The aim of this privacy policy statement is to inform you (collectively hereinafter referred to as “User”) about Dapperdoc Technologies Private Limited  (“Company”) practices regarding collection, use, disclosure and transfer of Personal Information that is either provided by the User or collected by the Company through User’s use of the Platform (“Privacy Policy”).

Personal Information shall mean information that identifies the User (identifies an individual) and collected by the Company through User’s use of the Platform or provided by User in digital form. 

This Privacy Policy will have to read in conjunction with the Agreement as may be in force from time to time and available here. Further, all other provisions of the Agreement such as amendment, governing and jurisdiction shall mutatis mutandis be applicable to this Privacy Policy.

Capitalized terms used herein and not defined shall have the meaning given to it in the Agreement published on the Platform.

1. For the purposes of providing the Services, through the Platform the Company may collect, process, store and use the following information from the User:
   • Information provided by the User for creation of account on the Platform, including name, email address, addresses, mobile number;
   • Images and PDF files of medical records that are uploaded and stored for easy retrieval as authorised by the user
   • Information regarding the devices through which the User accesses and/or uses the Platform for the purposes of making the User’s account information available throughout all the devices used by the User, and analytical purposes;
   • Information regarding Users’ visits to the Platform;
   • Information about Users’ geographical location;
   • Information submitted by the User on the Platform for obtaining the Services through the Platform;
   • Information relating to Products the User may purchase on or through the Platform;
   • Information relating to any transaction that the User may enter into on or through the Platform;
   • User’ computer browser information and IP address to help diagnose problems with Platform server and for the purposes of gathering broad demographic information; and
   • Financial information of the User such as billing address, a credit / debit card number and a credit / debit card expiration date and/ or other payment instrument details including bank account details of the User, if required
2. The User hereby expressly and irrevocably consents to the collection, storage, processing and use of the information stated in paragraph 1 above.
3. Permissions
4. The User hereby acknowledges that the Company as part of its service offering through the Platform amongst other things enables the User to avail certain Products from Service Provider. For this purpose, at the User’s specific request, the Platform will collect, retrieve, process, analyse, store and transmit data relating to the User. Such data retrieved, collected by the Platform, will be automatically processed, analysed and represented in a manner required by the Service Provider (specifically chosen by the User) (“Resultant Data”). The User agrees to the transmission of the Resultant Data to the Service Provider as may be selected by the User.
5. The User hereby expressly and irrevocably consents to the collection, storage, processing, analysis and use of the data relating to the User by the Platform, and to creation and transmission of Resultant Data to the Service Provider as set out in paragraph 4 above.
6. The Company for the purposes of effectively providing the Services, improving the Platform and for statistical and analytical purposes, anonymises the Resultant Data. Anonymisation as set out herein above shall mean an irreversible process of transforming or converting the Resultant data to a form in which the User cannot be identified using such anonymised data. The User hereby expressly irrevocably consents to storing and use of anonymised Resultant Data.

1. Other than specific use purposes mentioned in paragraph 1 above, Company uses the Personal Information of the User only for the following purposes:
   • effectively providing the Services to the User and to administer the Platform in accordance with the Agreement; and
   • provide necessary alerts to the User, as part of the Services;
2. The Company does not disclose the Personal Information in any manner other than as set out in paragraph 4.1. However, the Company collects, aggregates and anonymises the Personal Information to compile statistical and performance information related to the provision and operation of the Platform. For example, the Company may inform that 5 users from Bengaluru have availed a particular insurance product.

1. If the User chooses to participate in any activity that is offered through the Platform or takes benefit of any feature that is offered through the Platform, the User may be required to furnish some Personal Information to the Company.
2. The User may decline to provide Personal Information that is requested from the User, but this may affect our ability to provide to the User the services requested, or to allow User’s participation in any activity that is offered on the Platform.
3. The User may, at any time, by writing to the Company, at the email address provided below, withdraw his/her consent for collection, use, disclosure and transfer of Personal Information by the Company in accordance with this Privacy Policy. Upon receipt of such a request, the Company will delete the Personal Information of the User from the Platform and provide confirmation of such deletion to the User.

1. Personal Information may be hosted with a third party data centre, and the servers may be located in jurisdictions in India or outside India as may be determined by the Company from time to time. The User acknowledges that the data stored in data centres located outside India may be governed by the laws of the jurisdiction in which the data centre is located. The User expressly and irrevocably consents to the transfer of Personal Information to the data centres or servers operated by the third party service providers located in territories outside India that may not have equivalent laws and regulations regarding protection of personal information.
2. The Company may disclose Personal Information and any Content as follows:
   • to medical practitioners chosen by the User with explicit consent of the User as set out in the Agreement;
   • To Service Providers, to enable the User to obtain Products.
   • To a purchaser or successor entity in connection with the sale, merger, assignment, or other transfer of the Company or any of its affiliates, or a business division of the Company or any of its affiliates, or sale of substantially all of the assets of the Company or any of its affiliates.
   • If the disclosure is required by law, rule, regulation, or order of a court of competent jurisdiction or governmental authority, or regulatory authority.
   • To enforce this Privacy Policy.

The Company takes reasonable measures to protect Personal Information provided on or through the Platform.  The Platform uses Secure Socket Layer (SSL) technology to encrypt all connections to and from the Platform to enhance security of electronic data transmissions. Additionally, any data that is uploaded on the Platform is encrypted and may be accessed only by authenticated persons. The Company ensures that the Company is compliant with security measures that are similar to IS/ISO/IEC 27001, international standard on “Information Technology – Security Techniques – Information Security Management System – Requirements” and such other acceptable standards, for the purpose of securing Personal Information.

The Company also uses cookies to allow the Users to enter their password less frequently during a session in the Platform. Cookies can also help us provide information that is targeted to User’s interests. Most cookies are ‘session cookies’, meaning that they are automatically deleted from the User’s devices’ hard drive at the end of a session. The Users are free to decline the cookies if such User’s browser/device permits, although in that case such User may not be able to use certain features on the Platform and may be required to re-enter their password more frequently during a session.

If the User has questions about this Privacy Policy or needs to contact the Company in connection with the use or disclosure of the Personal Information, please reach out to the Grievance Officer of the Company by sending an email or a letter to:

Grievance and Disputes Office
Attention: Mr. Bharat Srinivasamurthy 
E-mail: bharat@docmydoc.com

Grievance Officer, as required under the Information Technology Act, 2000 is: Mr. Bharat Srinivasamurthy

1. The Company reserves the right to modify this Privacy Policy without the User’s consent. The Company may inform the User regarding modifications to the Privacy Policy by displaying a banner statement on the Platform or including a statement regarding modifications at the bottom of this Privacy Policy. If the User continues to use the Platform after information regarding the modifications is published, the User shall be deemed to have accepted the revised Privacy Policy.
2. This Privacy Policy was last updated on 30th December, 2020.