Privacy Policy

This Privacy Policy describes how MedsSeva Global Healthcare Private Limited ("MedsSeva", "we", "us", "our") collects, uses, stores, shares and protects your personal information when you use:

• Our websites: medsseva.com, lab.medsseva.com and related subdomains; and
• The MedsSeva mobile application available on the Google Play Store and/or Apple App Store (together, the "Services").

By using our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

1. Information We Collect

a) Information you provide to us

• Identity & contact details: name, mobile number, email address, postal address, city and pincode — for example when you submit a franchise enquiry, contact form, career application, or create an account.
• Booking information: when you book a diagnostic/pathology test through our lab portal, we collect patient name, age, gender, contact details, address for sample collection, and the tests/packages selected.
• Business information: details submitted as part of franchise applications, such as investment capacity, preferred location and professional background.
• Communications: messages, feedback or queries you send us via forms, email, phone or WhatsApp.

b) Information collected automatically

• Device & usage data: IP address, browser/device type, operating system, pages visited, time spent, and referring URLs.
• Cookies & similar technologies: we use cookies and analytics tools (see Section 5) to understand usage and improve our Services.

c) Permissions used by the mobile app (only with your consent)

• Camera / Photos: only if you choose to upload documents or images within the app.
• Location: only if you grant permission, to help locate nearby MedsSeva stores or enable location-based features.
• Notifications: to send you booking updates and service-related alerts.

2. How We Use Your Information

• To provide, operate and improve our healthcare, pharmacy and diagnostic franchise services;
• To process and confirm lab test bookings and coordinate sample collection;
• To respond to franchise, career and general enquiries;
• To send service-related communications such as booking confirmations, reports and reminders;
• To maintain security, prevent fraud and comply with legal obligations;
• To analyse usage trends and improve website/app performance.

We do not sell or rent your personal information to any third party.

3. Health-Related Information

Diagnostic booking details (such as tests selected and reports) are treated as sensitive personal data. Access is restricted to authorised personnel and partner labs involved in fulfilling your booking, and this data is used only to deliver the requested service.

4. Sharing of Information

We share personal information only in the following limited circumstances:

• Service partners: partner diagnostic laboratories, phlebotomists and franchise outlets — only to the extent required to fulfil your booking or request.
• Payment processing: payments (where applicable) are processed by Razorpay. We do not store your card, UPI or banking credentials on our servers. Razorpay's own privacy policy applies to payment data.
• Service providers: hosting, email delivery and analytics providers who process data on our behalf under confidentiality obligations.
• Legal requirements: where disclosure is required by law, court order or government authority.

5. Cookies & Analytics

Our website uses:

• Google Analytics — to measure traffic and usage patterns;
• Meta (Facebook) Pixel — to measure the effectiveness of our advertising.

These tools may set cookies and collect device identifiers. You can control cookies through your browser settings and opt out of personalised advertising via Google and Meta ad settings.

6. Data Retention

We retain personal information only as long as necessary for the purposes described above, or as required under applicable Indian law (including tax, accounting and healthcare record-keeping requirements). When data is no longer needed, it is securely deleted or anonymised.

7. Data Security

We use reasonable security practices and procedures, including HTTPS encryption in transit, restricted access controls, and secure server infrastructure, to protect your information from unauthorised access, alteration or disclosure. However, no method of transmission over the internet is 100% secure.

8. Your Rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of the personal data we hold about you;
• Request correction or updating of inaccurate or incomplete data;
• Request erasure of your personal data;
• Withdraw consent previously given;
• Nominate another individual to exercise your rights in case of death or incapacity;
• Lodge a grievance with us, and thereafter with the Data Protection Board of India.

To exercise any of these rights, contact us using the details in Section 12.

9. Account & Data Deletion

If you have created an account through our app or website, you may request deletion of your account and associated personal data at any time:

• Visit our Account & Data Deletion page; or
• Email us at info@medsseva.com with the subject "Account Deletion Request" from your registered email/mobile.

We will verify your identity and process the deletion within 30 days, except for data we are legally required to retain.

10. Children's Privacy

Our Services are not directed at children under 18. We do not knowingly collect personal data from children. Diagnostic bookings for minors must be made by a parent or legal guardian. If you believe a child has provided us personal data directly, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. Continued use of the Services after changes constitutes acceptance of the updated policy.

12. Contact Us & Grievance Officer

In accordance with the Information Technology Act, 2000, rules made thereunder, and the Digital Personal Data Protection Act, 2023, the contact details of our Grievance Officer are provided below. Grievances are acknowledged within 48 hours and resolved within 30 days.