1. CONSENT
1.1. We request You to carefully read this Privacy Policy and Terms of Use of the Portal before sharing personal information with us. This Privacy Policy applies to current and former visitors of the Portal. By visiting and/or accessing the Portal (or searching for any of the pages on Our Portal), You explicitly consent and agree to the Privacy Policy laid out herein and by providing Us Your personal information yourself or by making use of the Services provided through the Portal or through Third Party Service Providers (as defined under the Terms of Use), You hereby acknowledge for the collection, receipt, storage, use, processing, disclosure and transfer of Your personal information in accordance with the provisions of this Privacy Policy. No liability pertaining to the authenticity/ genuineness/ misrepresentation/ fraud/ negligence, etc. of the information disclosed shall lie on VRMDB Services Pvt Ltd nor will VRMDB Services Pvt Ltd in any way be responsible to verify any information obtained from You.
1.2. Collection, use and disclosure of information which has been designated as Personal Information under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 requires express consent of the User. By affirming Your assent to this Privacy Policy, You provide Your consent to VRMDB Services Pvt Ltd for such use, collection and disclosure for provision of Services.
2. COLLECTION OF PERSONAL INFORMATION
2.1. "Personal Information" includes 'sensitive personal data or information’ (as defined under applicable law) and other information that You share with Us whether directly or in combination with other information or is received from Third Party Service Provider, that personally identifies You or could be used to personally identify You.
2.2. Users: We may collect information such as Your name, address, email, phone number, medical records and medical history, physical, psychological and mental health condition, payment information such as credit card information and other such information as provided by You while rendering Services of the Portal. We may also collect information that You share in the process of User registration, post in Your feedback, reviews, comments etc. on the Portal.
2.3. Non- Personal Information: Information, (viz. type of internet browser and operating system used, domain name of the website from which You came, number of visits, average time spent on the site, pages viewed etc.) may be picked up automatically and without being explicitly provided by You, but during Your interaction with the Portal by the use of certain technologies, such as cookies and web beacons.
2.4. We will be using google gmail, read only permission to sync your health records from multiple sources to TheMedibank
2.5. VRMDB Services Pvt Ltd's use and transfer to any other app of information received from Google API’s will adhere to the Google API services users data policy, including the Limited Use requirements.
2.6. We additionally seek permission for reading & writing files on external storage to allow you to upload & save medical records on The Medibank app which you have full control over whether to share further with doctors or not.
2.7. We don't scan any other files from your storage system other than the files you're explicitly uploading
2.8. We require permission to use images or capture image from camera for updating profile photo, uploading images as medical record or measuring heart rate using Camera.
2.9. We Need access to camera, Images and file upload in order to:
2.9.1. Store medical records
2.9.2. Update user Profile photo
3. We will be using google gmail readonly permissions to sync your appointments from multiple sources to The Medibank
4. COOKIES
4.1. Cookies are alphanumeric identifiers with small amount of data that is stored on the User’s device hard-drive containing information about the User, commonly used as an anonymous unique identifier. VRMDB Services Pvt Ltd and other third party service providers collect information about You using these cookies. Please note, a cookie in no way gives Us access to Your device. Our Portal uses these "cookies" to collect information and to improve Our service. Some cookies and other technologies may serve to recall Personal Information previously indicated by You. Most web browsers are set to accept cookies by default. If You prefer, You can usually choose to set Your browser to remove cookies and to reject cookies. If You choose to remove cookies or reject cookies, this could affect certain features of the Portal.
4.2. Other websites may place their own cookies or other files on Your device, collect data or solicit personal information from You, for which We shall not be held responsible or liable. We encourage You to read the privacy policies of all external sites.
5. USE OF YOUR INFORMATION
5.1. You agree and acknowledge that all information gathered from You, that is, information that is voluntarily provided by You or received from Third Party Service Providers and information that may be automatically collected, may be used by VRMDB Services Pvt Ltd for the following purposes:
5.1.1 to comply with central, state or local laws that require disclosure
5.1.2. to respond to law enforcement officials or to judicial orders, subpoenas or other process
5.1.3. to avert a serious threat to health or safety
5.1.4. to enable the provision of Services opted by You including collating all User medical records, reports and other data
5.1.5. to copy, reproduce, store, distribute, publish, export, adapt, edit and translate Personal Information to the extent reasonably required for the provision of Services by VRMDB Services Pvt Ltd
5.1.6. to provide better products and Services and to programmatically use Your data to give You contextual Services.
5.1.7. to fulfil Your requests for certain Services
5.1.8. to contact You about Our Services
5.1.9. to respond to Your comments, reviews and questions and provide better customer service
5.1.10. to track Your activity on Our digital platforms and personalise and improve Your experience
5.1.11. to understand Your preferences and to enhance, personalise, and customise Your experience using Our Portal
5.1.12. to contact You about Our Services
5.1.13. to use Your information to operate, improve and maintain our site, to prevent fraud and abuse
5.1.14. to fulfil any other purpose for which You provide Us Personal Information and for any other purpose for which You give Us authorisation.
5.2. Please note that We may use Non-Personal Information created by Us without restriction. We may retain Non-Personal Information and will continue to use Non-Personal Information as permitted under this Privacy Policy and applicable law..
6. DISCLOSURE OF YOUR INFORMATION TO THIRD PARTIES
6.1. VRMDB Services Pvt Ltd may use Your personal data or contact information such as, Your name, address, postcode, gender, occupation, age, date of birth, email address, telephone number, company name, job title, and department only when Company require it for the purposes of:
6.1.1. processing Your application to use our Services and to provide You with the requested Services through mobile app
6.1.2. dealing with any complaint, queries or problems reported by You regarding the Services offered by the Company
6.1.3. notifying You of changes in its Services and help improve the Services Company provide to you
6.2. Due to the existing regulatory environment, we cannot ensure that all of your information shall never be disclosed in ways other than those described in this Privacy Policy. For example, but without limiting and foregoing, we may be forced to disclose Your Personal Information to the government, law enforcement agencies or other Third Parties. Under certain circumstances, Third Parties may unlawfully intercept or access transmission or private communications, or abuse or misuse Your Personal Information that they may collect from our Application. Therefore, we do not promise, and you should not expect, that your personally identifiable information or private communications would always remain private. We may share your personal information to those service providers and Practitioners with which you make arrangements through our website. We provide them with the Personal Information needed to make and complete the appointment / answer the query you pose.
6.2.1. We may share our data, including Your Personal Information, with our parent and/or subsidiaries that are committed to serving your needs through use of our Application and related services, throughout the world.
6.2.2. We cooperate with law enforcement inquiries, as well as other third parties to enforce laws, such as: intellectual property rights, fraud and other rights. We can, and You so authorise Us, disclose Your Personal Information to law enforcement and other government officials as We, in Our sole discretion, believe necessary or appropriate, in connection with an investigation of fraud, intellectual property infringements, or other activity that is illegal or may expose Us/ Us or You to any legal liability.
6.2.3. We gather up data such as personally identifiable information and disclose such information in a non-personally identifiable manner to advertisers and other third parties for other marketing and promotional purposes. However, in these situations, we do not disclose to these entities any information that could be used to identify you personally. We may use third-party advertising companies to serve advertisement on our behalf. These companies may employ cookies and action tags (also known as single pixel gifs or web beacons) to measure advertising effectiveness. Any information that these third parties collect via cookies and action tags is completely anonymous
7. GOOGLE ACCOUNT EMAILS (GMAIL)
7.1. A User (HealthCare Provider/Doctor/CareSeeker) may choose to provide explicit consent to connect/integrate the User’s Gmail account(s) with his/her account on the Platform. The following are the information collected from your consented email accounts:.
7.1.1. Medical Records, Lab Test Reports, Care Context Documents. Eka Care Application organizes this information in your account to provide Smart Health Reports
7.2. Connecting your Gmail account enables us to automatically provide updated Smart health insights to CareSeeker. TheMedibank Mobile Application cannot make any medical diagnoses. Please consult a doctor if you are concerned about your health or you have any medical queries. You should never override or reject a doctor's professional advice in favor of any information that you see on TheMedibank.
7.3. You can choose to de-link your Gmail account with the application at any time and/ or you can delete your information by writing to support@themedibank.com
7.4. Once connected, the Platform will securely access and analyze the contents of emails consisting of ‘read-only’ including but not limited to the attachments from HealthCare Providers / Doctors for the purpose of managing and tracking Appointment information and/or Medical Records, such as Lab Reports, Prescription, Radiology Reports, Discharge Summary and consolidating this information in User's TheMedibank account.
7.5. Please note that any data obtained by this integration will be used by the Company solely for providing the Services, updating the User’s Smart Health Reports, & consolidating appointments for a HealthCare Provider/Doctor at one place. We shall not use or transfer any data or information received from the integration of the email addresses with the account on the Platform to third parties for any purpose other than as explicitly authorized by the User.
8. SECURITY
8.1. Your security is important to Us. VRMDB Services Pvt Ltd adopts reasonable security practices and procedures to include, technical, operational, managerial and physical security control measures in order to protect all User information including Personal Information in its possession from loss, misuse and unauthorised access, disclosure, alteration and destruction.
8.2. All data, content and/or all User information is encrypted during transmission and will be stored encrypted at-rest. Vrmdb Services Pvt Ltd shall take reasonable steps to protect Your Personal Information in an effort to prevent loss, misuse, unauthorised access, disclosure, alteration, and destruction.
8.3. VRMDB Services Pvt Ltd assumes no liability or responsibility for disclosure of Your Personal Information due to errors in transmission, unauthorised third-party access, or other causes beyond its control. VRMDB Services Pvt Ltd has undertaken reasonable measures to protect Your rights of privacy with respect to Your usage of the Portal controlled by Us and Services provided herein. However, We shall not be liable for any unauthorised or unlawful disclosures of Your Personal Information made by any third parties who are not subject to Our control.
9. CONFIDENTIALITY
9.1. You further acknowledge that the Portal may contain information which is designated confidential by Us and that You shall not disclose such information without Our prior written consent. Your information is regarded as confidential and therefore, will not be divulged to any third party, unless if legally required to do so to the appropriate authorities or shared as per this Privacy Policy or Terms of Use.
9.2. We will not sell Your Personal Information to any third party or use Your e-mail address for unsolicited mail. Any emails sent by Us will only be in connection with the provision of agreed Services, and You retain sole discretion to seek for discontinuation of such communications at any point of time.
10. USER’S RIGHTS
10.1. All the information provided to VRMDB Services Pvt Ltd by a User, including Personal Information, is voluntary. User has the right to withdraw consent at any time, in accordance with the terms of this Privacy Policy and the Terms of Use, but please note that withdrawal of consent will not be retroactive i.e. We cannot delete the Personal Information for which We are custodians on behalf of Third Party Service Providers. Further, if a Third Party Service Provider ceases to be engaged with VRMDB Services Pvt Ltd, We may be contractually obligated to give such Third Party Service Provider a data export, however, given the nature of data, User may continue to co-owners of such data and VRMDB Services Pvt Ltd will continue to keep the Personal Information including User data for continues provision of Services to User.
10.2. Users can access, modify, correct and delete the Personal Information. However, if the User updates his/ her/ its information, Orbi Health may keep a copy of the information which User originally provided to Orbi Health in its archives for User documented herein. In case the User seeks to update or correct, his/ her/ its Personal Information, the User may exercise these rights by emailing Orbi Health at privacy@orbi.health and communicate the change(s) for updating Orbi Health’s records.
10.3. If a User has inadvertently submitted any Personal Information to VRMDB Services Pvt Ltd prior to reading the Privacy Policy and Terms of Use, and such User does not agree with the manner in which such information is collected, stored or used, then such User can ask VRMDB Services Pvt Ltd, by sending an email to support@themedibank.com containing the rectification required, whether VRMDB Services Pvt Ltd is keeping Personal Information about such User, and every User is also entitled to require VRMDB Services Pvt Ltd to delete and destroy all such information relating to such user (but not other Users) in its possession
10.4. In case User does not provide its information or consent for usage of Personal Information or subsequently withdraws consent for usage of the Personal Information so collected, VRMDB Services Pvt Ltd reserves the right to discontinue Services for which the said information was sought.
11. OPT OUT
11.1. VRMDB Services Pvt Ltd may send You certain notifications regarding promotional offers, marketing offers or regarding the Services being availed by You etc. In case You do not wish to receive them, You may have an option to opt out of the same.
11.2. If You opt out, VRMDB Services Pvt Ltd or its affiliates consents to not send any non-essential (promotional, marketing-related) communications to You, however, We may still send You non-promotional emails, such as emails about Your account.
12. AMENDMENT
12.1. VRMDB Services Pvt Ltd reserves the right to amend the Privacy Policy, as and when required. It is Your responsibility to keep yourself updated of the changes made from time to time. Your continued use of the Portal shall be deemed to be Your acceptance of such changes.
13. GRIEVANCE REDRESSAL
13.1. In compliance with Information Technology Act, 2000 and the rules made thereunder, the Grievance Officer of VRMDB Services Pvt Ltd for the purpose of this Policy shall be:
13.1.1. Grievance Officer
13.1.2. Email Address: support@themedibank.com
13.2. In case You have any questions, comments or concerns about this Privacy Policy or wish to exercise any of the above mentioned rights, You can contact us at support@themedibank.com.