Purpose & Scope
This Data Protection Statement describes the commitment of Rx HealthConnect Private Limited ("RxHC") to protecting personal information entrusted to us by patients, healthcare advisors, hospitals, diagnostic centres, pharmacies, employees, partners and website users.
This statement applies to all personal information processed through our website, mobile application, CRM, advisor portal, healthcare coordination services and internal operations.
Our Commitment
RxHC supports the principles of the Digital Personal Data Protection Act, 2023 and maintains administrative, technical and organisational safeguards to protect personal information throughout its lifecycle.
Our commitment extends beyond legal compliance — we strive to embed privacy into how we design our services, develop our technology, train our people and engage every stakeholder.
"RxHC is committed to maintaining the confidentiality, integrity and availability of information while delivering trusted Healthcare Coordination, Continuity & Support services."
Information We Collect
Depending on your interaction with RxHC, we may collect:
- Personal details: Name, contact information, date of birth, gender
- Advisor KYC: Identity documents, bank details (where applicable)
- Healthcare coordination information: Voluntarily provided appointment and service preferences
- Technical usage information: IP address, browser type, session data, cookies
We follow the principle of data minimisation — collecting only what is reasonably necessary for the requested service.
Protection Principles
All personal information processed by RxHC is governed by the following principles:
Sharing of Information
Information is shared only with authorised recipients for legitimate purposes:
- Hospitals, diagnostics, pharmacies — to coordinate requested healthcare services
- Payment providers — to process authorised transactions
- Technology partners — to operate our digital platforms
- Government authorities — where legally required
RxHC does not sell, rent or commercially exploit personal information.
Security Measures
RxHC implements a combination of administrative, technical and physical safeguards, including:
- Role-based access controls
- Secure credential management and encrypted communications
- Audit logging and periodic access reviews
- Staff awareness and confidentiality obligations
- Secure infrastructure and periodic security assessments
Your Rights
Subject to applicable law, individuals interacting with RxHC may:
- Request access to their personal information
- Request correction of inaccurate information
- Withdraw consent where applicable
- Submit deletion requests, subject to legal and operational requirements
- Raise privacy-related concerns with our Privacy Officer
Information is retained only as long as operationally or legally necessary and then securely deleted or anonymised where appropriate.
Incident Response
RxHC maintains documented procedures to identify, investigate, contain and respond to suspected data breaches. In the event of a breach, RxHC will take appropriate steps to:
- Contain the incident and assess the impact
- Notify relevant individuals and authorities where required by applicable law
- Implement corrective measures to prevent recurrence
- Maintain a record of the incident and response actions
Contact Us
For data protection queries, access requests or privacy concerns, please contact:
Privacy Officer — Rx HealthConnect Private Limited
Hyderabad, Telangana, India. This statement is reviewed annually or whenever legal or operational changes occur.