Introduction & Privacy Promise
Rx HealthConnect Private Limited ("RxHC", "we", "our" or "us") is committed to protecting the privacy and security of every individual who interacts with our platform. This Privacy Policy explains how we collect, use, store, share, protect and respect your personal information.
Our Promise: We will never sell your personal information. We collect only what we need, use it only for the purposes we disclose, and protect it with appropriate safeguards.
About RxHC
RxHC is a Healthcare Coordination, Continuity & Support Platform that facilitates coordination among patients, healthcare advisors, hospitals, diagnostic centres, pharmacies and healthcare providers.
Important: RxHC is not a hospital, clinic, telemedicine service, insurance company, TPA, pharmacy or diagnostic laboratory. We do not provide medical diagnosis, clinical advice, treatment, prescriptions or insurance underwriting.
Scope of This Policy
This Privacy Policy applies to personal information collected through:
- The RxHC website and mobile application
- The Healthcare Advisor portal and onboarding process
- Patient and family member coordination requests
- Customer support and communication channels
- Payment processing systems
- Cookies, analytics and technical systems
This policy applies to all RxHC users including patients, NRI customers, healthcare advisors, hospital and diagnostic partners, and website visitors.
Definitions
Information We Collect
5.1 Information You Provide
- Contact details: Name, mobile number, email address, residential and/or business address
- Identity information: Date of birth, gender, nationality
- Healthcare coordination details: Appointment preferences, hospital preferences, service requirements, supporting documents voluntarily uploaded
- Advisor KYC: Aadhaar number, PAN number, bank account details, cancelled cheque, identity photographs
- Communication records: Messages, support requests, feedback and survey responses
- Payment information: Transaction references processed via authorised payment gateways (RxHC does not store full card details)
5.2 Information Collected Automatically
- IP address, device type, operating system, browser type and version
- Pages visited, session duration, referral source, click patterns
- Cookie identifiers and session tokens
- Approximate location derived from IP address
5.3 Information from Third Parties
- Information shared by healthcare advisors on behalf of patients they represent
- Referral information from partner hospitals or advisors
- Payment confirmation from authorised payment gateways
Why We Collect Information
We collect information only for specific, disclosed purposes:
- To register accounts, verify identity and onboard healthcare advisors
- To coordinate appointments, hospital services, diagnostic bookings and pharmacy requirements
- To communicate appointment confirmations, service updates and operational notifications
- To process payments and maintain financial records
- To provide customer support and respond to queries
- To comply with legal obligations and regulatory requirements
- To improve platform features, user experience and service quality
- To send newsletters or promotional content where separately consented to
How We Use Your Information
Your information is used strictly in accordance with the purpose for which it was collected. Key uses include:
Lawful Basis for Processing
RxHC processes personal information on the following lawful bases under the Digital Personal Data Protection Act, 2023:
- Consent: Where you have provided explicit consent for a specific purpose
- Contractual necessity: To perform our obligations to you or a service you have requested
- Legal obligation: Where required by applicable Indian law, regulation or court order
- Legitimate interests: For fraud prevention, platform security and internal analytics, balanced against your rights
Sharing of Information
We share your information only to the extent necessary and with authorised recipients:
RxHC does not sell, rent, license or commercially exploit your personal information to any third party.
Healthcare Coordination
When you request healthcare coordination services, relevant information may be shared with the healthcare provider(s) you choose. This sharing is necessary to facilitate the appointment or service and is done on the basis of your request and consent.
RxHC does not control the internal data practices of hospitals, diagnostic centres or pharmacies. We recommend reviewing their privacy policies before confirming appointments.
All healthcare providers we work with are expected to maintain confidentiality standards consistent with applicable medical and data protection laws.
Advisor Privacy
Healthcare Advisors registered with RxHC agree to:
- KYC verification including document submission and identity checks
- Processing of bank details for commission-related purposes
- Operational communications necessary for their role
- Confidentiality obligations regarding patient information they access during coordination
Advisor information is retained for the duration of their association with RxHC and for such periods thereafter as required by law.
Hospital & Partner Privacy
Hospitals, diagnostic centres, pharmacies and business partners that engage with RxHC are required to maintain confidentiality of any information shared with them for coordination purposes. Such partners are not permitted to use information obtained through RxHC for independent marketing or commercial purposes without explicit authorisation.
Payment Information
All payments made through the RxHC platform are processed by authorised third-party payment gateways. RxHC does not store full credit or debit card details on its servers.
Transaction references and confirmation records are retained for accounting, audit and legal purposes as required under applicable Indian financial regulations.
In the event of a payment dispute, we may share relevant transaction information with the payment gateway or financial institution to investigate and resolve the matter.
Cookies & Analytics
RxHC uses cookies and similar tracking technologies to operate and improve our platform. Cookies are small data files placed on your device when you visit our website.
You can control cookies through your browser settings. Disabling certain cookies may affect platform functionality.
Information Security
RxHC implements appropriate administrative, technical and physical safeguards to protect your personal information:
- Role-based access controls — only authorised personnel access your information
- Encrypted data transmission (HTTPS/TLS)
- Secure credential management and password policies
- Periodic security assessments and vulnerability testing
- Staff confidentiality obligations and training
- Audit logging for access to sensitive data
In the event of a security incident, RxHC will notify affected individuals and relevant authorities as required by applicable law, and take prompt steps to contain and remediate the issue.
Data Retention
We retain personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.
When information is no longer required, it is securely deleted or anonymised.
Your Rights
Subject to applicable law, you have the following rights regarding your personal information:
- Access — Request a copy of the personal information we hold about you
- Correction — Request correction of inaccurate or incomplete information
- Withdrawal of Consent — Withdraw consent at any time (this does not affect lawfulness of prior processing)
- Deletion — Request deletion of your data, subject to legal and operational requirements
- Grievance — Raise a complaint with our Privacy Officer or escalate to the Data Protection Board of India
To exercise any of these rights, please contact our Privacy Officer using the details in Chapter 21.
Children's Privacy
RxHC does not knowingly collect personal information directly from children below 18 years of age without verifiable parental or guardian consent. If you believe we have inadvertently collected such information, please contact us immediately and we will take prompt steps to delete it.
When coordinating healthcare services for a child, a parent or legal guardian must provide consent and act as the point of contact with RxHC.
NRI & International Users
RxHC primarily serves users within India. NRI customers and international users accessing our platform agree that their information will be processed and stored in India in accordance with Indian law, including the Digital Personal Data Protection Act, 2023.
We take appropriate contractual measures when transferring data, where applicable, to ensure adequate protection consistent with Indian legal requirements.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our services, legal requirements or data practices. When we make material changes:
- The updated policy will be published on our website with a revised effective date
- Registered users may be notified by email or in-platform notification for significant changes
- Continued use of our platform after the effective date constitutes acceptance of the updated policy
We encourage you to review this policy periodically to stay informed.
Contact Our Privacy Officer
For privacy-related queries, access requests, consent withdrawal or data protection concerns, please contact our Privacy Officer at services@rxhealthconnect.com. Registered Office: Flat No E-501, The Nest Pranit Happy Homes, Srinivas Colony, Hyderabad – 500090, Telangana.
Frequently Asked Questions
Does RxHC sell my data?
No. RxHC does not sell, rent or commercially exploit personal information. Your data is used only for the purposes described in this policy.
Who sees my health-related information?
Only the healthcare providers necessary to coordinate your requested service, and authorised RxHC personnel involved in delivery of that service. We follow a strict need-to-know principle.
Can I request deletion of my data?
Yes, subject to legal and operational requirements. Some records (e.g., financial transactions) must be retained for periods specified by law even after a deletion request.
How do I opt out of promotional messages?
You can opt out of promotional communications at any time by replying "STOP" to SMS messages, clicking the unsubscribe link in emails, or contacting support@rxhealthconnect.com. Operational messages (appointment confirmations, account notifications) will continue as necessary to deliver your requested services.
Is my payment information stored by RxHC?
No. Full card or bank details are processed directly by authorised payment gateways and are not stored on RxHC servers. We only retain transaction references and confirmation records for accounting purposes.
What happens to my data if I stop using RxHC?
Your information will be retained for the period required by law or until you request deletion. After that, it is securely deleted or anonymised.