IPASS Solutions Private Limited and its affiliates are engaged in the business of providing web-based tailoring and boutique solutions to facilitate connections between customers that seek specific services and service professionals that offer these services hereinafter defined as IPASS. The terms "We" / "Us" / "Our" individually and collectively refer to each entity being part of the definition of IPASS and the terms "You" /"Your" / "Yourself" refer to the users. This Policy outlines our practices in relation to the collection, storage, usage, processing, and disclosure of personal data that you have consented to share with us when you access, use, or otherwise interact with us at our application and/or website. This Privacy Policy is a contract between You and the respective IPASS entity whose platform You use or access or You otherwise deal with. This Privacy Policy shall be read in consonance with the respective Terms and conditions of IPASS which is available here https://www.ipasssolutions.com/terms-conditions.
Content and Purpose
- This Website is a digital platform that serves as an integrated online interface facilitating seamless access to a broad spectrum of medical and healthcare services. The platform enables registered users, including both medical practitioners and patients, to securely log in through designated portals tailored to their respective user categories— Doctors and Customers/Patients/Users and avail themselves of various healthcare services, including but not limited to scheduling medical consultations, booking appointments, obtaining telemedicine services, submitting and verifying laboratory reports, receiving prescriptions, and engaging in real-time medical discussions with qualified healthcare professionals. The platform further empowers medical practitioners to analyze patient history, assess medical conditions, review uploaded personal and health-related data, and provide informed medical opinions based on the information shared by the patients (hereinafter referred to as “Services”). The Services would be made available to such persons who have subscribed on the Website after obtaining due registration/accepting necessary terms and conditions, in accordance with the procedure as determined by us, from time to time (referred to as “You” or “Your” or “Yourself” or “User”, which terms shall also include persons who are accessing the Website merely as visitors).
- We have implemented reasonable security practices and procedures that are commensurate with the information assets being protected and with the nature of our business. While we try our best to provide security that is commensurate with the industry standards, because of the inherent vulnerabilities of the internet, we cannot ensure or warrant complete security of all information that is being transmitted to us by you
IPASS has provided this Privacy Policy to familiarise You with
- The type of data or information that You share with or provide to IPASS and that IPASS collects from You;
- The purpose for collection of such data or information from You;
- IPASS‘s information security practices and policies; and
- IPASS's policy on sharing or transferring Your data or information with third parties. This Privacy Policy may be amended / updated from time to time. Upon amending / updating the Privacy Policy, we will accordingly amend the date above. We suggest that you regularly check this Privacy Policy to apprise yourself of any updates. Your continued use of Website or provision of data or information thereafter will imply Your unconditional acceptance of such updates to this Privacy Policy.
- Information collected and storage of such Information: The "Information" (which shall also include data) provided by You to IPASS or collected from You by IPASS may consist of "Personal Information" and "Non-Personal Information".
Personal Identifiable Information
- Full Name
- Date of Birth / Age
- Gender
- Contact Details (Phone Number, Email Address)
- Residential Address
- Identity Proof (Aadhaar, PAN, Passport, or other government-issued ID)
Health & Medical Data
- Medical History and Pre-existing Conditions
- Symptoms, Diagnosis, and Prescriptions
- Lab Reports and Diagnostic Test Results
- Consultation Records and Treatment Plans
- Doctor's Notes and Health Assessments
Authentication & Account Information
- Username and Password
- One-Time Password (OTP) for Secure Login
- Multi-Factor Authentication Details
Device & Usage Data
- IP Address
- Device Information (Operating System, Browser Type, Device ID)
- Location Data (With User Consent)
- Log Data (Time of Access, Duration, Clickstream Data)
Payment & Financial Data (If Applicable)
- Payment Transaction Details
- UPI, Credit/Debit Card, or Bank Account Information (Processed via Third-Party Payment Gateways)
Communication & Interaction Data
- Messages and Chats between Users and Doctors
- User Feedback and Reviews
- Customer Support Queries
Other Data
- Your user name along with Your password,
- Your name, Your address, Your telephone number,
- Your e-mail address or other contact information, One-time password
- Your age, Your gender,
- Information regarding your transactions on the Website/Application, (including sales or purchase history),
- Your financial information such as bank account information or credit card or debit card or other payment instrument details including OTP,
- Internet Protocol address,
- Details of services availed by you,
- Any other items of ‘sensitive personal data or information' as such term is defined under the Information Technology (Reasonable Security Practices And Procedures And Sensitive Personal Data Of Information) Rules, 2011 enacted under the Information Technology Act, 2000;
- Store your payment options or preferences or cards for fastening the payment process for future. However, this shall be stored only if you opt to store and save the information. You shall further indemnify IPASS from all liabilities or claims if any fraud transfer is done by you.
- Identification code of your communication device which You use to access the Website/Application or otherwise deal with any IPASS entity,
- Any other Information that You provide during Your registration process, if any, on the Website/Application. Such Personal Information may be collected in various ways including
during the course of You:
- Registering as a user on the Website/Application,
- Availing certain services offered on the Website/Application. Such instances include but are not limited to making an offer for sale, online purchase, participating in any online survey or contest, communicating with IPASS's customer service by phone, email or otherwise or posting user reviews on the items available on the Website/Application, or
- Otherwise doing business on the Website/Application or otherwise dealing with any IPASS entity. We may receive Personal information about you from third parties, such as social media services, commercially available sources and business partners. If you access Website/Application through a social media service or connect a service on Website/Application to a social media service, the information we collect may include your Username associated with that social media service, any information or content the social media service has the right to share with us, such as your profile picture, email address or friends list, and any information you have made public in connection with that social media service. When you access the Website/Application or otherwise deal with any IPASS entity through social media services or when you connect any Website/Application to social media services, you are authorizing IPASS to collect, store, and use and retain such information and content in accordance with this Privacy Policy.
- Non-Personal Information: IPASS may also collect information other than Personal Information from You through the Website/Application when You visit and / or use the
Website/Application. Such information may be stored in server logs. This Non-Personal Information would not assist IPASS to identify You personally. This Non-Personal Information may
include:
- Your geographic location, live location,
- Details of Your telecom service provider or internet service provider,
- The type of browser (Internet Explorer, Firefox, Opera, Google Chrome etc.),
- The operating system of Your system, device and your browsing history including the URL of the Website/Application You last visited before visiting the Website/Application including your internet protocol address.
- The duration of Your stay on the Website/Application is also stored in the session along with the date and time of Your access, Non-Personal Information is collected through various ways such through the use of cookies. IPASS may store temporary or permanent ‘cookies' on Your computer. You can erase or choose to block these cookies from Your computer. You can configure Your computer's browser to alert You when we attempt to send You a cookie with an option to accept or refuse the cookie. If You have turned cookies off, You may be prevented from using certain features of the Website/Application.
- Ads: IPASS may use third-party service providers to serve ads on IPASS's behalf across the internet and sometimes on the Website/Application. They may collect Non-Personal Information about Your visits to the Website/Application, and Your interaction with our products and services on the Website/Application. Please do note that Personal Information and Non-Personal Information may be treated differently as per this Privacy Policy.
- We may in future include other optional requests for information from the User including through user surveys in order to help us customize the Website to deliver personalized information to the User and for other purposes are mentioned herein. Such information may also be collected in the course of contests conducted by us. Any such additional Personal Information will also be processed in accordance with this Privacy Policy.
- Restrictions: We do not knowingly collect Personal Information from children.
You hereby represent to IPASS that:
- The Information you provide to IPASS from time to time is and shall be authentic, correct, current and updated and You have all the rights, permissions and consents as may be required to provide such Information to IPASS.
- Your providing of Information to IPASS and IPASS's consequent storage, collection, usage, transfer, access or processing of the same shall not be in violation of any third-party agreement, laws, charter documents, judgments, orders and decrees.
- IPASS and each of IPASS entities' officers, directors, contractors or agents shall not be responsible for the authenticity of the Information that You or any other user provide to IPASS. You shall indemnify and hold harmless IPASS and each of IPASS entities' officers, directors, contracts or agents and any third party relying on the Information provided by You in the event You are in breach of this Privacy Policy including this provision and the immediately preceding provision above.
- Your Information will primarily be stored in electronic form; however, certain data can also be stored in physical form. We may store, collect, process and use your data in countries other than the Republic of India but under compliance with applicable laws. We may enter into agreements with third parties (in or outside of India) to store or process your information or data. These third parties may have their own security standards to safeguard your information or data and we will on a commercially reasonable basis require from such third parties to adopt reasonable security standards to safeguard your information / data.
- Purpose for collecting, using, storing and processing Your Information: IPASS collects, uses, stores and processes Your Information for any purpose as may be permissible under
applicable laws (including where the applicable law provides for such collection, usage, storage or processes in accordance with the consent of the user) connected with a function or
activity of each of IPASS entities and shall include the following:
- To facilitate Your use of the Website/Application or other services of IPASS entities;
- To respond to Your inquiries or fulfil Your requests for information about the various products and services offered on the Website/Application;
- Processing the User’s orders/requests and provision of Services (including provision of safe Services);
- Completing transactions with Users effectively and billing for the products/Services provided;
- Technical administration and customization of Website;
- Delivery of personalized information and target advertisements to the User;
- Non-personally identifiable information, exclusively owned by the Company may be used in an aggregated or non-personally identifiable form for internal research, statistical analysis and business intelligence purposes including those for the purposes of determining the number of visitors and transactional details, and we may sell or otherwise transfer such research, statistical or intelligence data in an aggregated or non-personally identifiable form to third parties and affiliates;
- To send You important information regarding the Website/Application, changes in terms and conditions, user agreements, and policies and/or other administrative information;
- For proper administering of the Website/Application;
- To conducting academic research and surveys;
- To protect the integrity of the Website/Application;
- To respond to legal, judicial, quasi-judicial process and provide information to law enforcement agencies or in connection with an investigation on matters related to public safety, as permitted by law;
- To conduct analytical studies on various aspects including user behaviour, user preferences etc.;
- To implement information security practices;
- To determine any security breaches, computer contaminant or computer virus;
- To investigate, prevent, or take action regarding illegal activities and suspected fraud;
- To undertake forensics of the concerned computer resource as a part of investigation or internal audit;
- To trace computer resources or any person who may have contravened, or is suspected of having or being likely to contravene, any provision of law including the Information Technology Act, 2000 that is likely to have an adverse impact on the services provided on any Website/Application or by IPASS;
Disclosure and Transfer of User personal Information:
We may need to disclose/transfer User’s Personal Information to the following third parties for the purposes mentioned in this Privacy Policy and the Terms of Use:
- To Government institutions/authorities to the extent required under the laws, rules, and regulations and/or under orders of any relevant judicial or quasi-judicial authority;
- To protect and defend the rights or property of the Company;
- To fight fraud and credit risk;
- To enforce the Company's Terms of Use (to which this Privacy Policy is also a part);
- When the Company, in its sole discretion, deems it necessary in order to protect its rights or the rights of others.
- If otherwise required by an order under any law for the time being in force including in response to inquiries by Government agencies for the purpose of verification of identity, or for prevention, detection, investigation including cyber incidents, prosecution, and punishment of offenses.
- For R & D purposes of the Company and for providing better services to the Users themselves and for the betterment of the business of the corporate or business users.
- The Company makes all User Information accessible to its employees and data processors only on a need-to-know basis. All the employees and data processors, who have access to, and are associated with the processing of User Information, are obliged to respect its confidentiality.
Non-personally identifiable information may be disclosed to third party ad servers, ad agencies, technology vendors and research firms to serve advertisements to the Users. The Company may also share its aggregate findings (not specific information) based on information relating to the User’s internet use to prospective, investors, strategic partners, sponsors and others in order to help growth of Company's business.
We may also disclose or transfer the User Information, to another third party as part of reorganization or a sale of the assets or business of Company. Any third party to which the Company transfers or sells its assets will have the right to continue to use the Personal Information and/or other information that a User provide to us.
Data Security & Retention
The Platform implements end-to-end encryption, multi-factor authentication, and access control measures to prevent unauthorized access, data breaches, or loss.
Personal and health-related data shall be stored only for as long as necessary for the purposes outlined in this Policy, in compliance with applicable retention laws.
Upon user request or account termination, data shall be securely deleted, anonymized, or pseudonymized as per legal obligations.
Links to third party websites
Links to third-party advertisements, third-party websites or any third-party electronic communication service may be provided on the Website/Application which are operated by third parties and are not controlled by, or affiliated to, or associated with, IPASS unless expressly specified on the Website/Application.
IPASS is not responsible for any form of transmission, whatsoever, received by You from any third-party website. Accordingly, IPASS does not make any representations concerning the privacy practices or policies of such third parties or terms of use of such third-party websites, nor does IPASS control or guarantee the accuracy, integrity, or quality of the information, data, text, software, music, sound, photographs, graphics, videos, messages or other materials available on such third-party websites. The inclusion or exclusion does not imply any endorsement by IPASS of the third-party websites, the website's provider, or the information on the website. The information provided by You to such third-party websites shall be governed in accordance with the privacy policies of such third-party websites and it is recommended that You review the privacy policy of such third-party websites prior to using such websites.
Analytics
We may use third-party Service Providers to monitor and analyse the use of our Service.
Google Analytics
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.
You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.
Data Sharing & Third-Party Disclosures
- The Platform shall not sell, trade, or disclose personal data to third parties except in the following cases:
- With explicit user consent for referrals, specialist consultations, or laboratory services.
- Where disclosure is required by law enforcement, courts, or regulatory bodies.
- With authorized third-party service providers, strictly for operational purposes (e.g., payment processing, cloud storage, analytics).
- Third-party processors are contractually bound to maintain confidentiality and data security standards.
User discretion and opt out
You agree and acknowledge that You are providing your Information out of your free will. You have an option not to provide or permit IPASS to collect Your Personal Information or later on withdraw Your consent with respect to such Personal Information so provided herein by sending an email to the grievance officer or such other electronic address of the respective IPASS entity as may be notified to You. In such case, You should neither visit any Website/Application nor use any services provided by IPASS’s entities nor shall contact any of IPASS entities. Further, IPASS may not deliver products to You, upon Your order, or IPASS may deny you access from using certain services offered on the Website/Application.
You can add or update Your Personal Information on regular basis. Kindly note that IPASS would retain Your previous Personal Information in its records.
Cookie Policy
The Website uses cookies, and while visiting or using the Website You accept our use of the cookies. We may place text files in the browser files of Your computer system. A cookie itself does not contain personal information and it will only enable Us to relate Your use of the Website and Your behaviour on the Website to information that You have specifically and knowingly provided. The only personal information that a cookie can contain is the information You supply to the cookie. A cookie can’t read data off Your hard disk or read cookie files created by other websites.
We may place both permanent and temporary cookies. A permanent cookie will remain on your web browser until its expiry date, unless deleted prior to such expiry date. However, most cookies are “session cookies” meaning that they automatically get deleted from your computer system at the end of the session. You can refuse cookies by turning them off in Your browser or alternatively You can also set your browser to warn You before accepting any cookies. Therefore, You are always free to decline Our cookies if Your browser permits, however We use certain cookies to authenticate Users on each page after the User logs on to the Website or accesses any Services. If you, as a casual visitor, have inadvertently browsed any other page of this Website prior to reading this Privacy Policy, and you do not agree with the manner in which such information is obtained, collected, processed, stored, used, disclosed or retained, merely quitting this browser application should ordinarily clear all temporary cookies installed by Us. All visitors, however, are encouraged to use the “clear cookies” functionality of their browsers to ensure such clearing / deletion, as We cannot guarantee, predict or provide for the behavior of the equipment of all the visitors of the Website. Note that You are not a casual visitor if you have willingly submitted any personal data or information to Us through any means, including email, post or through the registration process on the Website. All such visitors will be deemed to be, and will be treated as Users for the purposes of this Privacy Policy, and in which case, this Privacy Policy applies in its entirety to such persons.
The data that cookies collect will be used to process and/or analyse information by third parties to help improve or facilitate Our services, to provide Service on Our behalf, to Website-related services, including but not limited to; maintenance services; fraud detection services; database management; web analytics; monitoring; and evaluation services. If you have any questions about Our cookie usage, please contact Us at the contact details/information mentioned below.
Security Practices and Procedures
IPASS adopts reasonable security practices and procedures to include, technical, operational, managerial and physical security control measures in order to protect the Personal Information in its possession from loss, misuse and unauthorized access, disclosure, alteration and destruction.
IPASS takes adequate steps to ensure that third parties to whom the Users’ Sensitive Personal Data or Information may be transferred adopt reasonable level of security practices and procedures to ensure security of Personal Information.
You hereby acknowledge that the IPASS is not responsible for any intercepted information sent via the internet, and you hereby release us from any and all claims arising out of or related to the use of intercepted information in any unauthorized manner.
User's rights in relation to their personal information collected by the IPASS
All the information provided to the IPASS by a User, including Sensitive Personal Data or Information, is voluntary. User has the right to withdraw his/her/its consent at any time, in accordance with the terms of this Privacy Policy and the Terms of Use, but please note that withdrawal of consent will not be retroactive
Users can access, modify, correct and delete the Personal Information provided by them which has been voluntarily given by the User and collected by the IPASS in accordance with this Privacy Policy and Terms of Use. However, if the User updates his/her information, the IPASS may keep a copy of the information which User originally provided to the IPASS in its archives for User documented herein. In case the User seeks to update or correct, his/her Personal Information, the User may exercise these rights by emailing the IPASS at [email protected] and communicate the change(s) for updating the IPASS’s records.
In case the User does not provide his/her information or consent for usage of Personal Information or subsequently withdraws his/her consent for usage of the Personal Information so collected, the IPASS reserves the right to discontinue the services for which the said information was sought.
DELETION OF ACCOUNT AND PERSONAL DATA
Notwithstanding anything contained in the Terms, you may delete your account as well as your personal data stored with IPASS by sending an email to [email protected]. IPASS may take up to 7 (seven) working days to process your request. Once your account is deleted, you will lose access to all Services. For avoidance of doubt, it is hereby clarified that all data with respect to transactions performed by you on the Platform will be retained in accordance with applicable law.
TRANSFERS OF YOUR PERSONAL DATA
- We comply with applicable laws in respect of storage and transfers of personal data. As a part of your use of the Services, the information and personal data you provide to us may be transferred to and stored in countries other than the country you are based in. This may happen if any of our servers are from time to time located in a country other than the one you are based, or one of our vendors, partners, or service providers is located in a country other than one you are based in.
- By submitting your information and personal data to us, you agree to the transfer, storage, and processing of such information and personal data in the manner described above
BUSINESS TRANSITIONS
You are aware that in the event we go through a business transition, such as a merger, acquisition by another organisation, or sale of all or a portion of our assets, your personal data might be among the assets transferred.
USER GENERATED CONTENT
We invite you to post content on our Platform, including your comments, feedback, pictures, or any other information that you would like to be made available on our Platform. Please note that such content will be available to all visitors to our Platform and may become public. We cannot prevent such information from being used in a manner that is contrary to this Policy, applicable laws, or your personal privacy, and we disclaim all liability (express or implied) in this regard. Further, you agree to comply with all applicable laws in relation to the content uploaded or otherwise shared by you on our Platform. You understand and acknowledge that you will be solely responsible for any information published by you on our Platform that violates applicable laws.
Changes To This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.
We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Grievance Officer
If you find any discrepancies or have any grievances in relation to the collection, storage, use, disclosure and transfer of Your Personal Information under this Privacy Policy or any terms of IPASS's Terms of Use, Term of Sale and other terms and conditions or polices of any IPASS’S RELATED entity, please contact the following:
For IPASS
The grievance officer under Information Technology Act, 2000 shall respond over E-mail: [email protected].
The details of the grievance officer may be changed by us from time to time by updating this Privacy Policy.