Privacy Policy

1. Who We Are

NuvaHealth Technologies Pvt. Ltd. ("NuvaHealth," "we," "us," or "our") operates a technology platform that connects patients with independent, licensed Registered Medical Practitioners (RMPs) for medical weight management consultations.

NuvaHealth is a technology intermediary under Section 79 of the Information Technology Act, 2000. We do not provide medical advice, prescribe medications, or make clinical decisions. All medical decisions are made solely by the independent doctors on our platform.

2. What Data We Collect

We collect the following categories of personal data when you use our platform:

a) Personal Information

Name, email address, phone number, age, and gender.

b) Health Data

Height, weight, BMI, health goals, medical history shared during consultation, and any information you provide through our intake forms. Health data is classified as sensitive personal data under the Digital Personal Data Protection Act, 2023 (DPDP Act).

c) Device and Usage Data

Browser type, device type, IP address, pages visited, time spent on pages, and interaction patterns.

d) Marketing and Referral Data

UTM parameters, referral source, campaign identifiers, and landing page information used to understand how you found our platform.

3. Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), we process your personal data based on:

• Explicit consent: You provide consent when you submit your information through our forms or register on the platform. You may withdraw consent at any time.
• Legitimate uses: Processing necessary to fulfil our obligations to you, such as connecting you with a doctor or facilitating prescription fulfilment.
• Legal obligations: Retention of medical and prescription records as required under the Telemedicine Practice Guidelines (TPG) 2020 and applicable Indian law.

4. How We Use Your Data

• Connecting you with licensed doctors for medical consultations
• Facilitating prescription fulfilment through licensed pharmacy partners
• Communicating with you about your consultations, appointments, and platform updates
• Improving our platform, services, and user experience
• Sending you relevant health and wellness communications (with your consent)
• Complying with legal and regulatory requirements, including maintaining records as mandated by TPG 2020
• Detecting and preventing fraud or misuse of the platform

5. Data Sharing

We share your data only in the following circumstances:

• With doctors on the platform: Your health information is shared with the doctor you are connected with, to enable your consultation and medical care.
• With pharmacy partners: If your doctor issues a prescription, relevant details are shared with licensed pharmacy partners solely for prescription fulfilment and delivery.
• Service providers: We use trusted third-party service providers for hosting, analytics, and communication. These providers are contractually bound to protect your data.
• Legal requirements: We may disclose data if required by law, court order, or government authority.

We never sell your personal data to third parties. We do not share your data with insurers, employers, or any other parties without your explicit consent.

6. Data Storage and Security

• All data is stored on servers located in India (Mumbai region), in compliance with the DPDP Act's data localisation requirements.
• Data is encrypted both in transit (TLS) and at rest.
• We implement role-based access controls to ensure only authorised personnel can access personal data.
• We conduct regular security reviews and follow industry-standard practices to protect your information.

7. Data Retention

• Prescription and consultation records: Retained for a minimum of 3 years from the date of consultation, as required under the Telemedicine Practice Guidelines (TPG) 2020.
• Lead and account data: Retained until you request deletion or withdraw consent, unless retention is required by law.
• Usage and analytics data: Retained in anonymised or aggregated form for platform improvement purposes.

8. Your Rights Under the DPDP Act, 2023

As a data principal under the DPDP Act, you have the following rights:

• Right to Access: You can request a summary of your personal data and how it is being processed.
• Right to Correction: You can request correction of inaccurate or incomplete personal data.
• Right to Erasure: You can request deletion of your personal data, subject to legal retention requirements.
• Right to Withdraw Consent: You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Nominate: You may nominate another person to exercise your rights on your behalf in the event of your death or incapacity.
• Right to Grievance Redressal: You may raise a complaint with our Grievance Officer or the Data Protection Board of India.

To exercise any of these rights, please contact us at contact@nuvahealth.in.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and provide a personalised experience
• Analyse platform usage and performance through analytics tools
• Track UTM parameters and referral sources to understand how users discover our platform

You can manage cookie preferences through your browser settings. Note that disabling cookies may affect some platform functionality.

10. Children's Data

Our platform is intended for users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from a minor, we will promptly delete it. If you believe a minor has provided us with personal data, please contact us immediately.

11. Data Protection Officer

In accordance with the DPDP Act, 2023, we have designated a Data Protection Officer (DPO) who can be reached at:

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by email or through a prominent notice on our platform. We encourage you to review this page periodically. Your continued use of the platform after changes are posted constitutes acceptance of the updated policy.

13. Grievance Officer

In compliance with the DPDP Act, 2023 and the Information Technology Act, 2000, the details of our Grievance Officer are:

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: