Privacy Policy

1. Data Fiduciary Identification

For the purposes of the DPDP Act, AtomCare acts as the Data Fiduciary, determining the purpose and means of processing personal data collected through its Services.

2. Personal Data We Collect

2.1 Information You Provide Voluntarily

We may collect personal data when you:

• Submit enquiry or application forms
• Request consultations or healthcare services
• Upload medical documents or prescriptions
• Communicate with our care team

This may include:

• Name, phone number, email address
• Patient location and contact details
• Health conditions, care requirements, and medical history
• Medical prescriptions, reports, or referrals
• Treating doctor's details (if provided)
• Additional notes or care-related information

2.2 Sensitive Health and Medical Data

We may collect and process sensitive personal data, including:

• Medical conditions and diagnoses
• Care classifications (e.g., palliative, post-surgical, chronic illness)
• Prescriptions, reports, and treatment details

Such data is collected only with explicit consent and solely for healthcare assessment, care coordination, service delivery, and continuity of care.

2.3 Information Collected Automatically

When you use our website or digital platforms, we may automatically collect:

• IP address
• Device and browser details
• Pages visited and interaction timestamps
• Cookies and similar tracking technologies

This data is used for security, analytics, and service improvement.

3. Purpose of Processing

We process personal data for the following purposes:

• Assessing care needs and eligibility
• Scheduling consultations and services
• Coordinating healthcare professionals and caregivers
• Communicating with patients and families
• Processing payments and maintaining records
• Improving service quality and operational efficiency
• Meeting legal, regulatory, and contractual obligations

We do not use personal data for purposes unrelated to healthcare services without additional consent.

4. Legal Basis for Processing

Personal data is processed based on:

• Explicit consent provided by the data principal
• Contractual necessity to provide requested services
• Legitimate use under applicable Indian law
• Legal obligations under healthcare, consumer, or regulatory frameworks

You may withdraw consent at any time, subject to lawful retention requirements.

5. Consent and Withdrawal

By submitting personal or health-related data through AtomCare's forms or platforms, you provide free, specific, informed, unconditional, and unambiguous consent for its processing.

You may withdraw your consent at any time by contacting us using the details provided below. Upon withdrawal, AtomCare will cease processing your data unless retention is required by law or for legitimate medical, legal, or safety purposes.

6. Sharing of Personal Data

We do not sell or trade personal data. Information may be shared only with:

• Authorised doctors, nurses, physiotherapists, caregivers, and medical advisors involved in care delivery
• Third-party service providers supporting operations (e.g., IT systems, payment gateways), under confidentiality obligations
• Government authorities or regulators where required by law

All recipients are required to protect personal data and use it only for authorised purposes.

7. Medical Document Uploads

By uploading prescriptions or medical documents, you confirm that:

• You are authorised to share the information
• The information is accurate to the best of your knowledge
• The documents are shared solely for seeking healthcare services

AtomCare takes reasonable measures to secure uploaded documents.

8. Data Retention

Personal data is retained only for as long as necessary to:

• Fulfil the purposes outlined in this policy
• Provide continuity of care
• Comply with applicable laws and regulatory requirements

Medical records may be retained for longer periods where required by healthcare regulations or for legal defence.

9. Data Security

AtomCare implements reasonable technical and organisational safeguards to protect personal data against unauthorised access, loss, misuse, or disclosure. While we strive to protect data, no system can be guaranteed to be completely secure.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enable essential website functionality
• Analyse usage and performance
• Improve user experience

You may manage cookie preferences through your browser settings.

11. Your Rights as a Data Principal

Subject to applicable law, you have the right to:

• Access your personal data
• Request correction or updating of inaccurate data
• Request deletion of data no longer required
• Withdraw consent

Requests may be submitted using the contact details below.

12. Children's Data

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors without lawful guardian consent.

13. International Data Transfers

Certain operational service providers may process data outside India. Where such transfers occur, AtomCare ensures reasonable safeguards consistent with applicable Indian data protection requirements.

14. Grievance Redressal & Data Protection Contact

In accordance with the DPDP Act, users may contact our designated grievance and data protection contact for concerns related to personal data.

We aim to respond to grievances within 7 working days.

15. Changes to This Privacy Policy

AtomCare may update this Privacy Policy from time to time to reflect changes in legal requirements or operational practices. The revised policy will be published with an updated "Last Updated" date.

Continued use of the Services constitutes acceptance of the updated policy.

16. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India, and courts in Kolkata, West Bengal shall have exclusive jurisdiction.