Privacy Policy

Effective date: 30 Aug 2025  |  Last updated: 30 Aug 2025  |  Version: 1.1

At ArogyaJivan (“ArogyaJivan”, “we”, “us”), we respect your privacy. This Policy explains how we collect, use, share, retain, protect, and transfer information when you use https://arogyajivan.com (the “Website”), contact us by phone/WhatsApp/email, or otherwise interact with us offline. By using the Website, you agree to this Policy.

1) Scope & Roles

We act as a Data Fiduciary/Controller for information we collect and decide how to process (e.g., inquiries, medical triage details), and as a Processor when acting on written instructions from hospitals/clinicians.

2) What We Collect

  • Identity & Contact: name, email, phone, city/country.
  • Health/Sensitive Personal Data: medical history, reports, prescriptions, treatment preferences you share via forms, uploads, chats, calls.
  • Usage & Device: IP address, device/browser, pages viewed, timestamps, referral URLs, approximate location.
  • Communications & Preferences: enquiries, call notes, WhatsApp/email subscriptions, consent records.
  • Operational: support tickets, fraud/abuse indicators, server and security logs.
  • Optional: testimonials/reviews you choose to publish.

3) How We Collect

  • Directly from you (forms, chat, email, phone/WhatsApp).
  • Automatically via cookies, pixels, SDKs, and server logs.
  • From healthcare providers you authorise us to coordinate with.

4) Why We Use Your Data (Purposes & Legal Basis)

  • Care navigation & case handling: to evaluate your needs and connect you with suitable hospitals/doctors (legal basis: explicit consent for health data).
  • Customer support & communication: respond to enquiries, schedule callbacks, send pre/post-treatment information (consent; legitimate interests for non-sensitive service messages).
  • Operations, analytics & improvement: monitor performance, troubleshoot, and improve content/UX (legitimate interests; consent where required).
  • Marketing (optional): newsletters, WhatsApp/SMS/email updates only if you opt in; you can opt out any time.
  • Legal & compliance: to enforce terms, prevent fraud, and comply with law.

5) Who We Share With

We share only what’s necessary for the stated purposes, under confidentiality and data-protection commitments:

  • Healthcare partners you choose (hospitals, clinicians, labs).
  • Service providers (hosting & cloud infrastructure, email/SMS/WhatsApp delivery, analytics/measurement, security/anti-abuse, form/file storage).
  • Government/regulators when required by law or to protect rights/safety.
  • Business transfers (e.g., merger/reorganisation) with notice where feasible.

6) International Transfers

We may process and store data outside India. Transfers are performed in accordance with applicable Indian law, including any government-notified country restrictions. Where required, we implement appropriate safeguards with our processors.

7) How Long We Keep Data (Retention)

We retain data only as long as needed for the purposes or as required by law. Standard periods:

  • General enquiries & call notes: 24 months from last interaction.
  • Medical case files (health data): 5 years from last interaction or as required by applicable medical record rules, whichever is longer.
  • Marketing consents & lists: until you withdraw consent or 24 months of inactivity.
  • Analytics event data: typically 14 months (per tool settings).
  • Server/security logs: 12 months (unless needed longer for investigations).
  • Encrypted backups: up to 90 days rolling.

8) Your Rights & Choices

You may exercise the following, subject to legal limits:

  • Access your data; Correct inaccuracies; Delete where appropriate.
  • Withdraw consent (we’ll stop processing going forward).
  • Data portability (where technically feasible).
  • Marketing controls: unsubscribe links in emails; reply STOP for SMS/WhatsApp; or use the methods below.

How to submit a request: email privacy@arogyajivan.com with the subject “Data Rights Request”, from your registered email/phone. We aim to respond within 30 days. If we need more time, we’ll let you know.

9) Cookies, Pixels & Tracking

We use cookies and similar technologies to run the site, remember preferences, measure traffic, and improve content. You can manage cookies in your browser and via our preferences panel.

CategoryExamplesPurposeDuration
Strictly Necessary ASP.NET_SessionId, __RequestVerificationToken Session management, security (CSRF), load balancing Session / up to 1 day
Analytics _ga, _ga_* (Google Analytics 4) Measure traffic, pages, and campaigns Up to 14 months
Functional cookie_consent, lang Store choices (consent, language) 6–12 months
Marketing (only if opted in) _fbp / ads pixels (if enabled) Personalised outreach/measurement 90 days–6 months

Note: specific names and durations may change if vendors update their cookies.

10) Security

We apply technical and organisational measures appropriate to risk, including HTTPS in transit, access controls, least-privilege staff access, monitoring, encryption at rest where supported by our vendors, and regular backups. No system is 100% secure; if you suspect unauthorised use, contact us immediately.

11) Incident & Breach Notification

If we become aware of a data breach that is likely to result in a material risk of harm, we will notify affected users and (where required) regulators, and provide guidance on protective steps.

12) Children’s Privacy

Our services are intended for adults. We do not knowingly collect personal data from children under 18 without verifiable parental consent (as required by Indian law). If you believe a child has provided data to us, please write to privacy@arogyajivan.com to request deletion.

13) Marketing Communications

We send marketing emails/WhatsApp/SMS only if you opt in. You can unsubscribe at any time via the link in the email, replying STOP (SMS/WhatsApp), or contacting us. Service or transactional messages related to your case may still be sent.

14) Automated Decisions / Profiling

We do not make decisions that produce legal or similarly significant effects solely by automated processing. We may use limited profiling (e.g., content interest segments) to improve relevance of information, subject to your consent where required.

15) Third-Party Links

The Website may link to external sites we don’t control. Their privacy practices apply; please review their policies.

16) Grievance Redressal / DPO

For questions or complaints about this Policy or our handling of your data, contact our Grievance Officer:

Name: [Grievance Officer Name]
Email: grievance@arogyajivan.com  |  Phone: +91-7400220146
Postal: Jivi AI Solutions Pvt Ltd, B-802, NG Valencia Bldg, Medatiya Nagar, Mira Road (E), Mumbai 401107, India

You may also write to privacy@arogyajivan.com. If you are not satisfied with our response, you may have the right to escalate to the appropriate authority under applicable law.

17) Region-Specific Notices (If Applicable)

EU/UK (GDPR)

Legal bases include explicit consent (health data), contract, legitimate interests (site operations/analytics), and legal obligation. You may have rights to object/restrict processing and to lodge a complaint with your local supervisory authority. If required, we can appoint an EU/UK representative; contact us for details.

California (CCPA/CPRA)

We do not “sell” personal information for money. If we engage in “sharing” for cross-context behavioural advertising, you can opt out via Cookie Settings. California residents may request access/deletion/correction and limit use of sensitive personal information as provided by law.

18) Changes to This Policy

We may update this Policy periodically. Material changes will be highlighted here. Continued use of the Website after changes means you accept the updated Policy.

19) Contact Us