Services such cookies as explained here. The services use cookies to advance the quality of our website, build recommendations, and make the experiences for the users easier for our members. Cookies are small text file recorded on users' hard drive or smartphone that classifies them as inimitable users and comprises certain information about their specific login session or use of the Services.

Redcliffe Labs, together with its affiliates and trusted partners, makes use of cookies and other similar technologies on its Platform for the purposes of delivering relevant advertising, personalizing content, performing site analytics, and improving user experience. Cookies are small text files placed on a user’s device or browser which enable the Platform to recognize returning users, remember user preferences, and facilitate smoother interactions with the Platform.

By accessing or using the Platform, you acknowledge and consent to the use of cookies in the manner set out herein. The cookies deployed may include essential cookies required for the operation of the Platform, functional cookies that allow us to remember your preferences, analytical cookies which assist in understanding how users interact with the Platform, and advertising cookies used to deliver personalized marketing and promotional content. In addition, certain third-party cookies, including but not limited to those deployed by analytics service providers such as Google Analytics and social media platforms, may also be installed on your device when you access or interact with the Platform. Redcliffe Labs does not exercise control over such third-party cookies, and users are advised to review the respective privacy and cookie policies of such third-party service providers for further details.

Users shall have the right to accept, reject, or customize their cookie preferences at any time through the cookie banner or settings displayed on the Platform. It is clarified that while users may choose to disable or reject cookies, such action may impair the functionality of the Platform or result in the unavailability of certain features or services. Essential cookies, which are strictly necessary for the functioning of the Platform, shall remain enabled at all times.

This Cookie Policy shall be applicable to all users globally, including users accessing the Platform from India, and the cookie preference management mechanism shall be displayed to both international and domestic users alike. For any further information or clarification regarding the use of cookies, users may refer to the Privacy Policy of Redcliffe Labs or contact us at Redcliffe contact email ID.

Firebase

Firebase provided by Google is used by RedcliffeLifetech to collect the data from the mobile app in order to effectively evaluate the use of app and app crash reports. More Information: Firebase Privacy Policy(link - https://firebase.google.com/support/privacy)

MoEngage

This Privacy Policy is applicable to personal information/phone numbers, or any critical information shared with MoEngage to provide better experience and services to customers, including information that is of a confidential nature belonging to the customers, potential customers, and other users of the services of Redcliffe Lifetech Private Limited, its affiliates and group companies. We ensure that that any recipients of Customer Information that we transfer are subject to suitable confidentiality obligations and access to and processing of Customer Information is in accordance with applicable laws/internal policies in respect of the storage and transfer of Customer Information.

Contact Us

You can contact us for any queries regarding our terms of service or privacy policy to resolve your questions. You can also submit your request or query regarding our terms of services or privacy policy at: [email protected]

Office Address

H-55, Sector 63 Road, A Block, Electronic City, Noida, Uttar Pradesh 201301.